Privacy Policy

This Privacy Policy explains how HISAR ("HISAR", "we", "us" or "our") processes personal data when you use our website, the operator dashboard, and related services (together, the "Platform"). Please read it alongside our Terms of Service.

1. Overview

HISAR provides an AI-based geospatial intelligence platform, locating images, verifying them against satellite imagery, and tracking change over time. We are committed to handling personal data lawfully, fairly and transparently, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as well as the EU General Data Protection Regulation (GDPR) where it applies to users in the EU/EEA.

2. Information we collect

• Account data, name, work email, organisation, job title and country provided when an account is created for you.
• Content you submit, images, files, coordinates and areas of interest you upload for geolocation or change-detection analysis.
• Usage data, log records, IP address, browser and device type, pages viewed and actions taken in the Platform.
• Communications, messages you send through our contact or demo forms and support tickets.
• Cookies, strictly necessary cookies used for sessions and security (see Cookies).

3. How we use information

• To provide, operate and secure the Platform and deliver the analyses you request.
• To authenticate users, prevent abuse, and maintain security and audit logs.
• To respond to enquiries, provide support, and send service-related notices.
• To improve our models and features, using aggregated or de-identified data where possible.
• To comply with legal obligations and enforce our Terms of Service.

4. Legal bases

Where the UK GDPR (or the EU GDPR) applies, we process personal data on the basis of: performance of a contract; our legitimate interests in securing and improving the Platform; your consent, where we ask for it; and compliance with our legal obligations.

5. Sharing & disclosure

We do not sell personal data. We share it only with: service providers (such as hosting, infrastructure and email delivery) under appropriate confidentiality and data-processing terms; competent authorities where required by law; and parties to a corporate transaction such as a merger or acquisition, subject to this Policy.

6. Data retention

We keep personal data only as long as necessary for the purposes described above, for the life of your account, and as required by law. Content you upload is retained according to your organisation's configuration and deleted on request, unless a legal duty requires otherwise.

7. Security

We apply technical and organisational measures including encryption in transit, hashed credentials, role-based access control, rate limiting and audit logging. No method of transmission or storage is completely secure, but we work continuously to protect your data.

8. International transfers

The Platform may process data in countries other than your own. Where required, we rely on appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA) or standard contractual clauses, for those transfers.

9. Your rights

Subject to applicable law, you may request access to, correction, deletion or portability of your personal data, and you may object to or request restriction of certain processing. You may also withdraw consent where processing is based on it. To exercise these rights, contact us using the details below. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local data-protection authority.

10. Cookies

We use strictly necessary cookies to keep you signed in and to protect against cross-site request forgery. We do not use advertising cookies. You can control cookies in your browser, though disabling necessary cookies may prevent sign-in from working.

11. Children's privacy

The Platform is intended for organisations and professional users and is not directed to children. We do not knowingly collect personal data from anyone under 18.

12. Changes to this Policy

We may update this Policy from time to time. Material changes will be posted on this page with a revised "last updated" date.

13. Contact

Questions or requests about this Policy or your personal data: email [email protected] or reach us through our contact form.