Privacy Policy

Last updated: July 17, 2026

This Privacy Notice for Haydn Inc. (doing business as Haydn) (“we,” “us,” or “our”), a Delaware corporation with its registered address at 251 Little Falls Drive, Wilmington, New Castle County, Delaware 19808, United States, describes how and why we might access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), including when you:

  • Visit our website at https://haydn.ai, or any website of ours that links to this Privacy Notice
  • Use Haydn — an AI-powered platform that extracts, structures, and organizes portfolio and financial data for investment professionals
  • Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you have any questions, contact us at support@haydn.ai.

Information we process on behalf of our customers. Business customers upload documents and data to the Haydn platform (“Customer Data”). We process Customer Data on behalf of and under the instructions of the relevant customer, as a processor or service provider, governed by our agreement with that customer. This Privacy Notice covers the personal information we process for our own purposes as a controller — such as account, website, and marketing data. If your personal information appears in a customer’s uploaded documents, please direct requests to that customer.

1. What Information Do We Collect?

Personal information you disclose to us. We collect personal information that you voluntarily provide when you register on the Services, express an interest in obtaining information about us or our products, participate in activities on the Services, or otherwise contact us. This may include:

  • names
  • email addresses
  • passwords
  • contact or authentication data

Sensitive information. We do not process sensitive personal information (such as racial or ethnic origin, sexual orientation, or religious beliefs), and we do not collect personal information from third-party sources. All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes.

Information automatically collected. We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, country, general location, and information about how and when you use our Services. This information is primarily needed to maintain the security and operation of our Services and for our internal analytics and reporting. It includes:

  • Log and usage data — diagnostic, usage, and performance information our servers automatically collect, such as date/time stamps, pages viewed, features used, and error reports;
  • Device data — information about the computer, phone, or other device you use to access the Services, such as IP address, browser type, hardware model, and operating system;
  • Location data — imprecise location information inferred from your IP address.

Google API. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

2. How Do We Process Your Information?

We process your personal information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. This includes processing:

  • to facilitate account creation and authentication and otherwise manage user accounts;
  • to deliver and facilitate delivery of the Services;
  • to respond to your inquiries and offer support;
  • to send administrative information, such as details about our products and changes to our terms and policies;
  • to request feedback and contact you about your use of the Services;
  • to send you marketing and promotional communications, in accordance with your marketing preferences — you can opt out at any time (see “What Are Your Privacy Rights?” below);
  • to save or protect an individual’s vital interest, such as to prevent harm.

3. What Legal Bases Do We Rely On?

If you are located in the EU or UK, the General Data Protection Regulation (GDPR) and UK GDPR require us to explain the legal bases we rely on to process your personal information:

  • Consent. We may process your information if you have given us permission to use it for a specific purpose. You can withdraw your consent at any time.
  • Performance of a contract. We may process your information when necessary to fulfill our contractual obligations to you, including providing the Services, or at your request prior to entering into a contract.
  • Legitimate interests. We may process your information when reasonably necessary to achieve our legitimate business interests — for example, to understand how users use our products so we can improve them, or to tell users about our products and services — where those interests do not outweigh your interests and fundamental rights and freedoms.
  • Legal obligations. We may process your information where necessary to comply with our legal obligations, such as cooperating with law enforcement or a regulator, or exercising or defending our legal rights.
  • Vital interests. We may process your information where necessary to protect your vital interests or those of a third party.

If you are located in Canada, we process your information with your express or implied consent, or without consent in the limited circumstances permitted by applicable law (for example, fraud detection and prevention, or compliance with a subpoena or court order).

4. When and With Whom Do We Share Your Personal Information?

We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. We have contracts in place with our third parties designed to safeguard your personal information: they may only process it on our instructions, may not share it with any organization apart from us, and must protect it and retain it only for the period we instruct. The categories of third parties we may share personal information with are:

  • Cloud and hosting providers — our infrastructure runs on Vercel with data stores on AWS infrastructure (see “International Transfers” below);
  • AI service providers — third-party providers that power extraction and related AI features (see “Do We Offer AI-Based Products?” below);
  • Analytics and error-monitoring providers — such as Google Analytics, FullStory, and Sentry;
  • Communications and business tools — providers we use to send email and operate the business.

Business transfers. We may also share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

We do not sell personal information.

5. Do We Use Cookies and Other Tracking Technologies?

We use cookies and similar technologies to operate and secure the Services, save your preferences, and understand how the Services are used. Specifically:

  • Essential cookies — required for core site and account functions, such as authentication and security;
  • Analytics — we use Google Analytics to understand website traffic and usage, and FullStory to understand how visitors interact with our website so we can improve it.

We do not use advertising networks and do not use tracking technologies for targeted advertising. Most web browsers accept cookies by default; you can usually set your browser to remove or reject cookies, though this may affect certain features of the Services.

6. Do We Offer Artificial Intelligence-Based Products?

As part of our Services, we offer products, features, and tools powered by artificial intelligence and machine learning (“AI Products”), such as automated extraction and structuring of financial documents. We provide AI Products through third-party AI service providers; content you submit to AI features is shared with and processed by these providers solely to provide the feature to you.

We do not use your personal information or Customer Data to train our artificial-intelligence or machine-learning models, and our AI service providers process this data solely to provide the Services.

7. International Transfers

The Haydn platform is hosted on Vercel infrastructure in the AWS eu-west-2 (London, United Kingdom) region, where Customer Data is stored at rest. We are a United States (Delaware) company, and some of our service providers process data in the United States or other regions. Where personal information is transferred internationally, we rely on appropriate safeguards recognized under applicable data protection laws, such as standard contractual clauses in our agreements with service providers.

8. How Long Do We Keep Your Information?

We keep your personal information only for as long as necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice requires us to keep your personal information for longer than the period in which you have an account with us. When we have no ongoing legitimate business need to process your personal information, we will delete or anonymize it, or, if that is not possible (for example, because it is stored in backup archives), securely store it and isolate it from further processing until deletion is possible.

9. How Do We Keep Your Information Safe?

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of the personal information we process, including encryption of data in transit and at rest and access controls. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security. You should only access the Services within a secure environment.

10. Do We Collect Information From Minors?

We do not knowingly collect data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18. If we learn that personal information from users under 18 has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from children under 18, please contact us at jeremy@haydn.ai.

11. What Are Your Privacy Rights?

In some regions (such as the European Economic Area, United Kingdom, Switzerland, and Canada), you have rights under applicable data protection laws. These may include the right (i) to request access to and obtain a copy of your personal information, (ii) to request rectification or erasure, (iii) to restrict its processing, (iv) to data portability (if applicable), and (v) not to be subject to automated decision-making. In certain circumstances you may also have the right to object to the processing of your personal information. To make a request, contact us using the details in “How Can You Contact Us?” below. We will consider and act upon any request in accordance with applicable data protection laws.

If you are located in the EEA or UK and believe we are unlawfully processing your personal information, you have the right to complain to your Member State data protection authority or the UK Information Commissioner’s Office. If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing your consent. If we are relying on your consent to process your personal information, you may withdraw it at any time by contacting us. This will not affect the lawfulness of processing before withdrawal.

Opting out of marketing. You can unsubscribe from our marketing communications at any time by clicking the unsubscribe link in our emails or by contacting us. We may still send you service-related messages necessary for the administration of your account.

Account information. To review or change the information in your account or terminate your account, contact us. Upon a termination request, we will deactivate or delete your account and information from our active databases, though we may retain some information to prevent fraud, troubleshoot problems, assist with investigations, enforce our legal terms, and/or comply with legal requirements.

12. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature. No uniform technology standard for recognizing and implementing DNT signals has been finalized, and we do not currently respond to DNT browser signals. If a standard we must follow is adopted in the future, we will inform you in a revised version of this Privacy Notice.

13. Do United States Residents Have Specific Privacy Rights?

If you are a resident of a US state with a comprehensive privacy law (such as California, Colorado, Connecticut, Delaware, Texas, or Virginia), you may have rights including: the right to know whether we are processing your personal data, to access it, to correct inaccuracies, to request deletion, to obtain a copy of the personal data you previously shared with us, and to non-discrimination for exercising your rights. In the past twelve months we have collected only identifiers (such as name, email address, IP address, and account name), retained for as long as you have an account with us. We have not sold or shared personal information for targeted advertising.

To exercise these rights, email us at support@haydn.ai. We will need to verify your identity before acting on your request, and we will only use information provided in your request for verification. You may designate an authorized agent to make a request on your behalf; we may deny a request from an agent who does not submit proof of valid authorization. If we decline to take action on your request, you may appeal by emailing support@haydn.ai; if your appeal is denied, you may submit a complaint to your state attorney general. California residents may also request information under the “Shine The Light” law (Civil Code Section 1798.83) regarding personal information (if any) disclosed to third parties for direct marketing purposes.

14. Do We Make Updates to This Notice?

Yes, we will update this notice as necessary to stay compliant with relevant laws. The updated version will be indicated by an updated “Last updated” date at the top of this Privacy Notice. If we make material changes, we may notify you by prominently posting a notice of the changes or by directly sending you a notification.

15. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may contact our Data Protection Officer (DPO) by email at jeremy@haydn.ai, or contact us by post at:

Haydn Inc.
Data Protection Officer
251 Little Falls Drive
Wilmington, New Castle County, Delaware 19808, United States

16. How Can You Review, Update, or Delete Your Data?

Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correction of inaccuracies, or deletion of your personal information, or to withdraw your consent to our processing. These rights may be limited in some circumstances by applicable law. To submit a request, email us at support@haydn.ai.