Privacy Policy

This policy covers the personal data Henshin FZ-LLC ("Henshin", "we", "us") collects through the Henshin website, sign-in, and the client portal — account details, sessions, and how the people using our product interact with it. It does not cover the retail market data Henshin collects about products and prices on other companies' websites, which is described on our Data Sourcing page, or the catalogue and sales data a customer chooses to import into their own workspace, which is governed by our Data Processing Agreement.

• Account information — name, work email, company, and password (stored securely, never in plain text) when you or your organization sign up.
• Usage information — how you use the client portal: pages viewed, watchlists, searches, and API key usage, so the product works and so we can see what's useful and what isn't.
• Website analytics — we use self-hosted Umami to count page views and understand navigation, referring sites, browser and device types, and approximate location. Umami uses no cookies, excludes URL query strings and fragments, and respects your browser's Do Not Track setting. We do not use session recordings or heatmaps.
• Catalogue and sales data you import — if your organization uploads its own product or sales data, that data belongs to you and is processed under our Data Processing Agreement, not as personal data under this policy.
• Cookies — a session cookie that keeps you signed in, and a small preference cookie that remembers your light/dark theme choice. We don't use third-party advertising or tracking cookies.

We use personal data to operate your account and your organization's workspace, run the service you signed up for, respond when you contact support, and understand how the product is used so we can improve it. We do not sell personal data, and we do not use it to serve advertising.

Within your own organization, teammates see what your organization's role settings allow — Henshin doesn't share your data across unrelated organizations. We share data with the infrastructure and service providers that help us run the platform, bound to protect it, and only ever as needed to provide the service. We do not sell or share personal data with third parties for their own marketing purposes.

We keep account and usage data for as long as your account is active, plus a limited period afterward for legal, billing, and security purposes. If you ask us to delete your account, we'll delete or anonymize personal data within a reasonable time, except where we're required to retain it.

Depending on where you're located, you may have the right to access, correct, export, or delete your personal data, or to object to certain processing. To make a request, contact us at hello@crystal.re. We'll respond within a reasonable time and may need to verify your identity first.

We take the security of personal data seriously — see our Security page for how we protect accounts and workspaces.

Henshin is based in Dubai, UAE, with a presence in New York. Personal data may be processed in either location, or by service providers operating elsewhere, always under protections consistent with this policy.

Henshin is a business product and is not directed at children. We do not knowingly collect personal data from children.

If we make material changes to this policy, we'll update the effective date above and, where appropriate, let you know directly.

Questions about this policy or your data can be sent to hello@crystal.re.