humarains is an AI-powered product page conversion optimisation platform operated by Ekambaram Saraswathi as a private individual ("we", "us", or "our"). As an individual operator, I am the data controller responsible for your personal data under applicable data protection law, including Singapore's Personal Data Protection Act (PDPA), the EU General Data Protection Regulation (GDPR), and other applicable jurisdictional laws.
Location: Singapore
Operating as: Sole proprietor (not a registered company)
Email: hello@humarains.com
For privacy enquiries or to exercise your data rights, contact me at hello@humarains.com.
Account information: When you register, we collect your name, email address, and (if using email/password login) a bcrypt-hashed version of your password. We never store your password in plain text.
Google OAuth: If you sign in with Google, we receive your Google profile ID, name, email, and profile photo URL from Google. We do not access your Gmail, contacts, or other Google data.
Product page content: URLs and manual product page text (title, description, price, CTA) that you submit for analysis. This content is sent to our AI API to generate your analysis.
Analysis results: Scores, recommendations, and copy rewrites generated for your submissions are stored in our database so you can access them later.
Billing information: Payment is processed by Stripe. We store only your Stripe customer ID and subscription status. We never see or store your full card number.
Shopify data (Max plan): If you connect Shopify, we store your shop domain and access token to enable product reads and writes on your behalf.
Usage data: Number of analyses run, plan type, and timestamps. We do not use third-party analytics trackers.
Server logs: Standard HTTP request logs (IP address, URL, status code, timestamp) retained for up to 30 days for security and debugging purposes.
We process your personal data only where we have a valid lawful basis to do so. The table below identifies the basis for each processing activity:
| Processing Activity | Lawful Basis |
|---|---|
| Account creation & authentication | Performance of a contract (Art. 6(1)(b)) |
| Processing product page content for AI analysis | Performance of a contract (Art. 6(1)(b)) |
| Billing & subscription management via Stripe | Performance of a contract (Art. 6(1)(b)) |
| Sending transactional emails (billing receipts, account notices) | Performance of a contract (Art. 6(1)(b)) |
| Server logs & security monitoring | Legitimate interests (Art. 6(1)(f)) — to protect the security and integrity of our systems |
| Fraud prevention & abuse detection | Legitimate interests (Art. 6(1)(f)) — to protect users and the Service |
| Essential cookies (authentication, CSRF protection) | Legitimate interests (Art. 6(1)(f)) — strictly necessary for the Service to function |
| Optional/functional cookies | Consent (Art. 6(1)(a)) |
| Compliance with legal obligations (e.g. financial record-keeping) | Legal obligation (Art. 6(1)(c)) |
We do not use your data to train AI models. Product page content you submit is processed in real time by the Anthropic API and is subject to Anthropic's Privacy Policy.
We do not sell, rent, or share your personal data with third parties for their marketing purposes. We share data only with the following sub-processors, each bound by a Data Processing Agreement (DPA) under GDPR Article 28:
A full list of sub-processors is available on request by emailing hello@humarains.com.
We retain your account data and analyses for as long as your account is active. If you delete your account, your data is removed from our primary database within 30 days. Backups may retain data for up to 90 days before expiry.
Server logs are retained for up to 30 days. Billing records may be retained for up to 7 years to comply with financial record-keeping obligations.
We use the following first-party cookies only. All fonts are self-hosted — we do not load resources from Google Fonts CDN or any third-party CDN that may set cookies.
We do not use advertising cookies, tracking pixels, or third-party analytics cookies.
Where we rely on your consent for optional cookies, you may withdraw consent at any time by clicking the cookie preferences link in the page footer or emailing hello@humarains.com. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
We take security seriously:
No security measure is perfect. If you discover a security vulnerability, please report it to hello@humarains.com.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, email hello@humarains.com. We will respond within 30 days (or within one month, as required by GDPR).
Primary data location: Your personal data is processed and stored in the United States via our sub-processors (Supabase — PostgreSQL hosted on US servers, Render — US-based infrastructure, Anthropic — US API processing).
Singapore residents: Under Singapore's PDPA, transfers of personal data to foreign countries are permitted provided appropriate safeguards are in place. I have ensured all sub-processors maintain security standards equivalent to Singapore's PDPA requirements.
EU/EEA and UK residents: Your data may be transferred to and processed in the United States. These transfers are made in compliance with applicable law using the following safeguards:
You may request a copy of the applicable transfer safeguards or SCCs by emailing hello@humarains.com.
The Service is not directed at children under 13 (or 16 in certain jurisdictions). We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice in the dashboard. Continued use of the Service after notice constitutes acceptance of the updated policy.
For users in Singapore or those whose data is processed in Singapore, humarains complies with the Personal Data Protection Act (PDPA). Under PDPA, you have the following rights:
Personal data is collected, used, and disclosed in accordance with PDPA's requirements for legitimate purposes (contract performance, legal obligations, and legitimate interests). Your data will not be disclosed to third parties except where necessary to provide the Service or as required by law.
To exercise your PDPA rights, contact hello@humarains.com with "PDPA Request" in the subject line. I will respond within 30 days.
If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
Categories of personal information collected: Identifiers (name, email, IP address); commercial information (subscription plan, billing history); internet or other electronic network activity (usage data, analyses run); inferences drawn from usage data.
To exercise your California rights, submit a verifiable consumer request to hello@humarains.com. We will respond within 45 days. You may also designate an authorised agent to make a request on your behalf.
If you connect your Shopify store on the Max plan, we request access using Shopify OAuth with the following permission scopes:
We store only your Shopify shop domain and OAuth access token, encrypted at rest. We do not access orders, customers, payments, or any data beyond the scopes listed above. You may revoke our access at any time from your Shopify Admin under Apps > Manage private apps, or from your humarains dashboard under Settings > Integrations. Upon disconnection, your access token is deleted from our database within 24 hours.
humarains is operated by an individual sole proprietor, not a registered company or corporate entity. As the operator, I assume full personal liability for compliance with all applicable laws, including data protection, consumer protection, tax, and regulatory requirements in all jurisdictions where the Service is offered.
In the event of breach or liability, claimants should direct claims to the operator at hello@humarains.com. There is no separate corporate shield or limited liability company structure.
Users acknowledge this structure and agree that the Service is provided on an individual basis by a sole proprietor in Singapore.
For privacy questions, data requests, or to report a concern, contact us at hello@humarains.com. For formal data protection requests, please include "Data Protection Request" in the subject line.