Privacy Policy

Last updated: October 2026

1. Information We Collect

We collect only the minimum information required to provide Hamugao AI: your email address and display name when you create an account, scrypt-hashed password credentials (never plaintext), subscription tier status, and token/message usage counters for quota enforcement.

2. How We Process Prompts & Conversations

Prompts submitted to Hamugao 1 Flash, Hamugao 1 Pro, and Hamugao 2 Fulgor are transmitted over TLS 1.3 solely to generate your response. Short-lived semantic caching is strictly scoped to your individual user ID and is never shared across other users. We do not sell your personal data or prompts to third parties.

3. Cookies & Session Security

We use a single cryptographic HMAC-SHA256 session cookie (`hamugao_session`) marked HttpOnly; Secure; SameSite=Lax to authenticate your session and protect against cross-site scripting (XSS) and cross-site request forgery (CSRF).

4. Payment Processors

Card payments are processed by Polar.sh (Merchant of Record) and cryptocurrency payments are processed by NOWPayments. Hamugao AI never stores raw credit card numbers or private wallet keys on our servers.