Privacy

Privacy Policy

Here we explain plainly what data we collect when you use Hylance, why, who we share it with, and how you control it.

Last updated: October 27, 2026

1. Data we collect

Account data: your display name, email address, password (stored encrypted; we cannot read it), and your country and photo if you add them.
When you sign in with Google: the name, email and profile photo Google shares with us. We never receive your Google account password.
Activity on the platform: the services and assets you list, and the orders, reviews and messages linked to them.
Form data: what you type into a service request form or the partner application (name, phone, email, details).
Your identity document, if you ask to verify your seller account: the ID card or passport image you upload. It is kept in private, unpublished storage, buyers never see it, only the Hylance verification team opens it through temporary links, and it is used only to verify your identity.
Technical data: IP address, browser and device type, and the pages you visit, through the analytics tools described below.

To run your account, show your services and assets, and manage orders between buyer and seller.
To send necessary email notifications: a new order, a delivery, an asset approval, and replies to forms you sent.
To settle disputes based on the transactions and messages recorded on the platform.
To improve the platform and measure page and marketing campaign performance.
To comply with the law and prevent fraud and abuse.

We use one essential cookie to sign you in and keep your session.
We use Vercel Web Analytics to measure visits without cookies or cross-site tracking.
We may use Google Analytics and Meta Pixel to measure how well ad campaigns work. You can turn them off in your browser settings or with blocking tools, and doing so will not affect how you use the platform.

The other party in a deal: the seller sees the buyer's name and the order details, and the buyer sees the seller's name and verification status.
The technical providers that run the platform: hosting (Vercel), database (Supabase), email (Resend) and sign-in (Google). Each processes data on our behalf under its own policies.
Official authorities, where the law requires it.
We do not sell your personal data to any third party.

We keep your account data for as long as your account exists, and transaction records for as long as needed to settle disputes and meet legal obligations.
Data travels over an encrypted connection (HTTPS), and passwords are stored with a secure hashing algorithm.
Access to the database is limited to the operations team, for support and review purposes only.

To view and correct your data from your dashboard or by contacting us.
To ask us to delete your account and data, except for transaction records we are legally required to keep.
To opt out of marketing messages at any time; operational notifications about your orders remain necessary for your account to work.

The platform is for people aged 18 and over. If we learn that an account belongs to a minor, we will delete it.

We may update this policy, and we show the date of the last update at the top of the page. Continuing to use the platform after an update means you accept it.

Send your request to [email protected] and we will reply within business days. See also the Terms and Conditions and the Rules and Policies.