Who we are
Hugo is operated by Parasition AB, a company registered in Sweden. Parasition AB is the data controller for the personal data described here. You can reach us at [email protected] for any question about this policy or your data.
What Hugo does with data, in one paragraph
Hugo answers consumer research questions by reading publicly available social media content: posts, comments and reviews that anyone can see without logging in. We do not buy private datasets, we do not access private messages or non-public accounts, and we do not scrape anything behind a login. Alongside that public content, we hold the ordinary account data needed to run a paid product.
What we collect
Account data. Your name, email address, whether that email is verified, and a profile image if you provide one. If you answer the onboarding questions, we store those answers: your role, your industry, what you are trying to achieve, and any brand or social profile link you give us.
Technical data. Your IP address, browser user agent, and session timestamps. We use these to keep you signed in, to keep accounts secure, and to detect abuse.
Usage data. The research questions you ask, the reports Hugo produces for you, and a record of what the service cost to run for your account so we can bill and apply limits correctly.
Billing data. Your subscription plan and a customer identifier from our payment processor. We never see or store your card number. Card details go directly to the payment processor.
Chat integration data. If you connect Hugo to Slack or Microsoft Teams, see the dedicated section below.
Why we are allowed to hold it
We process account, usage and billing data because it is necessary to provide the service you asked for and to meet our legal and accounting obligations. We process technical data on the basis of our legitimate interest in keeping the service secure and working. Where we rely on consent, for example optional product emails, you can withdraw it at any time.
Slack and Microsoft Teams
When you add Hugo to a Slack workspace or a Microsoft Teams tenant, Hugo receives only the messages directed to it: a direct message to Hugo, or a channel message that @mentions Hugo. Hugo does not read the rest of your channels, and on Microsoft Teams the platform does not deliver unmentioned channel messages to a bot at all.
To route replies and to link a chat account to a Hugo account, we store the platform's own identifiers, meaning your user id, the conversation id, and your workspace or tenant id, together with the service address needed to post a reply back. We use these for nothing but delivering Hugo's answers to the right place.
Removing the Hugo app from your workspace or tenant stops all of it. Ask us to delete the associated records and we will.
Who else touches your data
We keep this list short on purpose, because every vendor we name is one more thing to keep honest. We use service providers for cloud hosting and databases, AI model inference, public social content retrieval, payment processing, and email delivery. They act on our instructions, under contract, and only to run Hugo.
Some of these providers process data outside the EU/EEA. Where that happens, transfers are covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard.
We do not sell your personal data, and we do not use it to train third-party AI models. We do not run advertising on Hugo.
Want the current, specific vendor list? Email [email protected] and we will send it.
How long we keep it
Account data lives as long as your account does. Research questions and reports stay available to you until you delete them or close your account. Session and technical records are kept for a short period for security purposes. Billing records are kept for as long as accounting law requires, which in Sweden is seven years. When you close your account we delete or anonymise the rest within 90 days, except where we must keep something to comply with the law.
Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or hand it to another provider in a portable format. Email [email protected] and we will respond within 30 days. You do not need a special form or a particular wording.
If you think we have got it wrong, you can complain to your local supervisory authority. In Sweden that is Integritetsskyddsmyndigheten (IMY).
Security
Data is encrypted in transit and at rest, access is limited to the people who need it to operate the service, and credentials are held in a managed secret store rather than in code. No system is perfectly secure, and we will not pretend otherwise. If a breach affects your personal data, we will notify you and the relevant authority as the law requires.
Children
Hugo is a business tool and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has given us data, tell us and we will delete it.
Cookies
We use the cookies needed to keep you signed in and to keep the service secure. We do not use advertising or cross-site tracking cookies.
Changes
If we change this policy in a way that materially affects you, we will update the date at the top and tell you by email or in the product before it takes effect.
Contact
Parasition AB. [email protected]. Ask us anything about this policy; a plain question gets a plain answer.