HRUNA

LEGAL

Privacy Policy

Last updated: September 10, 2026

This document is provided for product and operational clarity. It has not yet undergone formal legal review and should not be relied on as legal advice — it is not a certified or fully compliant legal document. It will be reviewed by qualified counsel before production launch, and content is subject to change.

This policy explains what information HRUNA collects, why, and how it's used — based on how the platform actually works today, not generic boilerplate.

Who this policy covers

This Privacy Policy explains how HRUNA collects, uses, and protects information when you use the platform as a customer or as a designer. HRUNA is operated by [LEGAL ENTITY NAME TO BE INSERTED]. For privacy questions or concerns, see “How to reach us” below.

Information we collect

We collect only the information the platform actually needs to function:

  • Account information — your name and email address, managed through Supabase Auth.
  • Customer profile information — display name, city, phone number, and profile photo.
  • Designer profile & studio information — studio name, contact email, opening hours, atelier location, highlights, portfolio/collection content, and designer verification submissions (identity and portfolio review materials).
  • Requests, proposals & projects — the fashion requests you submit, proposals you send or receive, and project details and updates exchanged during a collaboration.
  • Messages — text and images exchanged directly between a customer and a designer within a conversation.
  • Reviews — ratings and review text a customer writes about a completed project.
  • Saved items & Fashion Diary — designers, dresses, collections, or projects you save, and any private Fashion Diary entries you create.
  • Uploaded images and files — avatars, studio images, request/project images, and verification documents, stored via our media storage provider.
  • Notification preferences — your choices about which notifications you want to receive.
  • Authentication & security information — your password is managed entirely by Supabase Auth; HRUNA never stores or has direct access to your password.

We do not currently run dedicated behavioral analytics or third-party advertising trackers. Standard technical information (such as IP address and request logs) may be processed by our hosting and infrastructure providers as part of operating and securing the service.

Why we use this information

  • To create and manage your account and authenticate you securely.
  • To operate the core collaboration flow — Discover, Request, Proposal, Project, Messaging, Review.
  • To display designer studios, portfolios, and reviews to prospective customers.
  • To let you communicate directly with a designer or customer you're working with.
  • To verify designer identity and portfolio submissions before approval.
  • To send notifications you've opted into.
  • To maintain the security and integrity of the platform.

What's public vs. private

Generally visible to other users:

  • A designer's studio page — studio name, banner, highlights, collections, portfolio, contact email, and reviews.
  • Profile photos (avatars), once uploaded.
  • Reviews you write are shown publicly on the reviewed designer's studio page, attributed to you.

Private — never shown to other users:

  • Your email address and phone number.
  • Fashion Diary entries — visible only to you, enforced at the database level.
  • Saved items and notification preferences.
  • Messages — visible only to the two participants of a conversation.
  • Verification documents — accessible only to you and HRUNA administrators.

How uploaded content is handled

Images and documents you upload (avatars, studio images, request/project images, verification documents) are stored in dedicated, access-controlled storage buckets. Some buckets (like avatars and studio images) are public by design, since they're meant to be seen by other users; others (like verification documents and Fashion Diary images) are private and access-restricted to you and, where relevant, HRUNA administrators. File size and type are restricted at the storage level.

How customer and designer information is used between each other

When you submit a request or send a message, the relevant profile information (your name, photo, and the content of your request or message) is shared with the designer or customer you're interacting with, so the collaboration can actually happen. This sharing is limited to what's needed for that interaction — a designer you've never contacted has no access to your private information.

Authentication & security

Your password is managed entirely by Supabase Auth using industry-standard hashing; HRUNA application code never sees or stores it in plain text. Access to your data is additionally enforced at the database level through Row Level Security — meaning even a technical error elsewhere in the application cannot expose your private data to another user, because the database itself rejects unauthorized access.

Your choices & rights

You can, at any time:

  • View and update your profile information from Settings.
  • Change your password from Settings → Security.
  • Update your notification preferences from Settings → Notifications.
  • Request deletion of your account from Settings → Security → Delete Account. If your account has no existing requests, projects, reviews, or other recorded activity, it is deleted permanently and immediately. If it has such history, automatic deletion isn't available yet — see the Account Suspension & Termination Policy for why, and contact support to discuss your options.

Depending on applicable law in your jurisdiction, you may have additional rights, such as requesting a copy of your data or objecting to certain uses of it. [JURISDICTION-SPECIFIC RIGHTS DETAIL TO BE INSERTED FOLLOWING LEGAL REVIEW]

Data retention

We retain your information for as long as your account is active. Some records — particularly those tied to a completed project, review, or dispute involving another person — may be retained even after an account-deletion request where deleting them would break the integrity of another user's records; see the Account Policy for detail. [SPECIFIC RETENTION PERIODS TO BE INSERTED FOLLOWING LEGAL REVIEW]

Payments

HRUNA does not currently process payments on the customer side. Where subscription-related records exist in the system for designer accounts, they are not connected to live billing today.

Changes to this policy

We may update this Privacy Policy as HRUNA evolves. Material changes will be reflected by updating the “Last updated” date above.

How to reach us

For privacy questions, concerns, or to exercise a right described above, contact [OFFICIAL CONTACT DETAILS TO BE INSERTED], or use the Help Center / Contact Support in the meantime.

Questions or concerns?

Visit the Help Center or Contact Support.