Privacy Policy

01Information you give us

The request form asks for a work email address. Addresses from personal email providers are rejected, and that check runs both in your browser and on our server.

Everything else on the form is optional: company, role, what your evals look like today, the models you run in production, the models you are considering, how urgent the change is, and whether you are open to being a design partner.

The form states: “By joining, you agree to receive Hajer product updates. You can unsubscribe at any time.” Submitting the form is how you give that consent.

Please do not put confidential information, credentials, production data, or other people’s personal data into the form. Those belong in a scoped engagement, not a web form.

02Information recorded with a submission

When you submit the form, our server records a few technical details alongside your answers:

• The page that referred you and a coarse description of your browser, each cut to 300 characters.
• The time of the submission and which of the two forms you used.
• A random submission key that your browser generates, so that a retry or a later follow-up with more detail updates the same record instead of creating a second one. It is not derived from anything about you.
• The domain part of your email address, stored as a separate field so we can see which organisations are asking without collecting anything extra.

Your IP address is read from the request to enforce a rate limit of five attempts per ten minutes. It is hashed in memory for that purpose and is not written to our database. Our hosting provider keeps its own request logs under its own policy.

Submitting the form again with the same email address updates your existing record rather than creating a duplicate.

03Analytics and cookies

We use one analytics service, PostHog, hosted in the European Union, to count visits and see how the page is used. It runs without cookies: the site sets no analytics cookie and stores no analytics identifier in your browser, which is why there is no cookie notice.

Instead of an identifier, PostHog derives a hash on its own servers from your IP address, your browser’s user-agent string, the site’s hostname, and a random value that changes daily and is then deleted. That hash cannot be turned back into your IP address or browser details, and it changes every day, so there is no record that follows you from one day to the next.

Against that hash, PostHog records the pages you view, where you click and how far you scroll, information about your browser and device, an approximate location derived from your IP address, and any errors the page throws so we can see where the site breaks. There is no session replay.

Events Hajer sends on its own account carry only flags: that a request was submitted, which form was used, and whether optional details were included. They never carry your email address or the text you typed.

The only thing the site keeps in your browser is a session-only record of your own submission, so the two forms can share it; it is deleted when the tab closes. We do not respond to Do Not Track signals. Blocking analytics with a browser extension or a content blocker works as expected: the site does not depend on it.

• PostHog Privacy Policy

04How we use the information

We use what you share and what the site records for these purposes:

• To respond to your request and understand whether Hajer fits your setup.
• To send one follow-up email after your address is stored.
• To send occasional product updates, which you agreed to when you submitted the form.
• To operate and protect the site: rate limiting, abuse prevention, and error tracking.
• To understand how the site is used, through the cookieless analytics described above.

05Email from Hajer

After your address is stored, you receive one plain-text follow-up from omar@hajer.ai, sent through Google Workspace, with replies going to hello@hajer.ai. Adding details later does not trigger a second copy.

Product updates are occasional. To stop receiving them, reply to any message or write to hello@hajer.ai and we will remove you from the list. There is no automated unsubscribe link; a person handles each request.

06Legal bases

Where the GDPR or UK GDPR applies, we rely on your consent for product updates; on our legitimate interest in answering inbound requests, keeping the site secure, and measuring how the site is used with the cookieless, non-identifying analytics described above; and, when scoping an engagement, on taking steps at your request before entering a contract.

07Who processes your information

A small number of service providers run the site on our behalf:

• Vercel hosts the website and runs the form’s server code.
• Supabase stores form submissions in a database that only our server can write to.
• Google provides Workspace, which sends our email.
• PostHog provides cookieless product analytics and error tracking, hosted in the EU.

We do not sell personal information and we do not use it for targeted advertising. We disclose information when the law requires it, to protect rights or safety, or as part of a business transfer, in which case this policy continues to apply.

08International transfers

Our providers may process information in the United States and other countries. Where the GDPR or UK GDPR applies, we rely on the contractual safeguards those providers offer, such as standard contractual clauses.

09How long we keep it

We keep your submission while your request is open and while your address remains on the list. Ask, and we delete it. Analytics data is retained for the period configured with PostHog.

10Security

The site is served over HTTPS. Database writes require server-side credentials that are never sent to the browser, and the database enforces row-level security so that no public key can read or write submissions. No method of storage or transmission is completely secure, and we cannot promise otherwise.

11Your rights

Depending on where you live, you may have the right to access the information we hold about you, correct it, delete it, restrict or object to how we use it, receive a copy in a portable format, and withdraw consent you gave earlier. If you are in the EU or the UK, you can also complain to your data-protection authority. California residents have the right to know what we collect, to delete it, to correct it, and not to be treated differently for exercising those rights. We do not sell personal information.

To exercise any of these, email hello@hajer.ai. We may ask you to confirm the request from the address on file, and we respond within the time the applicable law allows.

12Children

The site is for engineering teams and is not directed at anyone under 16. We do not knowingly collect information from children.

13Changes to this policy

When this policy changes, we update the effective date at the top. If a change materially affects how we use information already collected, we tell the addresses on the list.

14Contact

Hajer, hello@hajer.ai.