GDPR Privacy Policy

Hylo and GDPR compliance

Hylo is hosted on Heroku, with some data storage on Amazon AWS servers as well. Digital Ocean hosts a proxy service that is involved in directing Hylo traffic to the appropriate servers. There are only a couple of trusted team members that have access to the production databases. We use 2FA to access our hosting services and use a company password manager. Users can contact our team for help managing their account via Intercom, and our policy is to only look at user data when asked to do so by those users. Users have the option to Deactivate or Delete their accounts in Settings. Beyond that, we are working to develop a more formal and thorough Data Protections Policy.