Privacy Policy

1. Introduction

HAKIKI (gethakiki.com) is operated by 4M Consulting. This Privacy Policy explains how we collect, use, and protect your information when you use our workflow platform and related services.

2. Information We Collect

• —Account information — name, work email, and organizational role
• —Usage data — workflow executions, step completions, audit log entries, and timestamps
• —Uploaded files — files submitted as step evidence, stored with UUID-based paths and accessible only through authenticated endpoints

3. How We Use Your Information

• —Operate and provide the HAKIKI platform and its features
• —Send email notifications for key workflow events (executions started, completed, or reviewed)
• —Maintain audit logs that support your organization's compliance requirements
• —Improve platform stability and performance
• —Comply with legal obligations

We do not sell your personal data to third parties for marketing purposes.

4. Data Security

• —Encryption of data in transit and at rest
• —Complete tenant isolation — every query is scoped by tenantId at the service layer
• —Role-based access controls — users only access data within their permitted scope
• —JWT-based stateless authentication for all API requests
• —Immutable completed executions — enforced at both the service layer and database level

5. Your Rights

Depending on applicable law, you may have rights to access, correct, or delete your personal data, or to object to or restrict certain processing. To exercise these rights, please contact us via our Contact page.

6. Contact

For privacy-related questions or requests, please contact us via the Contact page or at our registered business address.