Privacy Policy

Last updated: July 17, 2026

This Privacy Policy explains what information Hirira ("we", "us", "our"), operated by Kai, collects when you visit hirira.com (the "Site") or engage our AI Search Optimization (AEO/GEO) services, why we collect it, how it's used and protected, and the choices and rights available to you. If you have questions after reading this, email us at kai@stidsgroup.com.

01Information we collect

Information you give us directly

• Contact details: name, email address, and business name/website, when you request a free AI visibility check, email us, or fill in a form on the Site.
• Engagement details: any information you share as part of a Proposal, Service Agreement, or ongoing project (such as CMS or analytics access, brand guidelines, and content for review).
• Billing information necessary to invoice you, such as company name and billing address. We do not directly collect or store full payment card numbers; payments are handled through third-party payment processors, who have their own privacy practices.

Information collected automatically

• Basic, aggregated site analytics (pages viewed, general/approximate location, device and browser type, referring site), if and when analytics tracking is active on the Site, used only to understand how the Site is used and to improve it.
• Standard server log data (such as IP address, timestamps, and requested pages), retained briefly for security and troubleshooting purposes.

02How we use information

We use the information described above to:

• Respond to your inquiry and prepare the free AI visibility check, audit, or Proposal you requested;
• Deliver, manage, and invoice the services you've signed up for;
• Communicate with you about your engagement, including scheduling and status updates;
• Maintain reasonable business and tax records after an engagement ends;
• Understand aggregate Site usage and improve its content and performance;
• Detect, prevent, and address technical issues, fraud, or misuse of the Site.

We do not use your information for automated decision-making that produces legal or similarly significant effects about you, and we do not use client data to train third-party AI models beyond the standard, non-identifying use of general-purpose tools described below.

03Our legal basis for processing

Where applicable data protection law (such as the EU/UK GDPR) requires a legal basis, we rely on one or more of the following: your consent (for example, when you voluntarily submit a contact form); the performance of a contract with you (for example, delivering a paid engagement); and our legitimate interests in operating, securing, and improving the Site and our services, balanced against your rights.

04Cookies and tracking

The Site may use minimal, privacy-respecting analytics cookies to understand aggregate traffic and Site performance. We do not use advertising cookies or cross-site tracking, and we do not sell data collected through cookies. Where analytics tools are active, they are limited to standard, aggregate reporting (such as Google Analytics-style traffic reports) and are governed by that provider's own privacy terms. You can control or block cookies through your browser settings; blocking cookies may affect some Site functionality but will not prevent you from reading the Site or contacting us.

05How we share information

We share information only in the following limited circumstances:

• Service providers: tools we use to run the business, such as email, invoicing, scheduling, or analytics providers, who process information on our behalf and are bound to use it only to provide their service to us.
• Legal requirements: if required to do so by law, subpoena, or other legal process, or to protect the rights, property, or safety of Hirira, our clients, or others.
• Business transfers: in connection with a merger, acquisition, or sale of business assets, subject to this policy or a successor policy of at least equivalent protection.
• With your direction: any other sharing you specifically request or authorize.

06Data retention

We keep information only as long as reasonably needed for the purpose it was collected: for an active inquiry or engagement, for the duration of that engagement plus a reasonable period afterward for business, accounting, and tax records (typically up to 7 years for financial records, in line with common recordkeeping practice), or as required by applicable law. You can ask us to delete information sooner, as described in Section 8.

07Data security

We use reasonable administrative and technical safeguards to protect the information we hold, including limiting access to information on a need-to-know basis and using reputable, security-conscious third-party providers for email, storage, and payments. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security; if we become aware of a breach affecting your personal information, we will notify affected individuals as required by applicable law.

08Your rights and choices

Depending on where you're located, you may have rights to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Delete your information, subject to legal or contractual retention needs (such as active invoices);
• Object to or restrict certain processing, including for direct marketing;
• Port your information to another provider in a structured, commonly used format;
• Withdraw consent at any time where processing is based on consent, without affecting processing that occurred before withdrawal.

To exercise any of these rights, email kai@stidsgroup.com. We'll respond within 30 days. If you're not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.

09International data transfers

We work with clients and use service providers in different countries. As a result, your information may be processed in a country other than the one you're located in, which may have different data protection laws. Where required, we take reasonable steps to ensure such transfers are subject to appropriate safeguards.

10Children's privacy

The Site and our services are directed at businesses and business professionals, not children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

11Third-party links

The Site may link to third-party websites or tools (such as scheduling or payment providers). We are not responsible for the privacy practices of those third parties; we encourage you to review their privacy policies before providing them with information.

12Do Not Track

Some browsers offer a "Do Not Track" signal. There isn't yet a common industry standard for how to respond to these signals, so the Site does not currently respond to them differently from other traffic; the cookie and analytics choices described in Section 4 remain the primary way to control tracking.

13Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or operational reasons. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated directly to active clients by email, and continued use of the Site after changes take effect constitutes acceptance of the revised policy.

14Contact us

Questions, requests, or concerns about this policy or your information can be sent to kai@stidsgroup.com. We aim to respond within 2 business days.