Privacy Policy

Last Modified: 13 September 2026

1. Scope and responsible entity

Haokir Inc., a Delaware corporation ("Company", "we", "us"), provides the Hydite, Zorker, Zorker Openlink, and Cauiril product series. This notice covers personal-information processing associated with our websites, Company-managed services, software features that communicate with us, and support.

dashboard.hydite.com is the primary unified control plane for Company-managed accounts, organizations, projects, access entitlements, usage and billing where offered. This does not mean that all workspace data is uploaded to the dashboard or that separate products, projects and local deployments share unrestricted access to data.

We act as a controller for purposes we determine, including account administration, billing and service security. Where we process Customer Data on a business customer's instructions, our processor obligations are governed by the applicable data processing agreement. Contact privacy@hydite.com to request the applicable agreement and processing information. An organization administrator or independent self-hosted operator may be a separate controller.

The Company service-area policy, including the exclusion of mainland China, does not remove privacy rights concerning information already held or prevent lawful privacy requests.

2. Information and purposes

Depending on the product, deployment mode, permissions and functionality used, processing may involve:

Not every product collects every category or uploads all local files. Information comes from you, service interactions and connected providers within the permissions used. Payment and sign-in providers also process their applicable transaction or authentication information. Do not include unrelated credentials or sensitive information in prompts or support uploads.

3. Product and deployment boundaries

Hydite: local development and indexing may process files, symbols and embeddings on your machine. Hosted models, remote embedding providers, connectors and support uploads may transmit content externally. A local index is not a promise that every feature is offline.

Zorker: project-oriented AI workflows may process briefs, conversations, source material, code, previews and artifacts in the selected project environment and connected services.

Zorker Openlink: local and self-hosted operation differs from Company-managed cloud workspaces. Agent execution, browser tasks and retrieval may involve distinct services. Local operation does not automatically imply cloud synchronization; configured external integrations may nevertheless transmit data.

Cauiril: coding-agent sessions may read context, call configured models, invoke permitted tools and record results. Permissions and provider configuration determine the requested operations and transfers.

Independent operators control deployment-specific access, logging, storage and backups. This notice applies to information we process, not every action of an independent operator. We cannot necessarily access or delete files held only on your device or another provider's systems.

4. Models, tools and publication

Requests may send prompts, selected context and tool results to the serving model provider. Enabled routing or fallback can involve alternative providers. Tools may send information to repositories, websites, execution services, deployment platforms and other integrations. Review the feature's settings and permissions.

Provider retention, abuse monitoring, processing locations and training-related terms depend on the applicable arrangement and settings, including whether you use your own account or API key. No portfolio-wide guarantee of zero retention, exclusive local processing or identical provider terms should be inferred.

The Terms do not grant us a general-purpose model-training license to private Customer Data. Additional training use requires a separate, explicit agreement or opt-in. Operational information is used for delivery, security, troubleshooting and improvement within this notice's purposes and applicable lawful bases.

Administrators and collaborators may access information within their authority and available features. Sharing links, publishing artifacts and instructing tools to send content may disclose it to recipients or the public. Removing a source does not necessarily remove recipients' copies.

5. Lawful bases and choices

We process information to provide requested features, administer accounts and payments, enforce permissions and limits, maintain and secure services, respond to support and legal requests, communicate changes and meet legal obligations.

Where the GDPR or a comparable framework applies, processing may be necessary for a contract, a legal obligation, or legitimate interests such as reliability and security, subject to applicable balancing requirements. We seek consent where required. Consent may be withdrawn without affecting prior lawful processing. Acceptance of this notice is not blanket consent.

Eligibility checks may use account, organization, billing and approximate location information, not ethnicity or language. Contact legal@haokir.com to request review of an apparent eligibility error.

6. Recipients

Necessary disclosures may involve infrastructure, hosting, payment, communications, security and support providers; models and integrations used for requested features; authorized administrators, collaborators or selected recipients; advisers or authorities where lawfully required or necessary to protect rights and security; and successors in a corporate transaction, subject to applicable safeguards and notice.

A supported integration does not mean every customer's information is sent to that provider. Contact privacy@hydite.com for subprocessors and transfer details applicable to your contracted service. Independently selected providers may operate under their own notices and terms.

We do not use private Customer Data to send advertisements or disclose it to advertising partners for their own marketing unless expressly provided for that purpose. Any sale, sharing or targeted-advertising practice requiring additional notice, consent or opt-out rights must be separately disclosed and handled as legally required.

7. Cookies and device storage

Web features may use cookies or comparable storage for authentication, security, language and preferences; applications may store settings and project information locally. Optional analytics, advertising or third-party embeds, if enabled, may use additional technologies under applicable notice and consent requirements.

Use available preferences or browser settings, or contact privacy@hydite.com. Where required, optional processing depends on an appropriate choice. Blocking necessary storage may impair requested features. Clearing cookies does not necessarily delete server records or application files. Promotional messages provide an unsubscribe method; necessary account and legal notices may continue.

8. Retention, deletion and security

Retention depends on category, purpose, configuration, contract, security and legal recordkeeping requirements. Content may remain for the applicable workspace/session lifecycle; billing, security and dispute records may require longer retention. Deleted data may remain temporarily in backups or required records under appropriate restrictions. Account closure does not imply immediate deletion of all copies.

Request export, correction or deletion through available controls or privacy@hydite.com. For organization-controlled information, contact the administrator; we assist as required by law and contract. Maintain backups and review retention before terminating a workspace.

We use technical and organizational measures designed to protect information appropriate to the service and risks. No system is perfectly secure. We investigate incidents and provide notices required by law or contract. This notice does not create an unagreed certification, recovery guarantee or data-residency commitment.

9. International processing

Information may be processed in the United States and other countries depending on the service and providers. Service coverage, account location, execution region and processing location are distinct. A particular storage or processing location applies only where expressly provided for the relevant service and data.

Where legally required, transfers rely on a valid mechanism and appropriate safeguards, such as an adequacy decision or contractual safeguards. Request applicable transfer information from privacy@hydite.com.

10. Individual rights

Depending on applicable law, rights may include access, correction, deletion, portability, restriction, objection, consent withdrawal, and opt-outs concerning certain sales, sharing, targeted advertising or automated decisions. Legal conditions and exceptions apply; our commercial service-area policy does not extinguish these rights.

Submit requests to privacy@hydite.com. We may proportionately verify identity and authority and respond within applicable legal periods. Authorized agents may act where permitted. We will not unlawfully discriminate for exercising a right. You may complain to a competent data-protection or consumer authority.

EEA, UK and Swiss rights may include objection to legitimate-interest processing and safeguards for qualifying solely automated decisions with legal or similarly significant effects. Ordinary generated content does not itself establish such a decision about you. California and other US laws may provide category-specific access, correction, deletion and opt-out rights. Applicable recognized opt-out preference signals must be honored for relevant processing.

11. Children

These professional development and productivity tools are not directed to children under 13 or any higher applicable minimum age. Administrators must ensure applicable age and consent requirements are met. Contact privacy@hydite.com about suspected unlawful collection from a child.

12. Changes and contact

We update the revision date and give appropriate notice of material changes. Publication does not replace consent or another required legal step or retrospectively authorize a different processing purpose.

Responsible entity: Haokir Inc. Control plane: dashboard.hydite.com. Privacy: privacy@hydite.com. Legal: legal@haokir.com.