Security, privacy and legal
This page collects how Haechy protects the apps it hosts, which companies process data for us, our legal terms and how to report a problem. Haechy is run by DT Global Ventures Ltd in London. We describe each control and where it stops.
- SecurityEach control, what it does and where it stops.
- RegionsWhere an app, its database and its backups run, and what always passes through the US.
- Sub-processorsThe companies that process personal data for us, for what, and where.
- Privacy noticeWhat we collect, why, how long we keep it and your rights.
- Terms of serviceThe agreement for using Haechy.
- Acceptable useWhat can't run on Haechy and how we deal with reports.
- Report a vulnerabilityHow to tell us about a security problem in Haechy.
- Report abuseAn app on haechy.app that breaks the rules: abuse@haechy.app.
The controls, briefly
- An app can reach only the outside services that the workspace owner or an admin has approved. Detail
- Each app runs in a gVisor sandbox with a read-only file system and no extra Linux capabilities. Detail
- Sign-in is checked at Haechy's gateway before a request reaches the app. Detail
- Each app has its own database, backed up nightly and encrypted in storage. Detail
- Values stored as app settings are encrypted, and every deploy goes through an automated check for written-in keys. Detail
What we don't promise
Our staff can technically reach customer data on our servers. We take vulnerability reports and fix what they find, but we make no claim that Haechy can't be breached.
Who to write to
- Security reports: security@haechy.com
- Privacy requests: privacy@haechy.com
- Abuse: abuse@haechy.com or abuse@haechy.app
- Legal notices: legal@haechy.com
- Everything else: hello@haechy.com or support@haechy.com
Haechy is operated by DT Global Ventures Ltd, company number 16042336, 3rd Floor, 86-90 Paul Street, London EC2A 4NE, United Kingdom.