Data Processing Information

Last updated: 9 July 2026

1. Purpose of this document

This document describes the technical and organisational measures (TOMs) we apply to protect the personal data processed within HOLOGRAM® AI. It complements our Privacy Policy, which explains what data we process and why.

2. Encryption in transit

All connections between your device and our services, and between our services and our processors, are encrypted using current TLS (HTTPS). This protects data such as your login, chats and payment information while it travels across the network.

3. Encryption at rest

Personal data is stored on managed infrastructure provided by our hosting processors. Our application database is hosted on Railway’s managed platform, where stored data is encrypted at rest by the platform. Server infrastructure operated on Hetzner is secured through the measures described below; where full-disk or volume encryption is available and enabled, stored data is additionally protected at rest.

4. Access control

  • Access to production systems and data is restricted to authorised administrators.
  • Administrative access is protected by strong authentication, including two-factor authentication.
  • Access to the internal management area is additionally protected behind an authentication layer.
  • Secrets and credentials are stored in server-side configuration and are not exposed to end users.

5. Backups and resilience

We maintain regular backups of the database and of critical configuration so that the Service can be restored after a failure. Backups are stored securely and are rotated and overwritten over time.

6. Processors

We engage the processors listed in our Privacy Policy (including Anthropic, Railway, Hetzner, Mailgun, Stripe, PayPal and Expo) under data-processing agreements. Each processor is bound to process personal data only on our instructions and to apply appropriate security measures of its own.

7. Monitoring

We monitor our systems for availability and for signs of misuse or unauthorised access, and we maintain processes to respond to security events. Vulnerabilities can be reported as described in our Security Information.

8. Contact

Questions about our data processing can be sent to info@your-hologram.com.