haiku

Privacy policy

Draft pending legal review.

Auto-generated base document. Do not publish without legal review. Sections marked TODO need data that is not in the repository.

What data is processed

Haiku processes two different things, and it is worth keeping them apart:

Social listening and third-party comments

For the public profiles an institution chooses to follow, what those profiles published is retained. For third-party comments the author, the text and the link are not retained: only derived traits —sentiment, topics and aggregate bands— alongside an account identifier computed with a random salt that is destroyed every fourteen days. The database has no columns in which to store that identity.

Where the data is hosted

TODO — fill in the hosting provider and region before publishing.

How long data is kept

News linked to a monitoring account is kept while that account is active. Headlines that never matched any keyword are deleted after fourteen days. Full radio and television recordings are deleted after fourteen days; only the clips attached to a mention are kept.

Rights

Access, correction or deletion of personal data can be requested at hola@mihaiku.com. TODO — fill in the committed response time and the reference to Costa Rica's Law 8968 and to the GDPR where applicable.

Cookies and measurement

TODO — describe the analytics in use and the consent mechanism once it is in place.