English translation for convenience; the Indonesian version at /privacy is the binding original.
This policy explains the personal data HDRV Studio collects when you use Hazel, why, and your rights over that data. Hazel currently runs as an invite-only closed beta.
Data we collect
- Sign-in identity. Your email address and Google account identifier. Email is stored as a one-way digest for lookups, plus the copy used to send sign-in codes.
- Creator profile. Display name, bio, city, language, interests, date of birth, and country — used to determine challenge eligibility.
- Social accounts. The platform, handle, and public profile URL you connect, used to verify that submissions are really yours.
- Participation. Challenges you join, consents you give, submission links you send, and their public performance metrics.
- Technical records. Session times, device identifiers, and IP addresses in digest form — used to limit abuse and protect your account.
During the closed beta, Hazel does not process payment data, bank accounts, e-wallets, or tax documents. No real money moves.
Basis and purpose of processing
We process the data above to run the service you asked for: signing you in, assessing eligibility, verifying submissions, computing rankings, and keeping the platform safe. For anything beyond that we ask your consent first, and that consent is recorded together with the document version you agreed to.
Who receives your data
- Authentication providers (Google and Supabase) — proof of identity only.
- The email delivery provider — destination address and sign-in code only.
- The infrastructure providers the service runs on.
Brands funding challenges do not receive your personal data. They see aggregates, and winner identities only after final results are locked. Brands never select participants or change winners.
Retention
Financial evidence, audits, consents, and final results are append-only and kept as long as accountability requires. Other data is kept while your account is active. After the beta ends, data no longer needed will be deleted or anonymised.
Your rights
You may access, correct, request a copy of, and request deletion of your personal data, and withdraw consents you have given. Contact hdrvstudio@gmail.com. Deletion requests do not erase records we must keep as audit evidence, but those records are no longer linked to an active profile.
Security
Sessions are server-side and revocable. Sign-in codes are stored only as digests, single-use, and time-limited. We never ask for your verification code, session token, or invite code by email or chat.
Changes
If this policy changes materially, we notify you in advance and ask for renewed consent where required. Previous versions remain on record.
Contact
HDRV Studio — hdrvstudio@gmail.com.