Legal

Privacy policy

Last updated: 25 March 2026

Who we are

hudall (“we”, “us”, “our”) is a performance tracking platform operated by Formuly Pty Ltd, ABN 66 548 336 550. Our website is hudall.com.

What data we collect

We collect the following information when you use our service:

  • Account information — email address, company name, and country when you sign up.
  • Team member data — names and performance metrics entered by your organisation’s administrators and team members.
  • Usage data — pages visited, features used, and device information to improve our service.
  • Payment data — processed securely by Stripe. We do not store card details.

How we use your data

  • To provide and maintain the hudall platform.
  • To process your subscription and payments.
  • To send transactional emails (verification, password resets, billing).
  • To improve our product and user experience.
  • To respond to support requests.

We do not sell your data to third parties. We do not use your team’s performance data for advertising or profiling.

Data storage and security

Your data is stored on Supabase (Postgres on AWS) in London (eu-west-2). Backups are held in the same region. All data is encrypted in transit (TLS) and at rest. Each organisation’s data is isolated by design with tenant-scoped access controls and Postgres row-level security as a safety net.

Data residency

hudall is single-region by design. All tenant data resides in AWS London (eu-west-2), within UK GDPR and EU GDPR scope. We do not currently offer customer-pickable residency in other regions. If your procurement process requires data outside London, contact us at privacy@hudall.com — it’s on our roadmap for enterprise customers and we can make it happen.

Vercel serves the application from a global edge network for performance, but tenant data only flows to and from the London database. Stripe processes payments globally; we never store card numbers. Resend handles transactional email only (verification, password resets, weekly digest).

Data retention

We retain your data for as long as your account is active. If you cancel your subscription, your data is retained for 30 days to allow reactivation, then permanently deleted. You can request immediate deletion at any time by contacting us.

Your rights

You have the right to:

  • Access — request a copy of the data we hold about you.
  • Correction — ask us to correct inaccurate data.
  • Deletion — ask us to delete your data.
  • Export — download your data in a standard format (CSV).
  • Withdraw consent — opt out of non-essential communications at any time.

Cookies and analytics

hudall.com uses two kinds of measurement: privacy-friendly analytics that load by default, and Google Analytics that loads only after you give consent.

Strictly necessary

On tenant subdomains (your hudall app), a session cookie is set when you log in. This is required for the app to remember who you are. We don’t ask for consent for this — it’s necessary to provide the service.

Analytics — no consent needed

  • Vercel Analytics — counts page views and top referrers in aggregate. No personal data, no cookies, no fingerprinting.
  • Vercel Speed Insights — measures how fast pages load for real visitors. Same privacy posture as Vercel Analytics.

Analytics — only with consent

  • Google Analytics 4 — anonymized IP, no advertising features, country-level location. Loads only if you click "Allow all" in our cookie banner. You can change your choice any time at /cookie-settings.

Search engines

Google Search Console and Bing Webmaster Tools have read-only access to traffic data for our domain. Used for SEO, no personal data collected.

Third-party services

We use the following services to operate hudall:

  • Supabase — database and authentication infrastructure.
  • Vercel — application hosting and deployment.
  • Stripe — payment processing.
  • Resend — transactional email delivery.

Each provider operates under their own privacy policy and is GDPR-compliant.

Children

hudall is not intended for use by anyone under 16. We do not knowingly collect data from children.

Changes to this policy

We may update this policy from time to time. We will notify you of significant changes via email or a notice on our website. Your continued use of hudall after changes constitutes acceptance.

Contact us

If you have questions about this policy or your data, contact us at privacy@hudall.com