Privacy Policy

HYLOCA

https://hyloca.com/app/

Last Updated: July 2026

Google API Limited Use Disclosure: The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

1. Introduction

Welcome to Hyloca, a product of Nexart Tech. Hyloca (https://hyloca.com) is an automation and workflow platform that enables businesses to connect their communication channels, data sources, CRM tools, and marketing services into unified, automated workflows.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our platform. It applies to all visitors, registered users, and customers (collectively, "Users") of Hyloca.

By using Hyloca, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the platform.

2. Information We Collect

2.1 Account & Profile Information

When you register for Hyloca, we collect:

  • Full name and email address
  • Business name and contact details
  • Phone number (for SMS/WhatsApp features)
  • Billing information (processed securely via third-party payment gateways)
  • Profile preferences and platform settings

2.2 Google Workspace Data

When you connect your Google account to Hyloca, we collect and process the following data under the Google OAuth 2.0 framework:

  • Google account email address and profile information (for authentication)
  • Google Sheets data: spreadsheet metadata, sheet names, cell values, and row/column data from sheets you explicitly connect to Hyloca workflows
  • Google Drive file metadata for spreadsheets you authorize for use within the platform

We access your Google Sheets and Drive data solely to provide the automation and data routing services you configure within Hyloca. This includes reading spreadsheet data at user-configured polling intervals, appending and updating rows, and routing data based on conditions you define. We do not access any Google files or data outside of what you explicitly authorize and connect within Hyloca.

2.3 Meta Platform Data (Facebook, Instagram, WhatsApp)

When you connect your Meta accounts, we collect and process:

  • Facebook Page information, posts, and comments
  • Instagram Business account content, comments, and direct messages
  • WhatsApp Business account messages, contact details (of your subscribers/customers), and broadcast lists
  • Meta Ads lead data from Lead Generation campaigns you connect
  • Subscriber lists and opt-in data from your connected Meta accounts

This data is used solely to enable the automation features you configure, including automated replies, chatbot flows, broadcast campaigns, and lead routing.

2.4 Communication & Marketing Platform Data

Depending on the integrations you enable, we may process data from:

  • Email marketing platforms (Mailchimp, SMTP providers): contact lists, email open/click metrics, campaign data
  • SMS providers (Twilio and others): phone numbers, message delivery data, opt-in records
  • WhatsApp calling data: call logs relevant to your configured workflows

2.5 E-Commerce & CRM Data

When you connect e-commerce or CRM platforms, we process:

  • WooCommerce: order data, customer information, product details, and webhook events
  • Shopify: store data, customer records, order information, and product data
  • Other connected CRM or business tools as authorized by you

2.6 Advertising Platform Data

When you connect advertising accounts, we process:

  • Google Ads: campaign data, lead form submissions, and performance metrics
  • LinkedIn Ads: lead gen form data and campaign information
  • Meta Ads: lead data, audience information, and campaign metrics
  • Google My Business: reviews, business information, and customer interactions

2.7 Pinterest API Data

When you connect your Pinterest account to Hyloca, we use the Pinterest API to access and process Pinterest account data that you authorize, such as Pinterest account information, boards, Pins, media, publishing status, related analytics, and campaign data required to provide the features you configure in Hyloca.

Hyloca uses Pinterest API data only to provide user-authorized automation, publishing, analytics, and workflow features. Hyloca is not endorsed by, certified by, affiliated with, or sponsored by Pinterest.

If you disconnect your Pinterest account or revoke Hyloca's access, we stop accessing Pinterest API data. Pinterest-derived data stored for workflow logs, troubleshooting, or audit purposes will be deleted or anonymized within 30 days unless retention is required by law, security, fraud prevention, or billing/accounting obligations.

We do not sell, resell, sublicense, redistribute, or otherwise make available Pinterest content or Pinterest-derived data to third parties except as necessary to provide the Hyloca services you explicitly configure or as required by law.

2.8 AI Integration Data

Hyloca integrates with third-party AI services (including OpenAI and other AI providers) to power automated conversational replies, chatbot flows, and natural language processing features. When these features are enabled:

  • Message content from your configured channels may be sent to the AI provider's API to generate responses
  • We do not use your data to train AI models operated by Hyloca or any AI provider
  • AI processing is done in real-time and subject to the AI provider's own data policies (e.g., OpenAI's usage policies)

Hyloca does not operate its own AI model. All AI-generated responses are powered by third-party APIs on your behalf.

2.9 Usage & Technical Data

We automatically collect technical information when you use Hyloca, including:

  • IP addresses, browser type, and device information
  • Log data and session activity on the platform
  • Cookie and tracking data (see Cookies section below)
  • Workflow configuration and automation activity logs

3. How We Use Your Data

We use the information we collect exclusively to:

  • Provide, operate, and improve the Hyloca platform and its features
  • Execute the automation workflows, data routes, and integrations you configure
  • Poll connected data sources (e.g., Google Sheets) at your configured intervals to trigger workflow actions
  • Deliver messages, notifications, and campaign communications through channels you authorize (WhatsApp, email, SMS, etc.)
  • Process and route leads from connected advertising platforms
  • Generate automated replies via connected AI services
  • Process payments and manage your subscription
  • Provide customer support and respond to your inquiries
  • Send platform-related notifications and product updates
  • Comply with legal obligations and enforce our terms of service

We do NOT use your data for:

  • Advertising or selling to third parties
  • Training generalized AI or machine learning models
  • Any purpose not directly related to delivering the services you have configured in Hyloca

4. Google API Services -- Limited Use Disclosure

Hyloca's use of data received from Google APIs (including Google Sheets and Google Drive APIs) strictly adheres to the following principles, in compliance with the Google API Services User Data Policy:

Google API Limited Use Disclosure: The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

Specifically, Hyloca:

  • Only accesses Google user data that is necessary to provide the Hyloca automation and workflow services you explicitly configure
  • Does not use Google user data to develop, improve, or train generalized or non-personalized AI or ML models
  • Does not sell Google user data to third parties
  • Does not use Google user data for advertising purposes
  • Does not allow humans to read Google user data unless you have explicitly given permission, it is necessary for security purposes, or required by law
  • Only transfers Google user data to third parties as necessary to provide or improve the services you have requested, subject to appropriate confidentiality obligations

The Google OAuth scopes requested by Hyloca are used solely to enable the features you activate within the platform, such as syncing spreadsheets, creating and updating rows, and triggering workflow actions based on sheet data.

5. How We Share Your Data

We do not sell your personal data. We may share data in the following circumstances:

5.1 Third-Party Service Providers

We share data with service providers who help us deliver the platform, including:

  • Cloud hosting and infrastructure providers
  • Payment processors (for subscription billing)
  • AI API providers (OpenAI and others) for conversational automation features
  • Communication service providers (Twilio, SMTP providers, etc.)

All service providers are contractually required to handle your data in accordance with applicable privacy laws and to use it only for the purposes we specify.

5.2 Connected Third-Party Platforms

When you connect third-party platforms (Google, Meta, Shopify, WooCommerce, Mailchimp, Twilio, LinkedIn, etc.) to Hyloca, data is exchanged with those platforms as necessary to operate your configured workflows. Each platform's own privacy policy governs their data practices.

5.3 Legal Requirements

We may disclose your data if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Hyloca, its users, or the public.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of Hyloca or its assets, your data may be transferred as part of that transaction. We will notify you of any such change via email or prominent notice on the platform.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specifically:

  • Account data is retained for the duration of your subscription and for a reasonable period thereafter for legal and accounting purposes
  • Automation workflow logs are retained for a defined period to enable troubleshooting and auditing
  • Google Sheets and other connected platform data is processed in real-time for your workflows and is not permanently stored beyond what is needed for workflow execution and logging
  • Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law

Hyloca uses cookies and similar tracking technologies to:

  • Authenticate and maintain your logged-in session
  • Remember your platform preferences and settings
  • Analyze usage patterns and improve platform performance
  • Protect against unauthorized access and maintain security

You can control cookie settings through your browser. Note that disabling certain cookies may affect platform functionality.

8. Data Security

We implement industry-standard security measures to protect your data:

  • Encryption of data in transit (TLS/HTTPS) and at rest
  • Access controls limiting data access to authorized personnel only
  • Regular security audits and vulnerability assessments
  • OAuth 2.0 for all third-party platform integrations
  • Secure storage of API tokens and credentials

While we take commercially reasonable measures to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to promptly addressing any security incidents.

9. Your Rights and Choices

You have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal data (subject to legal retention requirements)
  • Portability: Request export of your data in a machine-readable format
  • Objection: Object to certain types of data processing
  • Withdrawal of Consent: Disconnect any third-party integration (Google, Meta, etc.) at any time through your account settings, which will revoke Hyloca's access to that platform's data

To exercise any of these rights, contact us at support@nexart.tech.

10. Third-Party Links and Integrations

Hyloca integrates with and may contain links to third-party platforms and services including Google, Meta (Facebook, Instagram, WhatsApp), Shopify, WooCommerce, Mailchimp, Twilio, LinkedIn, OpenAI, and others. Each of these services has its own privacy policy, and we encourage you to review them. Hyloca is not responsible for the privacy practices of these third-party services.

11. Children's Privacy

Hyloca is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete such information.

12. International Data Transfers

Hyloca operates globally and your data may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place to protect your data.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated policy on our website with a revised 'Last Updated' date
  • Sending an email notification to your registered email address for significant changes

Your continued use of Hyloca after any changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Company: NexartTechnosolutions Private Limited
Product: Hyloca (https://hyloca.com)
Email: support@nexart.tech

We will respond to all requests within a reasonable timeframe, and no later than 30 days.