Privacy Policy.
1. Information We Collect
Hazelink collects only the information necessary to provide and improve our service. We do not sell your personal data.
Account information: Email address, display name, language preference, subscription tier, and authentication identifiers when you sign up (email/password or Google Sign-In via Firebase Authentication).
Device & pairing data: Device names you assign, agent IDs, pairing tokens, connection status, last-seen timestamps, relay routing metadata, and optional wake-on-LAN configuration (MAC address, public hostname). This is required for remote control to function.
Usage & quota data: Feature usage, AI token consumption, file-transfer volumes, session activity, and error/crash reports to operate quotas and improve reliability. Aggregated where possible.
Haze AI chat: Messages you send to Haze and related session metadata are processed to provide AI responses. Chat history may be stored in your account (Firestore) to continue conversations across devices.
Files & clipboard: Content you transfer or sync is relayed to your paired devices. We do not use file contents for advertising or profiling. Relay storage is transient (delivery only), not long-term archival.
Payment information: We do not store card numbers. PayPal (and Thawani when enabled) processes payments. We receive transaction IDs, tier purchased, and payment status only.
PC agent data: Your Windows PC runs a local Hazelink agent that reports system stats (CPU, RAM, GPU, temperatures), running apps/games, media playback metadata, and screenshots when you request remote view. This data is sent only to your authenticated account session.
2. How We Use Your Information
- To operate remote PC control, file transfer, clipboard sync, and device pairing
- To provide Haze AI and enforce plan-based usage limits
- To process subscriptions and send billing receipts
- To send transactional emails (account alerts, launch notices, billing)
- To respond to support requests at support@hazelink.app
- To detect abuse, fraud, and unauthorized access
- To improve reliability using diagnostics and aggregated analytics
We do not use your data for advertising. We do not build behavioral profiles. We do not share your information with data brokers.
3. Remote Access & Your PC
Hazelink lets you control your own computers that you have paired to your account. You must not use Hazelink to access devices you do not own or lack explicit permission to control.
Remote commands (lock, sleep, shutdown, launch apps, screenshots, file transfer) are executed by software you install on your PC. You are responsible for securing your PC, network, and Hazelink credentials.
Screenshots and live preview capture display contents from your monitors and may include sensitive information visible on screen. Only initiate capture on devices and accounts you control.
4. Haze AI & Third-Party AI Providers
Haze is an in-app assistant. Depending on your plan, your messages may be processed by hosted AI providers:
- Google (Gemini) — Free, Core, and Founder tiers at launch
- OpenAI (GPT-4o mini) — Elite tier
- Anthropic (Claude Haiku) — Paid Infinite tier
When you use hosted Haze, relevant message content and limited context (e.g. PC stats if a tool is invoked) is sent to these providers to generate a response. Each provider processes data under their own privacy policy. Infinite users may optionally use their own API key (BYO) instead of hosted AI.
Do not send passwords, financial data, or highly sensitive personal information through Haze. AI outputs may be inaccurate — verify important information yourself.
5. Data Storage & Security
Account, device registry, chat history, and subscription data are stored in Google Firebase (Authentication, Cloud Firestore, Cloud Functions) with encryption in transit (TLS) and at rest.
Feedback submissions are stored in Supabase (PostgreSQL). Feedback is anonymous by default unless you include identifying information in the text.
Pairing tokens and agent secrets are stored server-side to enable secure relay access. Transferred files are relayed for delivery and not retained for advertising purposes.
We retain account data while your account is active. After a deletion request, we delete or anonymize personal data within 30 days, except where law requires longer retention (e.g. payment records).
6. App Permissions
Android: Internet access (required); storage access to save screenshots or downloaded files you request (legacy storage permissions on older Android versions).
iOS / desktop: Network access for relay communication. Native iOS builds may request additional permissions as features expand — we will disclose these in-app before use.
Windows agent: Runs locally with your user privileges to control the PC you install it on. Remove it by uninstalling the agent and revoking pairing in the app.
7. Cookies & Analytics
The Hazelink website uses minimal cookies necessary for functionality: session authentication cookies and language preference storage. We do not use third-party advertising cookies.
We use privacy-respecting analytics (no cross-site tracking, no fingerprinting) to understand aggregate traffic patterns — page views, referral sources, and device types. No personal data is collected at the analytics layer.
You can disable cookies in your browser settings. Core functionality may be affected if session cookies are disabled.
8. Email Communications
By joining the Hazelink waitlist, you consent to receiving a launch notification email when Hazelink opens for early access.
We send the following categories of email: transactional (receipts, account alerts), product updates (major announcements, new features), and support responses. Every non-transactional email includes a one-click unsubscribe link.
We use Resend for email delivery. Your email address is shared with Resend only to the extent necessary to deliver messages. Resend does not use your email for its own marketing purposes.
9. Feedback Submissions
When you submit feedback through the Hazelink feedback form, we collect the content of your submission (title, description, and type). Feedback submissions are not linked to your email address or account by default — they are anonymous unless you include identifying information in the submission text.
We store feedback in our Supabase database and use it to inform product development decisions. We may publicly acknowledge feedback themes without attributing them to individuals.
10. Account Deletion
You may delete your Hazelink account at any time by emailing support@hazelink.app from your registered email or through in-app account settings when available.
Deletion removes your account profile, paired device records, chat history, and subscription linkage from our systems within 30 days. Local data on your PC (the agent) must be removed separately by uninstalling the Windows helper.
Active paid periods are not refunded on deletion; access continues until the end of the current billing period unless otherwise required by law.
11. Children's Privacy
Hazelink is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal data, contact support@hazelink.app and we will delete it promptly.
Users aged 13–17 should use Hazelink only with parental or guardian permission, especially when enabling remote PC control.
12. Your Rights
You have the right to:
- Access — Request a copy of the personal data we hold about you
- Correction — Request correction of inaccurate personal data
- Deletion — Request deletion of your account and associated data
- Portability — Request your data in a machine-readable format
- Objection — Object to processing based on legitimate interests
- Unsubscribe — Opt out of marketing emails at any time
To exercise any of these rights, email support@hazelink.app. We will respond within 14 business days.
13. Third-Party Services
Hazelink uses the following categories of third-party services:
- Google Firebase — Authentication, database, cloud functions, hosting
- Supabase — Feedback and admin data
- PayPal — Payment processing (USD)
- Thawani — Payment processing (OMR, when enabled)
- Google / OpenAI / Anthropic — Hosted Haze AI (plan-dependent)
- Cloudflare — Relay tunnel infrastructure
- Resend — Transactional email
- Google Sign-In — Optional authentication
Each provider has its own privacy policy. We do not use advertising networks, Meta Pixel, or Google Analytics advertising products in the app.
14. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify waitlist and account holders by email at least 14 days before the changes take effect. The date at the top of this page reflects the most recent update.
Continued use of Hazelink after changes take effect constitutes acceptance of the updated policy.
15. Contact
For privacy-related questions, data requests, or concerns, contact us at:
We aim to respond to all privacy inquiries within 5 business days.