Nowen — Privacy Policy

Last updated: July 24, 2026

This Privacy Policy explains how Haycion Inc. (“we”, “us”) collects, uses, and shares personal data when you use Nowen (the “Service”). It forms part of our Terms and Conditions.

1. Data We Collect

Account data. Email address, name (if provided), password hash, plan and subscription status.

Your input. The free-text descriptions of your skills, experience, expertise, and interests that you submit, and your answers to clarifying questions. This may reveal personal or professional details; submit only what you are comfortable sharing with us.

Generated content. Ideas produced for you, your Advisor chat messages, idea version history, and session history (“conversations”).

Payment data. Payments are processed by Stripe. We receive limited billing information (e.g., plan, payment status, last card digits); we do not store full card numbers.

Usage and device data. Log data, IP address, browser/device type, pages viewed, and interactions with the Service, collected via cookies and similar technologies.

2. How We Use Data

Provide the Service: generate ideas from your input, store your conversations, operate the portal, process claims and transfers.
Operate your subscription: billing, credit accounting, plan enforcement.
Improve the Service: debugging, analytics, quality evaluation of generated output.
Communicate with you: transactional messages, notices about your ideas (e.g., privatization window), and product updates (opt-out available for marketing).
Security and legal compliance: fraud prevention, enforcing our Terms, responding to lawful requests.

Legal bases (where GDPR applies): performance of contract (providing the Service), legitimate interests (security, improvement, analytics), consent (marketing, optional cookies), and legal obligation.

3. AI Processing

Your input is processed by third-party AI model providers (currently Anthropic and OpenAI) to generate ideas. We send them the text needed to perform the generation; we do not permit them to use your data to train their models under our agreements with them. Generated ideas are AI output and may be similar to output generated for other users.

4. Publishing and Your Data

Free plan: generated ideas are published to the public portal anonymously. Your written input (descriptions and clarify answers) is never published.
Idea transfers (“Make this yours”): when another user claims your auto-published ideas, everything you typed is removed before the claiming user receives anything. Transfer events are logged for audit.
Voluntary publishing (paid): published ideas do not display your identity in the current version of the Service.

5. Anonymized and Aggregated Data

We create anonymized, aggregated statistics from Service usage — for example, trends in what people want to build by domain, region, or time period — and may share or commercialize these with third parties (such as investors, accelerators, or research firms). This data does not identify you, and your written input is not included in identifiable form.

We share personal data only with:

Service providers acting on our instructions: hosting, AI model providers (Section 3), payment processing (Stripe), email delivery, analytics.
Legal recipients where required by law or to protect rights, safety, or the integrity of the Service.
Business transfers: if we are involved in a merger, acquisition, or asset sale, data may transfer as part of it, subject to this Policy.

We do not sell personal data that identifies you.

7. Retention

Account and conversation data: kept while your account is active and deleted or anonymized within [90] days of account deletion, except where retention is required by law (e.g., billing records) or for audit logs of completed idea transfers.
Publicly published ideas: idea content on the portal is not personal data once anonymized/stripped and may remain public per the Terms (Section 5 of the T&C).
Backups: purged on a rolling basis within [30] days.

8. Your Rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data, object to or restrict certain processing, and withdraw consent. EU/UK users may lodge a complaint with their supervisory authority. California residents have rights under the CCPA/CPRA, including the right to know, delete, and opt out of “sharing” for cross-context advertising (we do not engage in such sharing).

To exercise rights, contact hello@haycion.com. We will verify your request and respond within the legally required timeframe.

Note on deletion: deleting your account removes your input, account data, and unpublished conversations. Ideas already transferred to another user (with your input already stripped) and anonymized published ideas are no longer linked to you and are not affected by deletion.

9. International Transfers

We are based in the United States, and data is processed in the US and in countries where our providers operate. Where GDPR applies, transfers rely on appropriate safeguards such as Standard Contractual Clauses.

10. Security

We use industry-standard measures (encryption in transit, access controls, audit logging) to protect data. No system is perfectly secure; notify us immediately at hello@haycion.com if you suspect unauthorized access.

11. Cookies

We use essential cookies (authentication, session) and, with consent where required, analytics cookies. You can control cookies via your browser and, where applicable, our cookie banner.

12. Children

The Service is not directed to anyone under 18, and we do not knowingly collect data from them. If you believe a minor has provided data, contact us and we will delete it.

13. Changes

We may update this Policy. Material changes will be notified (e.g., by email or in-app) before taking effect. The “Last updated” date reflects the current version.

14. Contact

Haycion Inc. · 131 Continental Dr, Suite 305, Newark, DE 19713 · hello@haycion.com