2.1 Introduction

This Privacy Policy explains how Hedamo ("Service," "we," "our," or "us"), operated by Altibbe, Inc., collects, uses, stores, and protects your personal information. Hedamo provides documentation and transparency infrastructure for organizing product records, linking evidence to declarations, and publishing structured disclosures for relevant authorities and market users.

By using Hedamo, you consent to the practices described in this policy.

2.2 Information We Collect

Information You Provide:

• Account information (name, email, organization, role)
• Business data (product details, sourcing information, compliance documents)
• Assessment data (responses to verification queries)
• Communications

Automatically Collected Information:

• Technical data (IP address, browser type, device information)
• Usage data (features accessed, timestamps)
• Location data (general location from IP address)
• Cookies

2.3 How We Use Information

Service Delivery:

• Process submitted documentation and generate transparency reports
• Map submitted records to published standards for informational use
• Provide documentation and governance infrastructure services

Service Improvement:

• Improve automation quality and reliability
• Develop new features
• Conduct research using anonymized data

Security and Compliance:

• Protect service integrity
• Prevent fraud
• Comply with legal obligations

2.4 AI Processing

Hedamo uses software-assisted processing to organize submitted information, identify inconsistencies in records, and cross-reference declarations with standards databases for informational context.

Hedamo does not issue certifications, approvals, or compliance decisions. Any legal compliance determination is made only by competent regulators or authorized certification bodies.

2.5 Information Sharing

We may share information with:

• Service Providers: Cloud infrastructure, security services
• Government and Regulatory Bodies: When required by law
• Certification Bodies: With user consent
• Affiliates: Subject to equivalent protections

We do not sell personal information.

2.6 Data Security

We implement comprehensive security measures including:

• Encryption in transit and at rest
• Access controls and authentication
• Audit trails and monitoring
• Incident response procedures

2.7 Your Rights

Depending on your jurisdiction, you may have rights to:

• Access your Personal Data
• Request correction or deletion
• Data portability
• Restriction of processing
• Objection to processing
• Withdrawal of consent

To exercise rights, contact privacy@hedamo.com

2.8 Regional Compliance

We comply with:

• GDPR (EU/UK)
• US State Privacy Laws (CCPA, VCDPA, CPA, etc.)
• Middle East Regulations (Saudi PDPL, UAE Federal Decree-Law No. 45)
• Other Applicable Laws in Canada, Australia, Brazil, India, South Africa, and GCC countries

2.9 Contact

Cookie Policy

Effective Date: March 1, 2025

3.1 Introduction

Hedamo uses cookies and similar technologies to enhance your experience and improve our services. This policy explains our cookie practices.

3.2 Cookies We Use

• Essential: Required for service functionality, security, and authentication
• Analytical: Help us understand usage patterns and improve performance
• Functional: Remember your preferences (language settings, dashboard configuration)
• Automation Enhancement: Improve system quality based on feature usage

3.3 Your Choices

You can manage cookies through browser settings or service preferences. Essential cookies required for functionality cannot be disabled.

We comply with cookie regulations including GDPR, ePrivacy Directive, and other applicable laws.

3.4 Contact