Privacy policy

Last updated: October 2026. Operator: Hacall (hacall.com). Questions: use the contact details on hacall.com.

What we do not collect

No email address or phone number is needed to create an account.
We never use your camera. Holograms are made from an avatar or a photo you choose.
No advertising trackers and no third-party analytics.

What we store

Account: your username, a scrambled check value for your password and for your 12-word code (we never receive the password or the words themselves), and your public encryption key with your private key in locked form.
Seller profile: what you enter: business name, type, website, availability, optional email and phone, avatar or photo. These are shown publicly on your promotions.
Promotions: titles, descriptions, prices, photos, videos and audio you upload. These are public.
Possible buyers: when someone calls or messages a seller about a promotion, we record their username, which promotions they asked about, how they made contact and when, so the seller can see it.
Messages: text, photos, documents and voice messages are end-to-end encrypted in your browser. We store only the encrypted data and basic details needed to deliver it (who, when, which conversation). We cannot read the content.
Calls: audio goes directly between the two devices, encrypted. Nothing is recorded. Our server only passes the connection setup.
Security logs: short-term counters of attempts per network address to stop abuse.

Payments

Seller publishing includes a 3-day trial, followed by manual payments of 5 USDC for each 30-day access period. We do not connect to or control your wallet and never ask for a password, recovery phrase, or private key. To verify a payment, we process its transaction hash, selected network, amount, confirmation status and access period. Our server checks the public BNB Chain or Ethereum blockchain through public RPC services. The blockchain itself is public; the app does not store your wallet's sending address or a payment screenshot.

USDC orders: when you buy a product with USDC we keep an order record: the product, the buyer's and seller's usernames, the seller's receiving wallet, the price, shipping cost and shipping details, the network, the transaction hash, the amount received, and the order status and tracking number. Your shipping address is sent to the seller through the end-to-end encrypted messenger, so we cannot read it. Unpaid orders are deleted after 8 days. Paid orders stay in both people's order history.

Cookies and local storage

We use one essential cookie to keep you logged in. Your browser also keeps your unlocked message key and your language choice on your device.

How long we keep data

Until you delete it. Deleting your account (Seller Room → Account) removes your profile, promotions, messages and files. We retain a de-linked transaction hash and network after account deletion to prevent the same on-chain payment from being reused for another account.

Your rights

You can see and change your data in the app and delete your account at any time. Under the GDPR you may also ask us for a copy of your data or complain to your data protection authority.

Where data is kept

The service runs on Replit infrastructure. Encrypted messages remain unreadable to the hosting provider and to us.