Legal
Privacy Policy
Last updated:
1. Who we are
Hatch is a Canadian software platform operated from Montreal, Quebec. The Privacy Officer for the Site and the platform is MT Popa, Managing Partner — privacy@hatchlabs.tech.
2. What we collect on this Site
On the hatchlabs.tech marketing Site we collect:
- Demo request form fields: name, work email, phone (optional), company, use case, monthly application volume, and your message.
- Newsletter signup: email address.
- Analytics (with your consent): page views, time on page, device and browser type, anonymized IP. Collected via Google Analytics 4 with IP anonymization enabled.
- Marketing (with your consent): visit data for B2B account identification via Pipedrive Web Visitors / Leadfeeder.
- Strictly necessary cookies: session, security, and consent-state cookies. Always loaded; not consented-against.
3. Why we collect it
- To schedule and run product demos at your request.
- To send you operational responses to your inquiries and (with separate consent) marketing updates.
- To measure and improve the Site's performance and content.
- To detect and prevent abuse, fraud, and unauthorized access.
4. Your consent & choices
Non-essential cookies are off by default in compliance with Quebec Law 25 (s. 8.1). You'll see a banner asking whether to enable Preferences, Statistics, and Marketing cookies. You can change your choice anytime via the Cookie preferences link in the footer.
You can unsubscribe from marketing emails at any time (CASL one-click unsubscribe). You can request access, correction, or deletion of your personal information by emailing privacy@hatchlabs.tech. We respond within 30 days.
5. Where your data is stored
The Site is hosted by Vercel. Analytics data lives with Google Cloud (EU region). Demo-request leads are forwarded to our CRM (Pipedrive — data resident in the EU). Cookie consent records are stored by Cookiebot (Denmark / EU). We may transfer personal information across borders only with appropriate safeguards (Standard Contractual Clauses, equivalent-jurisdiction findings).
6. Retention
- Demo request leads: 36 months from last contact, then anonymized.
- Newsletter subscribers: until you unsubscribe, then deleted within 30 days.
- Analytics events: 14 months (GA4 default for our property).
- Cookie consent records: 12 months per CMP best practice.
7. Security
We use TLS 1.3 in transit, AES-256 at rest, role-based access control, and continuous monitoring. We notify affected individuals and the relevant authorities within 24 hours of confirming a privacy incident likely to cause serious harm (Law 25 standard).
8. Your rights
Depending on where you live, you have rights to access, correct, delete, port, or restrict processing of your personal information. To exercise any of these, contact privacy@hatchlabs.tech. If you are unsatisfied with our response, you may file a complaint with:
- Quebec residents: Commission d'accès à l'information (CAI) — cai.gouv.qc.ca
- Other Canadian residents: Office of the Privacy Commissioner of Canada — priv.gc.ca
- EU/EEA residents: your local Data Protection Authority.
9. Changes to this Policy
We may revise this Policy from time to time. Material changes will be announced via banner on the Site and (if you've subscribed) by email. The "Last updated" date at the top reflects the latest revision.
10. Contact
Privacy Officer: MT Popa, Managing Partner
privacy@hatchlabs.tech