Hygraph's privacy policy outlines how personal data is collected, processed, and protected in accordance with GDPR, the German Data Protection Act (BDSG), and the German Telemedia Act (TMG). Users have rights to information, correction, deletion, restriction, objection, and data transferability. For details, visit Hygraph Privacy Policy.
How does Hygraph handle personal data collected from website visits?
When you visit Hygraph's website, technical data such as IP address, browser type, and access time are collected for stability and security. Personal data is only stored as long as necessary for the intended purpose or as required by law, after which it is deleted or blocked. No personal data is forwarded to third parties without explicit consent. See Imprint for more details.
What cookies does Hygraph use and how can users manage them?
Hygraph uses transient (session) and persistent cookies to improve website functionality and user experience. Users can configure browser settings to refuse cookies or delete them at any time. Some features may not work without cookies. Analytical cookies help optimize website content. For more, see the privacy policy at Hygraph Privacy Policy.
How does Hygraph use Google Analytics and what privacy measures are in place?
Hygraph uses Google Analytics to analyze website usage and improve offerings. IP anonymization is enabled to prevent identification. Users can opt out by adjusting browser settings or installing the Google Analytics opt-out plugin. For exceptional cases of data transfer to the USA, Google complies with the EU-US Data Privacy Framework. More details are available in the privacy policy and at Google Analytics Opt-Out.
What rights do users have regarding their personal data with Hygraph?
Users have the right to information, correction, deletion, restriction, objection, and data transferability regarding their personal data. To exercise these rights, users can email support@hygraph.com. If users believe their data is processed unlawfully, they may appeal to a supervisory authority. See Privacy Policy for details.
How does Hygraph comply with data protection laws like GDPR?
Hygraph strictly adheres to GDPR, the German Data Protection Act, and the German Telemedia Act. The platform is GDPR compliant and provides mechanisms for user consent, data access, and deletion. Hygraph also holds SOC 2 Type 2 and ISO 27001 certifications for enhanced security and compliance. For more, visit Security Features.
What is Hygraph's data protection policy regarding website visits and personal data?
Hygraph stores technical information about website visits (date, time, page accessed) for stability and security. Personal data is only collected with prior consent and is not forwarded to third parties without explicit permission. Data transmission via the internet may have security vulnerabilities, and Hygraph cannot guarantee complete protection against third-party access. See Imprint for details.
Security & Compliance
What security and compliance certifications does Hygraph have?
Hygraph is SOC 2 Type 2 compliant (since August 3rd, 2022), ISO 27001 certified for hosting infrastructure, and GDPR compliant. These certifications demonstrate Hygraph's commitment to secure and compliant data management. For more details, visit Security Features and Security Report.
What security features does Hygraph offer?
Hygraph provides granular permissions, SSO integrations, audit logs, encryption at rest and in transit, and regular backups. Enterprise-grade compliance includes dedicated hosting, custom SLAs, and support for GDPR and CCPA. Security issues can be reported, and certified infrastructure reports are available. See Security Features for more.
Product Features & Capabilities
What are the key capabilities and benefits of Hygraph?
Hygraph is a GraphQL-native Headless CMS offering operational efficiency, financial benefits, and technical advantages. Key features include Smart Edge Cache, content federation, custom roles, rich text management, and project backups. Proven results include 3X faster time-to-market for Komax and a 15% engagement increase for Samsung. Learn more at Features.
How does Hygraph ensure high product performance?
Hygraph delivers exceptional performance through Smart Edge Cache, high-performance endpoints, and optimized GraphQL API usage. These features enable fast, reliable content delivery for global audiences. For technical details, see Performance Improvements Blog.
How easy is it to get started with Hygraph?
Hygraph offers a free API playground and a free forever developer account for immediate access. The onboarding process includes introduction calls, account provisioning, and technical/content kickoffs. Training resources such as webinars, live streams, and documentation are available at Hygraph Documentation.
What feedback have customers given about Hygraph's ease of use?
Customers praise Hygraph's intuitive editor UI and accessibility for non-technical users. It was recognized for "Best Usability" in Summer 2023. Users appreciate custom app integration and positive sentiments about flexibility and user-friendliness. See Try Hygraph for more.
Use Cases & Target Audience
Who is the target audience for Hygraph?
Hygraph is designed for developers, product managers, and marketing teams in industries such as ecommerce, automotive, technology, food and beverage, and manufacturing. It is ideal for organizations modernizing legacy tech stacks and global enterprises needing localization, asset management, and content federation. See Hygraph for Enterprise.
What problems does Hygraph solve for businesses?
Hygraph addresses operational inefficiencies, financial challenges, and technical issues such as developer dependency, legacy tech stack modernization, content inconsistency, high costs, slow speed-to-market, integration difficulties, and performance bottlenecks. Solutions include a user-friendly interface, GraphQL-native architecture, content federation, and Smart Edge Cache. See CMS KPIs Blog for metrics.
Can you share some customer success stories with Hygraph?
Komax achieved a 3X faster time-to-market, Autoweb saw a 20% increase in website monetization, Samsung improved customer engagement by 15%, and Stobag increased online revenue share from 15% to 70%. More stories are available at Customer Stories.
Support & Implementation
What customer service and support does Hygraph offer?
Hygraph provides 24/7 support via chat, email, and phone, real-time troubleshooting through Intercom chat, a community Slack channel, extensive documentation, training resources, and a dedicated Customer Success Manager for enterprise customers. See Documentation and Enterprise Support.
How long does it take to implement Hygraph and how easy is it to start?
Implementation time varies by project. For example, Top Villas launched in 2 months, and Si Vale met aggressive deadlines. Hygraph's onboarding includes introduction calls, account provisioning, and technical/content kickoffs. Training resources and documentation are available for a smooth start. See Top Villas Case Study and Documentation.
What training and technical support is available for Hygraph customers?
Hygraph offers a structured onboarding process, webinars, live streams, how-to videos, extensive documentation, 24/7 support, Intercom chat, a community Slack channel, and a dedicated Customer Success Manager for enterprise clients. See Documentation and Pricing for more.
How does Hygraph handle maintenance, upgrades, and troubleshooting?
Hygraph is cloud-based, so all deployment, updates, and maintenance are managed by Hygraph. Upgrades are seamless, and troubleshooting is supported via 24/7 support, Intercom chat, documentation, and a Customer Success Manager for enterprise clients. See Documentation for details.
Data Privacy & Personalization
How does Hygraph approach data privacy in content personalization?
Hygraph supports compliance with privacy laws like GDPR and CCPA. The platform encourages the use of zero-party data, which is collected with explicit user consent, ensuring privacy and legal compliance. For more, see Zero-Party Data Blog.
What is zero-party data and why is it important for personalization?
Zero-party data is information that customers intentionally share with a business. It is crucial for personalization because it is accurate, enables tailored experiences, and ensures compliance with privacy laws. According to a 2024 Deloitte survey, 51% of US consumers are willing to share data for personalization. Learn more at Zero-Party Data Blog.
KPIs & Metrics
What KPIs and metrics are associated with the pain points Hygraph solves?
Key metrics include time saved on content updates, system uptime, content consistency across regions, user satisfaction scores, reduction in operational costs, speed to market, maintenance costs, scalability metrics, and performance during peak usage. For more, see CMS KPIs Blog.
We, Hygraph GmbH, Dircksenstraße 47, 10178 Berlin, Germany (hereinafter "we/our"), take the protection of your personal data very seriously and strictly adhere to all applicable laws and regulations on data protection, in particular the General Data Protection Regulation (GDPR), the German Data Protection Act (Bundesdatenschutzgesetz - BDSG) and the German Telemedia Act (Telemediengesetz - TMG). The following explanations will give you an overview of how we ensure this protection and which data we process for which purpose.
1. Name and address of the Controller
The Controller within the meaning of Art. 4 No. 7 of the GDPR is:
2. Name and address of the data protection officer
The data protection officer of the person responsible is: Michael Lukaszczyk
3. Your rights as the data subject
You have the following rights towards us regarding your personal data:
Right to information
Right to correction or deletion
Right to restrict processing
Right to object to the processing
Right to data transferability
Please send an email to support@hygraph.com in order to exercise one or more of the aforementioned rights. If you believe that the processing of personal data concerning you violates the GDPR, you have the right of appeal to a supervisory authority, without prejudice to any other remedies.
4. General information regarding the data processing
When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which are technically necessary for us to display our website to you and to provide stability and security (legal basis is Art. 6 para. 1 s. 1 lit. f GDPR):
IP address
date and time of the request
time zone difference to Greenwich Mean Time (GMT)
content of the request (specific page)
access status/HTTP status code
the amount of data transferred in each case
website from which the request comes
Browser
operating system and its surface
language and version of the browser software.
In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard disk in the browser you use. Through these cookies we receive certain information from you. Cookies cannot run programs or transmit viruses to your computer. They serve to make the website more user-friendly and effective overall.
We process and store your personal data only for the period necessary to achieve the storage purpose or insofar as required pursuant to applicable laws. If the storage purposes ceases to apply or if a storage period stipulated by applicable laws expires, the personal data is routinely blocked or deleted in accordance with the statutory provisions.
The criterion for the duration of the storage of your personal data is the respective legal retention period. After expiry of this period, the corresponding data will be routinely deleted, provided that they are no longer required for contract fulfilment or contract initiation or other legitimate interests.
5. Use of cookies
a. This website uses the following types of cookies, the scope and functioning of which are explained below:
Transient cookies (see b),
Persistent cookies (see c).
b. Transient cookies are automatically deleted when you close your browser. This includes in particular the session cookies. These store a so-called session ID, with which different requests of your browser can be assigned to the common session. This will allow your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.
c. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.
d. You can configure your browser settings according to your wishes and, for example, refuse the acceptance of third party cookies or all cookies. Please note that you may not be able to use all functions of this website.
e. We use cookies to identify you for follow-up visits if you have an account with us. Otherwise you will have to log in again for each visit.
f. The purpose of using technically required cookies is to simplify the use of our website for your benefit. Several functionalities of our website cannot be offered without the use of cookies. For these functionalities it is required to re-identify the browser. The use of analytical cookies serves the purpose of improving the quality of our website and its contents. These cookies show the use of the website, enabling us to optimize our offering.
g. The legal basis for the use of cookies is Art. 6 Par. 1 S. 1 lit. f GDPR. Our legitimate interest is covered in lit. g above.
6. Use of Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc. "("Google"). Google Analytics uses cookies to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, Google will reduce your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with further services associated with website and Internet use.
The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
This website uses Google Analytics with the extension "_anonymizeIp()". As a result, IP addresses are further processed in abbreviated form, so that an identification can be ruled out. As a result, insofar as the data collected about you enable an identification, such possibility will be excluded immediately.
We offer a chat for our users as an additional option for our users to communicate with us via our website. The information set forth in section 4 is processed in connection with your use of the chat function. Legal basis is Art. 6 para. 1 s. 1 lit. f GDPR.
If you want to use our service “Hygraph”, you have to sign up with your email-address, a password and your name. We use the so-called double opt-in procedure for sign up, i.e. your registration is not complete until you have previously confirmed your registration via a confirmation e-mail sent to you for this purpose by clicking on the link contained therein. If your confirmation is not received, your registration will be automatically deleted from our database.
Providing the above data is mandatory. Any further personal data you provide us with is voluntary and you consent into its processing in accordance with this privacy policy by providing it.
We process the personal data only for and in connection with the provision of Hygraph.
We use your email address to provide you with information about updates of Hygraph via our regular newsletter. You can revoke your consent to receive our newsletter at any time by using the respective link in the newsletter or sending an email to support@hygraph.com.
The legal basis for the processing of mandatory personal data in relation to the use of Hygraph is Art. 6 para. 1 s. 1 lit. b GDPR; the legal basis for voluntary personal data is Art. 6 para. 1 s. 1 lit. a GDPR.
We use services and storage systems of external service providers for the provision of Hygraph. These service providers have access to the personal data you upload to Hygraph. The processing of your personal data by the respective service provider is based on an agreement on data protection and data security that complies with legal requirements.
These service providers are categorized as follows:
Hosting service providers,
Subscription management and invoicing tool providers,
Payment processing tool providers,
Authentification tool providers,
Communication tool providers,
Error analysis tool providers.
Last updated: 25.01.2022
Get started for free, or request a demo to discuss larger projects