Privacy Policy

Last updated: 2026-09-22

The Japanese version of this page is the governing text. This English version is provided for convenience; in the event of any discrepancy between the two, the Japanese version controls.

This page describes what information Hashike collects from users of the service and how it is used.

Information we collect

Account info (email, password — hashed by Supabase, never stored in plaintext — company name, optional full name); if you sign in with Google, the email/name/profile photo Google provides (no password); usage data (pages viewed, saved opportunities, notes, feature usage via PostHog); and the email address you give the updates form, with a company name if you choose to add one.

How we use it

To operate the service, authenticate accounts, manage trials and subscriptions, send transactional email (confirmation, password-reset, welcome), understand usage for product improvement, and notify you of material changes.

Third-party services we use

We use Supabase (database/auth), Vercel (hosting), Google (optional sign-in), Resend (email delivery), PostHog (analytics), Cloudflare (DNS/mail routing), OpenRouter (routes the company description you enter in the survey to an AI model that maps it to procurement categories), and DeepL or MyMemory (machine translation of procurement notices). The translation services only ever receive U.S. government notice text, which is public record, and never personal information; MyMemory’s free tier adds what it translates to a public translation memory. We do not sell personal information to third parties.

Cookies & analytics

We use a session cookie to keep you signed in (Supabase Auth). Product analytics run on PostHog, and only if you choose “Accept” on the first-visit banner — “Decline” means it never loads. For visitors who are not signed in, no identifying profile is created. While you are signed in, usage is recorded against your registered email address and company name so we can improve the service. We do not sell that information, and we do not use it to compare or rank users.

If your browser sends a Do Not Track signal, analytics do not run even where consent has been given.

Retention & deletion

We retain account data while your account is active. To request deletion, correction, or a copy of your data, email info@hashike.io — we'll respond within a reasonable time.

Children's privacy

Hashike is a B2B service and is not directed at, or knowingly used by, anyone under 18.

Changes to this policy

We may update this policy as the service or applicable law changes. Material changes will be noted on this page.

Contact

Questions about this policy: info@hashike.io.

Please also review our Terms of Service.