Privacy Policy

horz, Inc. is the entity responsible for the personal information described in this Policy. For any privacy question or to exercise a right, contact us at the address at the end of this Policy.

Information you provide

• account and contact details — name, email, company, and role when you request access, sign up, or contact us;
• communications — the contents of messages you send us and our correspondence with you;
• billing details — where you purchase, the payment and billing information needed to process it (card data is handled by our payment processor, not stored by us).

Information we collect automatically

• usage data — pages viewed, features used, and actions taken in the Service;
• device and log data — IP address, browser and device type, language, and timestamps;
• cookies and similar technologies — as described in our Cookie Policy.

Information from third parties

We may receive information from service providers, analytics partners, and, where you connect them, third-party services you integrate with the Service.

Customer Data

When you use the Service, you may submit data about your own customers, employees, or operations. We process that data as a processor on your behalf under your customer agreement, not under this Policy.

We use personal information to:

• provide, operate, secure, and improve the Service;
• create and administer accounts and respond to requests, including founding-access requests;
• process payments and manage billing;
• communicate with you about the Service, including service and security notices and, where permitted, updates you can opt out of;
• monitor, prevent, and investigate fraud, abuse, and security incidents; and
• comply with law and enforce our terms.

Where the GDPR or UK GDPR applies, we rely on: performance of a contract with you; our legitimate interests in operating and improving the Service and keeping it secure (balanced against your rights); your consent, where we ask for it (for example certain cookies or marketing); and compliance with legal obligations.

We do not sell personal information. We share it only as needed:

• service providers and subprocessors who process it on our behalf under contract (for example hosting, payments, analytics, and communications);
• professional advisors engaged to deliver a layer, where you direct that work;
• to comply with law, legal process, or a lawful government request, and to protect rights, safety, and the integrity of the Service; and
• in connection with a merger, financing, acquisition, or sale of assets, subject to this Policy.

We are based in the United States and may process personal information there and in other countries. Where we transfer personal information across borders, we use appropriate safeguards, such as standard contractual clauses, where required by law.

We keep personal information for as long as needed to provide the Service, maintain your account, comply with our legal obligations, resolve disputes, and enforce our agreements. When it is no longer needed, we delete or de-identify it in the ordinary course.

We maintain administrative, technical, and organizational safeguards designed to protect personal information, scoped to the sensitivity of the data. Our security practices, and the controls we make available to customers, are described at /security. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. You can also opt out of marketing emails using the link in them. To make a request, contact us at the address below; we will verify and respond as required by law, and will not discriminate against you for exercising a right.

If you are in the EEA or UK, you have the rights described above under the GDPR or UK GDPR, and the right to lodge a complaint with your local supervisory authority. We would appreciate the chance to address your concern first.

If you are a resident of a US state with a comprehensive privacy law (such as California, Colorado, Connecticut, Virginia, and others), you may have the rights to know, access, correct, delete, and obtain a portable copy of your personal information, and to opt out of targeted advertising, sale, or certain profiling. We do not sell personal information or share it for cross-context behavioral advertising as those terms are defined by those laws. To exercise a right, use the contact address below; you may use an authorized agent where the law allows.

We use cookies and similar technologies to operate the site, remember preferences, and understand usage. You can control them as described in our Cookie Policy and through your browser settings.

The Service uses automation, including AI models, to assist the work in each layer. Where a layer prepares an output that has a legal or similarly significant effect — such as a filing or a signed document — a human reviews and approves it, and you remain in control of what is sent on your behalf. We do not make solely automated decisions about you that produce legal effects without a human in the loop.

The Service is for businesses and is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

Our site and Service may link to third-party sites and services that we do not control. Their privacy practices are governed by their own policies, and we encourage you to review them.

We may update this Policy as our practices or the law change. If we make a material change, we will take reasonable steps to notify you, for example by posting the updated Policy or contacting you. Your continued use of the Service after a change takes effect means you accept the updated Policy.