Privacy policy

Last updated: October 2026. Operator: Hacall (hacall.com). Questions: use the contact details on hacall.com.

What we do not collect

No email address or phone number is needed to create an account.
We never use your camera. Holograms are made from an avatar or a photo you choose.
No advertising trackers and no third-party analytics.

What we store

Account: your username, a scrambled check value for your password and for your 12-word code (we never receive the password or the words themselves), and your public encryption key with your private key in locked form.
Seller profile: what you enter: business name, type, website, availability, optional email and phone, avatar or photo. These are shown publicly on your promotions.
Promotions: titles, descriptions, prices, photos, videos and audio you upload. These are public.
Possible buyers: when someone calls or messages a seller about a promotion, we record their username, which promotions they asked about, how they made contact and when, so the seller can see it.
Messages: text, photos, documents and voice messages are end-to-end encrypted in your browser. We store only the encrypted data and basic details needed to deliver it (who, when, which conversation). We cannot read the content.
Calls: audio goes directly between the two devices, encrypted. Nothing is recorded. Our server only passes the connection setup.
Security logs: short-term counters of attempts per network address to stop abuse.

Payments

Seller subscriptions are paid through Stripe. Stripe collects your payment details and an email address for receipts under its own privacy policy. We receive only the subscription status, a customer reference and dates. We never see your card.

Cookies and local storage

We use one essential cookie to keep you logged in. Your browser also keeps your unlocked message key and your language choice on your device.

How long we keep data

Until you delete it. Deleting your account (Seller Room → Account) removes your profile, promotions, messages and files.

Your rights

You can see and change your data in the app and delete your account at any time. Under the GDPR you may also ask us for a copy of your data or complain to your data protection authority.

Where data is kept

The service runs on Replit infrastructure. Encrypted messages remain unreadable to the hosting provider and to us.