Privacy Policy

Last updated: December 2, 2025

Introduction

HappyCluster ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

1. Information We Collect

1.1 Information You Provide

  • Account Information: Name, email address, profile information
  • Portfolio Data: Images, descriptions, and metadata you upload
  • Waitlist Information: Name, email, experience level, interests
  • Communication Data: Messages, feedback, and support requests

1.2 Automatically Collected Information

  • Session Data: Anonymous session identifiers stored in secure cookies
  • Usage Data: Pages viewed, features used, time spent
  • Device Information: Browser type, operating system, IP address
  • Performance Metrics: Page load times, error logs

1.3 AI-Processed Data

  • Portfolio Embeddings: Vector representations of your portfolio images
  • Image Descriptions: AI-generated descriptions of uploaded images
  • Match Data: Compatibility scores and match insights

2. How We Use Your Information

  • Provide and maintain our services
  • Process portfolio uploads and generate matches
  • Communicate with you about our services
  • Improve and personalize user experience
  • Analyze usage patterns and optimize performance
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

3. Cookies & Session Management

We use essential cookies for session management and functionality:

  • Session Cookies: Secure, httpOnly cookies to maintain your session (30-day expiration)
  • Functional Cookies: Remember your preferences and settings
  • Analytics Cookies: Understand how you use our service (anonymized)

You can control cookie preferences through your browser settings. Note that disabling essential cookies may affect website functionality.

4. How We Share Your Information

We do not sell your personal information. We may share your information only in these cases:

  • With Your Consent: When you explicitly authorize sharing
  • Service Providers: Third-party services that help operate our platform (hosting, analytics, AI processing)
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Data Retention

  • Anonymous Sessions: Deleted after 180 days of inactivity (unless linked to waitlist)
  • Waitlist Data: Retained until service launch or upon request for deletion
  • User Accounts: Retained while your account is active and for 30 days after deletion
  • Portfolio Data: Retained as long as your account is active

6. Data Security

We implement industry-standard security measures:

  • Encrypted data transmission (HTTPS/TLS)
  • Secure httpOnly cookies (XSS protection)
  • Regular security audits and updates
  • Access controls and authentication
  • Encrypted data storage

7. Your Rights (GDPR/CCPA)

You have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Portability: Receive your data in a portable format
  • Object: Object to processing of your data
  • Withdraw Consent: Withdraw consent at any time

8. Third-Party Services

We use the following third-party services:

  • Supabase: Database and authentication (see their privacy policy)
  • Vercel: Hosting and analytics (see their privacy policy)
  • OpenAI/Google AI: Image processing and embeddings
  • Sentry: Error monitoring (anonymized)

9. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

Quick Summary

  • ✅ We collect only what's necessary to provide our services
  • ✅ We never sell your personal data
  • ✅ We use secure cookies for session management
  • ✅ Anonymous sandbox sessions deleted after 180 days
  • ✅ You can request your data or deletion anytime
  • ✅ We comply with GDPR, CCPA, and privacy regulations
← Back to Home