Privacy
Last updated: 26 October 2026
This policy explains what personal data Hackio, LLC processes through hackio.dev and by email, why, on what legal basis, for how long, and what your rights are. Where we process data of people in the European Union, the General Data Protection Regulation (GDPR) and, for Spain, the Organic Law 3/2018 (LOPDGDD) apply.
1. Controller
- Controller: Hackio, LLC
- Address: 2834 Maud Street, Wilmington, DE 19801, USA
- Privacy contact: hello@hackio.dev
2. What data we process
- What you give us in the form: name, email, company, company website, the description of the process you want to automate and, if you choose, an approximate budget and how you heard about us. Also the language of the page you write from.
- What you send us by email at hello@hackio.dev, including attachments.
- Technical data: the IP address of whoever submits the form is used, in memory only and for a few minutes, to limit abusive submissions; it is not stored with your request. Our hosting provider logs requests for security purposes.
- Cookieless analytics: we measure visits in aggregate (pages viewed, country, device type, performance) without cookies and without identifying you. See the cookie policy.
We do not need special category data; please do not include it in the form.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Replying to your request, carrying out the free audit and, if you ask, preparing a proposal. | Your consent (GDPR art. 6(1)(a)) and steps taken at your request before a contract (art. 6(1)(b)). |
| Keeping your contact in our list of requests to follow up on that conversation. | Legitimate interest in handling and following up on what you asked us (art. 6(1)(f)). We will not send newsletters or marketing without separate consent. |
| Delivering and invoicing contracted services. | Performance of a contract (art. 6(1)(b)) and legal obligations (art. 6(1)(c)). |
| Protecting the site from spam and abuse; measuring visits in aggregate. | Legitimate interest in the security and proper running of the site (art. 6(1)(f)). |
We make no automated decisions with legal effects about you and do no profiling.
4. How long we keep it
- Requests that do not become a project: up to 24 months from the last contact, unless you ask us to delete them sooner.
- Clients: for the duration of the relationship and afterwards for the periods required by legal, tax and accounting obligations.
- Hosting logs: as long as the provider sets, usually days or a few weeks.
5. Who processes data on our behalf
We use these providers as processors, under contracts that bind them to process data only on our instructions:
- Vercel Inc. (United States): website hosting, running the contact form, and cookieless analytics.
- Resend (Plus Five Five, Inc., United States): sending and receiving email and storing the contact list.
We do not sell or hand over your data to third parties. We would disclose it to authorities only where the law requires.
6. International transfers
Hackio, LLC is a US company and its providers are in the United States, so your data is processed outside the European Economic Area. These transfers rely on the EU-US Data Privacy Framework where the recipient is certified and otherwise on the European Commission’s standard contractual clauses. You can ask us for a copy of the safeguards that apply.
7. Your rights
You can ask for access to your data, its correction or deletion, object to or restrict its processing, request portability, and withdraw consent at any time without affecting earlier processing. Write to hello@hackio.dev saying which right you want to exercise; we will reply within one month.
If you believe we have not handled your data properly, you can complain to your local data protection authority; in Spain, the Agencia Española de Protección de Datos (www.aepd.es).
8. If you live in the United States
In the last 12 months we have collected the categories of data described in section 2 (identifiers and contact details, professional information, and aggregate usage data), from the sources and for the purposes stated above. We do not sell personal data or share it for cross-context behavioural advertising, and we do not process sensitive personal information. Depending on your state’s law, you can ask to know what data we hold, correct it or delete it, and you will not be treated differently for exercising these rights. Write to hello@hackio.dev.
9. Security and children
We apply technical and organisational measures appropriate to the risk: encrypted connections, restricted access and providers with security guarantees. This site is aimed at businesses, not at anyone under 16.
10. Changes
If we change this policy, we will publish the new version here with its date.