Last updated: October 20, 2026
This policy explains what information hykuup.com collects, why we collect it, and what choices you have. The site is run by Redstone Software, Inc., doing business as Notch8 (“Notch8”, “we”, “us”). HykuUP is a Notch8 service.
What this policy covers
This policy covers the hykuup.com website. It does not cover the Hyku repositories we host for customers. Each institution decides what its repository collects and how that information is used, and we handle that information on the institution’s behalf under our agreement with it. If you have a question about a particular repository, please contact the institution that runs it.
Information we collect
The site has no visitor accounts, comments, or sign-up forms, so we collect information in only a few ways.
When you visit the site, our hosting and security provider, Cloudflare, processes the technical details that every web request carries: your IP address, your browser type, the page you asked for, and the page that linked you to it. Cloudflare uses these details to deliver the page and to block attacks and abusive bots. We also use Cloudflare Web Analytics, which counts page views without cookies and without identifying individual visitors.
We use Google Analytics to understand how visitors find and use the site, for example which pages are read most and which links bring people here. Google Analytics uses cookies and collects information about your device and browser, your approximate location (city or region, worked out from your IP address), the pages you view, and how you arrived. Google currently states that Google Analytics 4 does not log or store IP addresses. We do not use Google Analytics data for advertising, and Google signals and advertising data sharing are turned off for this site.
If you email us, for example at [email protected] or through the “Start a free trial” link, we receive your name, your email address, and whatever you include in the message, such as your institution, your current system, and the size of your collection.
Our “Book a time” link opens a Google Calendar booking page. Google collects your name, your email address, and any details you add, and shares them with us so we can hold the meeting. Google’s privacy policy applies to that page.
How we use information
- To answer your questions, schedule and hold calls, and prepare demos, trials, and quotes.
- To keep a record of our conversations with prospective and current customers.
- To understand how the site is used and to improve it.
- To keep the site secure and working.
We do not sell personal information, and we do not share it for targeted advertising.
Who we share it with
We use service providers to run the site and our business. They process information for us under contract:
- Cloudflare, for content delivery, security, and cookie-free page counts.
- Amazon Web Services, which hosts the site’s servers in the United States.
- Google, for email, calendar booking, and Google Analytics.
- HubSpot, the customer relationship system where we keep contact records for inquiries.
- Slack, where our team discusses inquiries internally.
- Anthropic, whose AI service we use to summarize and route messages sent to our sales address.
We may also disclose information when the law requires it, or when it is needed to protect our rights, our customers, or the public.
Cookies
hykuup.com itself does not set cookies for visitors. Google Analytics sets two first-party cookies, _ga and _ga_ followed by an ID, which tell one visit from another and last up to two years. Cloudflare may set a short-lived security cookie, such as __cf_bm, when it needs to check that a visitor is not an automated bot.
Where the law requires your consent for analytics cookies, we ask for it before Google Analytics runs, and you can change your choice at any time from the Cookie settings link at the bottom of every page. You can also block or delete cookies in your browser, or install Google’s opt-out browser add-on.
How long we keep information
- Google Analytics data: 14 months, after which Google deletes it.
- Emails, booking details, and contact records: while we are in touch with you and for up to three years after our last contact, unless they become part of a customer agreement that we must keep longer.
- Security and request logs: for a limited period, for security and troubleshooting only.
Where information is processed
Notch8 is based in the United States, and our service providers process information in the United States and other countries. When information about visitors in the European Economic Area, the United Kingdom, or Switzerland is transferred to the United States, our providers rely on recognized transfer mechanisms such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.
If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: our legitimate interests in answering inquiries, running our business, and keeping the site secure; steps you ask us to take before a contract, such as preparing a quote; and your consent for analytics cookies where consent is required.
Your rights
Depending on where you live, you may have the right to ask for a copy of the personal information we hold about you, to correct it, to delete it, to object to or limit how we use it, or to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time.
California residents have the right to know what personal information we hold, to correct it, and to delete it, and we will not treat you differently for using these rights. We do not sell or share personal information as California law defines those terms.
To make a request, email [email protected] with “Privacy request” in the subject line. We will reply within 30 days, and we may need to confirm your identity first. If you are in the European Economic Area or the United Kingdom, you can also complain to your local data protection authority.
Children
hykuup.com is meant for libraries, archives, and the people who work with them. It is not directed at children under 16, and we do not knowingly collect their information.
Security
We protect the site with encrypted connections, Cloudflare’s security services, limited staff access, and two-factor sign-in for administrator accounts. No system is perfectly secure, so please do not email us sensitive personal information.
Changes to this policy
When we change this policy, we will update the date at the top of this page. If a change is significant, we will also say so here.
Contact
Redstone Software, Inc., doing business as Notch8
Carlsbad, California, United States