Privacy Notice

1. Controller

Haga Labs (the "Company", "we", "us", or "our") is the data controller for the personal information collected through this website and our evaluation services. Until incorporation, the controller is the founder, Mushood Hanif, acting on behalf of the company-to-be. Contact: haga@mushoodhanif.com.

2. Information We Collect

We collect the following categories of personal information:

• Contact information: Name, email address, organization (from the evaluation request form).
• Technical information: IP address, browser type, access times (via Vercel Analytics/Speed Insights).
• Evaluation artifacts: Policies, models, video clips, and related metadata submitted for scoring.
• Communication records: Email correspondence, meeting notes, scope agreements.

3. How We Use Your Information

• To respond to evaluation requests and agree on scope, criteria, and timelines.
• To run the evaluation pipeline and deliver the report.
• To communicate about the engagement, including delivery of results and hashes.
• To improve our pipeline and methodologies (using anonymised, aggregated statistics only).
• To comply with legal obligations.

4. Confidentiality of Customer Evaluations

Haga's own research runs are published with failures. Customer evaluations are confidential unless the customer opts in in writing.

• For private runs, the report is delivered to the customer only. Evidence (overlays, per-clip tables, calibration state) is withheld.
• Hashes of the evidence files are delivered so the customer can verify integrity later.
• Haga retains anonymised aggregate statistics (flag rates, verdict distributions) for internal benchmarking. Raw footage and per-clip evidence are not reused without written permission.
• Retention: private reports and evidence hashes are retained for 12 months after delivery unless the customer requests deletion. Anonymised aggregates are retained indefinitely.

5. Data Sharing

We do not sell personal information. We may share information with:

• Processors: Vercel (hosting, analytics), EmailJS (form delivery), Kaggle (artifact storage). Each processor is bound by a data processing agreement.
• Legal authorities: When required by law or to protect our rights.
• With consent: If you opt in to publish your evaluation results.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal information.
• Object to or restrict processing.
• Data portability.
• Withdraw consent (where processing is based on consent).
• Lodge a complaint with a supervisory authority.

To exercise these rights, contact haga@mushoodhanif.com.

7. International Transfers

Your information may be processed in the United States, Canada, or Pakistan (founder location). We rely on standard contractual clauses or adequacy decisions where applicable.

8. Security

We implement appropriate technical and organisational measures (encryption in transit and at rest, access controls, audit logs). No transmission over the internet is 100% secure.

9. Changes to This Notice

We may update this notice. Material changes will be posted on this page with a revised effective date.

10. Contact

Questions about this notice or our privacy practices:haga@mushoodhanif.com.