Privacy Policy

Hollo is a real-time social and chat platform operated by Supernine FZE ("Hollo", "we", "us", "our"). People can create and join user-run spaces, send messages and direct messages, share files, react and pin, manage friends, and report content. This policy explains what data Hollo processes when you use the platform, why we process it, and what control you have over it.

Supernine FZE is the data controller responsible for your personal data under this policy.

When you create an account, Hollo stores account and profile data including your authentication identifier (provided by our authentication partner), your email address, your display name, your username, your birth date, your default profile color, and timestamps for when you accepted these terms, accepted this privacy policy, and completed onboarding.

Profile information you choose to add — avatar, banner, bio, presence visibility setting — is stored as part of your profile so that other users can see it as you intend.

Hollo stores the content and relationships you create as you use the product. This includes messages in space channels, discussions, and threads; direct messages; reactions, replies, mentions, forwards, and pins; friend requests, friend relationships, and blocks; space memberships and ranks; space invites and the records of who used them; and reports you file.

Files you upload — message attachments, profile avatars and banners, space avatars and banners, custom emojis, and other supported file objects — are stored along with metadata about each file. That metadata may include the original file name, MIME type, size, dimensions, duration where relevant, a storage key, and processing status.

When you use Hollo, we and our service providers process technical data necessary to operate the service — for example, your IP address and basic device and client information.

We don't use third-party analytics or tracking tools, and we don't build advertising profiles about you.

Hollo shows presence so that people you talk to can tell when you're around. You can choose between making your presence visible or hiding it ("appear offline"). When your presence is hidden, the platform suppresses visible online indicators in the places others would see them.

To operate the platform: deliver your messages, sync your settings, render your spaces, and keep your account working across devices.

To keep Hollo safe: detect abuse, process reports, enforce our Community Guidelines, and respond to legal obligations when we have to.

To improve the product: understand which features help people, which ones don't, and where things are slow or broken.

We do not run advertising on Hollo, and we do not sell your personal data.

Hollo relies on a small set of infrastructure providers to operate. We share data with them only as needed to run the service, and they're contractually limited to processing it on our behalf. The current categories include:

• Authentication and identity: WorkOS, used to handle sign-in and account identity.

• Application backend and database: Convex, used to store and serve application data.

• File and object storage: Cloudflare R2, used to host uploaded files and media.

• Hosting and deployment: Railway, used to run parts of our infrastructure.

We may also disclose your data when required by law or legal process, or to protect the rights, safety, and security of Hollo and our users. If Hollo is ever part of a merger, acquisition, or sale of assets, your data may transfer to the successor, and we'll let you know before it becomes subject to a different privacy policy.

We keep your account data while your account is active. When you ask us to delete your account, Hollo runs a deletion workflow rather than a single instant wipe — there is a 30-day grace period during which the deletion is scheduled, and cleanup jobs progress through the data tied to your account. Some information may be retained temporarily, or for longer where needed, to: complete the deletion safely, enforce safety and our Community Guidelines, comply with applicable law, resolve disputes, or preserve the integrity of the system.

After deletion, your user record is marked as deleted in our data model.

From your account you can update your profile, change your presence visibility, manage your friends and blocks, leave spaces, file reports, and request account deletion.

If you're in a region with specific privacy laws (for example GDPR or CCPA), you may have additional rights — to access, port, correct, restrict, object, or lodge a complaint with a regulator.

To exercise any of these rights, email us at contact@supernine.company. We aim to respond within 30 days.

Hollo is not directed at children under 17. If we learn that we have collected data from a child below that age without proper consent, we'll delete it.

Hollo's infrastructure is operated by providers that may process data in regions different from where you live. Where personal data is transferred internationally, we rely on the standard legal mechanisms our service providers offer for those transfers.

We protect your data with the technical and organizational measures appropriate to a real-time consumer platform — encrypted transport and scoped, least-privilege access to data. No system is perfectly secure, and we'll let you know promptly if we ever experience a breach that materially affects your data.

We may update this policy as Hollo evolves. We'll surface material changes in-app and update the date at the top of this page. Continuing to use Hollo after a change means you accept the updated policy.

Questions about this policy or your data? Reach us at contact@supernine.company.