Privacy Policy

1. Information we collect

Depending on how you use Huqo, we may collect:

• account and contact information, such as names, business names, email addresses and phone numbers;
• business profile information, branding, page settings, custom domains and service preferences;
• feedback submitted through Huqo pages, including ratings, comments and any contact details a person chooses to provide;
• subscription, invoice and payment-status information. Card details are collected and processed by Stripe; Huqo does not store complete card numbers;
• support requests, website and custom design briefs, uploaded logos, supplied website content, design preferences and communications with us; and
• technical information such as IP address, browser type, device information, security logs, session cookies and service usage.

2. Google user data

If a business connects its Google Business Profile, Google asks that business to authorise Huqo. Subject to that permission, Huqo may access business accounts, locations, profile information, reviews, review replies and notification settings needed to provide the connected service.

We use Google user data only to provide and improve user-facing Huqo features requested by the connected business, such as importing reviews, displaying review activity, notifying authorised users of new reviews, and preparing or publishing replies when the user instructs Huqo to do so. We do not sell Google user data, use it for advertising, or permit humans to read it except when necessary for security, support with the user's consent, legal compliance, or aggregated internal operations where the data cannot be tied to an individual.

Huqo's use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements.

3. Why we use information

We use information to operate and secure Huqo, create and host business pages, authenticate users, process subscriptions, provide dashboards and analytics, deliver Google review features, respond to support requests, fulfil paid design orders, detect misuse, maintain records and comply with law.

If AI-assisted reply tools are enabled, review text may be processed to generate a suggested response. A business remains responsible for reviewing and approving any response before publication unless it has deliberately enabled an automated workflow.

4. When information is shared

We may share only the information reasonably necessary with service providers that help us operate Huqo, including hosting and security providers, Cloudflare, Stripe, Google APIs, OpenAI for requested AI features, email or notification providers, and professional advisers. We may also disclose information where required by law, to protect users or the service, or as part of a business transfer subject to appropriate safeguards.

Some providers operate outside Australia, including in the United States and other countries where they or their subprocessors maintain systems. Privacy protections in those places may differ from Australian law.

5. Storage, security and retention

We use reasonable technical and organisational safeguards, including access controls, encrypted connections and restricted production credentials. No online system can be guaranteed completely secure.

We retain information while an account is active and for as long as reasonably required to provide services, resolve disputes, meet accounting or legal obligations and protect Huqo. Retention periods vary by data type. We delete or de-identify information when it is no longer reasonably required.

6. Your choices and rights

You may update account and business information through Huqo or ask us to provide access to, correct or delete personal information we hold, subject to legal exceptions. A business can disconnect Google access through Huqo or its Google Account permissions. Disconnecting stops future access but does not automatically remove records we must retain by law.

7. Feedback submitted for a business

A business using Huqo may be independently responsible for feedback and customer information it collects through its page. Questions about how that business uses feedback should also be directed to the business concerned.

8. Complaints and contact

For a privacy question, access or correction request, or complaint, email [email protected]. Please provide enough detail for us to investigate. We will acknowledge and respond within a reasonable period. If you are not satisfied, you may be entitled to contact the Office of the Australian Information Commissioner.

9. Huqo AI and the support assistant

When you use Studio AI or ask Huqo Assistant a question, we send your prompt or message and the context needed for that request to OpenAI, our AI service provider. This can include recent conversation messages, the current public page, selected design text or private-page context you have chosen to share. Artboard dimensions help Studio prepare a suitable result. These features do not give the assistant unrestricted access to your account or other browser tabs.

Studio page-text context is optional for writing and colour requests. It is excluded from image and editable-design generation, which use a brief and artboard dimensions. Private-page context in the support assistant also requires your choice to enable it. The context reader excludes input fields, passwords, payment details and hidden records, and restricts sensitive screens. We mask recognised contact details and secret-like strings, but automated masking cannot identify every private detail. Do not enter secrets or personal information that is unnecessary for your request, and share only material you are authorised to provide.

Huqo stores AI request identifiers, status, generated results and usage records so you can recover requests, review recent results, track credits and prevent misuse. Support conversation history may also remain in your browser during the session and be supplied with a later question. We use account or session identifiers and protected network identifiers to apply limits and security checks. Payment, token-purchase and usage-ledger records are retained under the accounting, legal and service needs described in section 5.

Generated-image preview links expire after seven days. Expired temporary files are removed during routine image-storage cleanup. If you apply an image and save your design, the embedded image is stored with that design under its normal account and storage settings. Downloading a copy places it under your own control. Expiry of a temporary image link does not delete an image already saved within your design.

OpenAI may process information outside Australia. Its own service controls and retention arrangements apply alongside our instructions and safeguards. We do not promise zero provider retention. See OpenAI's privacy information. You can leave optional context off, avoid AI features, or contact us using the details above about access, correction or deletion, subject to applicable legal obligations.

Shared AI visuals and content safety

Image and editable-design generation requires a separate, explicit agreement to the Studio visual-sharing terms. A successful generated visual is submitted to a private review database and may be published in the Studio member library after checks and administrator approval. This applies to new generations made under the displayed sharing terms, not existing private results or uploaded files. Writing results and palettes are not shared.

The shared item contains only the generated artwork or validated editable layout and neutral library details. We do not list the creator's account details, original request reference, brief, conversation, private uploads or complete project. Avoid including private information or material you cannot share in a visual brief. Huqo administrators can review submissions to check content, personal information and third-party rights before publication.

We send prompts and generated results to OpenAI for safety checks, including a content moderation service and checks against Huqo's general-audience rules. We keep the agreed terms version, agreement time, internal account reference, safety outcome and review record to administer sharing and address misuse or rights complaints. A shared library copy is separate from a private temporary preview and can remain after its preview link expires. Contact Huqo Support for an access, privacy, rights or removal request. Withdrawal from the library stops new access but cannot recall copies already lawfully exported by other members.

10. Changes to this policy

We may update this policy when Huqo, our providers or legal requirements change. The effective date above identifies the latest version. Material changes will be communicated where reasonably required.