Document last updated · 2026-11-01

Privacy Policy

At holagpt LLC ("holagpt") we respect your privacy. This policy explains what personal data we process, for what purposes, and what rights you have. It applies to holagpt.com and associated services.

1. Data controller

Controller: holagpt LLC, 8350 NW 52ND TER SUITE 301 # 1090 DORAL, FL 33166. Privacy contact: [email protected]. If we appoint a Data Protection Officer (DPO), their details will be published here.

2. What data we process

• Account data: name, email, password (encrypted), country and language.
• Usage and content data: the conversations, prompts and files you send to the Service, plus technical metadata (model used, timestamps).
• Payment data: processed by our payment provider; we do not store your full card number.
• Technical data: IP address, device identifiers, and analytics data (see Cookie Policy).

3. Purposes and legal bases (GDPR)

• Provide and maintain the Service and manage your account — performance of the contract.
• Process payments and prevent fraud — contract / legitimate interest / legal obligation.
• Improve and secure the Service — legitimate interest.
• Service communications and, with your consent, marketing — consent / legitimate interest.
• Comply with legal obligations — legal obligation.

4. Use of AI providers and other processors

To provide the Service we share the necessary content with third-party AI model providers (for example, OpenAI, Anthropic, Google and others) that process your requests to generate the response, as well as infrastructure, payment, email and analytics providers, subject to data-processing agreements. We do not sell your personal data.

5. International transfers

Some providers are located outside your country (for example, in the U.S.). When we transfer data outside the EEA or other protected regions, we apply appropriate safeguards (for example, standard contractual clauses).

6. Retention

We keep data while your account is active and for as long as necessary for legal, accounting or dispute-resolution purposes. You may request deletion under section 8.

7. Security

We apply reasonable technical and organizational measures (encryption in transit, access control, secret management). No system is 100% secure; we will notify you of breaches where the law requires.

8. Your rights

Depending on your jurisdiction (GDPR in Spain/EU, LGPD in Brazil, LFPDPPP in Mexico, among others), you can: access, rectify, erase, object, restrict processing, port your data, and withdraw consent. To exercise them, write to [email protected]. You have the right to lodge a complaint with the competent authority (e.g. AEPD in Spain, ANPD in Brazil).

9. Minors

The Service is not directed to minors below the applicable minimum age without their guardian's consent. If we detect a minor's data without a valid basis, we will delete it.

10. Business customers (processor)

When you use holagpt on behalf of an organization, that organization may act as controller and holagpt as processor. In that case, our Data Processing Agreement (DPA) applies, available separately.

11. Cookies

We use cookies and similar technologies in accordance with our Cookie Policy.

12. Changes

We may update this policy; we will notify you of material changes. The last-updated date appears at the foot of the page.

13. Contact

Privacy questions or requests: [email protected].

Advertising and Google services

Google ads are disabled in this version. The blog may display HolaGPT's own promotions, labelled as advertising; these images do not themselves load Google's advertising service.

If Google AdSense is enabled, Google and other advertising providers may use cookies or identifiers to select and measure ads, including based on previous visits to this or other websites. Advertising cookies allow Google and its partners to serve ads based on those visits. You can manage personalization in Google My Ad Center and read how Google uses information from partner sites. Other providers' choices are described at YourAdChoices.

Before enabling that advertising, we will implement applicable notices and consent controls. Acceptance of analytics or service terms does not replace advertising consent. Personalized ads will not be enabled in regions requiring a Google-certified consent platform until that configuration is available. Contact [email protected] about data and advertising.