HIKARU aperture sealHIKARU

Legal

Privacy Policy

Effective date: August 2, 2026 · Hikaru Holdings, Inc.

1. Who we are

Hikaru Holdings, Inc. (“Hikaru”, “we”, “us”) operates tryhikaru.com and the HIREX waitlist. Hikaru is the data controller (or equivalent under your local law) for the personal data described in this policy. You can reach us at any time at alex@tryhikaru.com.

2. Data we collect

When you join the HIREX waitlist we collect:

  • Full name
  • Email address
  • Phone number
  • Occupation / what you are working toward
  • Your interest selections (whether you are interested in listing on HIREX, investing on HIREX, or both)
  • IP address (used for rate limiting, abuse prevention, and recorded with your consent as evidence of it)
  • Consent records: the fact that you agreed to this policy, and the timestamp of that agreement
  • Email verification status (whether you confirmed your address via our double opt-in link)

We do not knowingly collect data from children under 16, and we do not collect special-category data (health, race, religion, biometrics, etc.) through the waitlist.

3. Why we collect it (purposes and legal bases)

We use your data only to:

  • Register you on the HIREX waitlist and reserve your place in line
  • Verify your email address through a double opt-in confirmation message
  • Contact you in the future about HIREX — launch updates, early access, and related product communication from the Hikaru team
  • Prevent spam, abuse, and fraudulent signups (rate limiting and honeypot checks)

For users in the EEA/UK (GDPR) our legal bases are your explicit consent (Art. 6(1)(a)) for waitlist registration and communication, and our legitimate interest (Art. 6(1)(f)) in securing the service. You may withdraw consent at any time by emailing alex@tryhikaru.com; withdrawal does not affect processing already performed.

4. Third-party processors

We share your data only with the service providers that run the waitlist, each bound by their own data-processing terms:

  • Vercel, Inc. — website hosting and serverless compute (processes submissions and serves this site)
  • Supabase, Inc. — database hosting where waitlist entries are stored
  • Resend (Plus Five Five, Inc.) — transactional email delivery for verification and follow-up messages

We do not sell your personal data, and we do not share it with advertisers or data brokers.

5. International transfers

Our processors are located in the United States and other jurisdictions. Where required (GDPR Chapter V, UAE PDPL), transfers rely on adequacy decisions, standard contractual clauses, or the processor’s equivalent safeguards.

6. Retention

We keep waitlist data until HIREX launches and for a reasonable period afterward, or until you ask us to delete it — whichever comes first. Verification tokens expire within 48 hours and are deleted after use.

7. Your rights

Regardless of where you live, we honor the following rights:

  • Access — request a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate or incomplete data
  • Erasure — request deletion of your data (“right to be forgotten”)

Region-specific notes:

  • EEA / UK (GDPR) — you also have rights to restrict or object to processing, to data portability, to withdraw consent, and to lodge a complaint with your supervisory authority.
  • California (CCPA/CPRA) — you have the right to know, delete, and correct personal information, and to non-discrimination for exercising your rights. We do not sell or share personal information as defined by the CCPA.
  • Canada (PIPEDA) — you may withdraw consent and request access to or correction of your personal information held by us.
  • UAE (PDPL) — you have the right to access, rectify, erase, restrict, and object to processing of your personal data, and to withdraw consent.

To exercise any of these rights, email alex@tryhikaru.com from the address you registered with. We respond within 30 days.

8. Security

Waitlist submissions are transmitted over HTTPS, stored in an access-controlled database, and API keys are held as server-side environment variables never exposed to the browser. Email addresses are confirmed via double opt-in before any marketing communication is sent.

9. Changes to this policy

If we change this policy we will post the updated version on this page with a new effective date. Material changes will be flagged to waitlist subscribers by email.

10. Contact

Privacy requests, questions, and complaints: alex@tryhikaru.com.

Hikaru Holdings, Inc.