Privacy Policy

What we process

• Account: your name, email address, a hash of your password (never the password itself) and, if you sign in with Google, your Google account id.
• Profile: the platforms you create for, your own handle if you entered it, the topic and description you chose, your content language.
• Usage: the creators you follow, saved videos, collections, notes, scripts, breakdown requests and credit movements.
• Feedback: the message you send from the app, the page you were on when you sent it (the address without its query part), your language and browser details. If you delete your account your messages are not deleted: the link to your account is removed and they are kept anonymously, so we recommend not writing personal details in them.
• Billing: your Paddle customer and subscription ids, your plan and subscription status. Card details never reach us; Paddle handles them.
• Technical: session cookies, the IP address and browser details of your sessions.
• Analytics (only with your consent): the pages you visit (addresses without their query part) and the sign-up, setup, breakdown, script and payment steps, tied to your user id; your email and name are never sent.
• Error reports: technical details when something breaks in the app (email addresses and session data are stripped).

Why we process it

• To provide the Service: your feed, breakdowns and scripts.
• If you allow it, to measure usage and improve the product.
• To manage your subscription and credits.
• To keep your account and the Service secure and prevent abuse.
• To meet our legal obligations.

Who we share it with

We don't sell your data. We share it only as far as needed to run the Service, with:

• Vercel (hosting) and Neon (database).
• Trigger.dev (background jobs).
• Sentry (error reports; hosted in the EU).
• PostHog (usage analytics; only with your consent, hosted in the EU).
• Anthropic (AI): your topic description, your script direction and the public details of the video being analyzed. By default Anthropic does not use data sent through its API to train models.
• ScrapeCreators and the Google YouTube Data API: to fetch public details of handles you enter and of creators.
• Paddle (payments and invoicing; as merchant of record its own privacy policy applies).
• Google (only if you sign in with Google).

International transfers

These providers mostly run servers in the United States and the European Union. Your data is transferred there with the safeguards the applicable law requires.

How long we keep it

• Account and usage data: until you delete your account.
• Feedback messages: 1 year; if you delete your account, they are unlinked from it and kept anonymously.
• Breakdown request records: 30 days.
• Payment notifications (webhook records): 90 days.
• Analytics events (only with your consent): kept at PostHog for PostHog's retention period. To have them deleted sooner, write to contact@hithunter.ai and we delete them.
• Paddle keeps your invoices itself for as long as tax law requires.

Your rights

You can access your data, ask us to correct or delete it, and object to processing. You can delete your account yourself on the Profile page; this deletes all data tied to your account in our systems (except feedback you sent, which is kept anonymously) and cancels an active subscription. Analytics events at PostHog are not deleted automatically with it; write to us to have them deleted.

For anything else, write to contact@hithunter.ai. Your rights in Türkiye are set out in detail in the KVKK Notice.

Cookies

We use the cookies and storage the Service needs to work: the session cookie, your language and time zone preference and your cookie choice. When you open the checkout, Paddle uses its own cookies. Analytics (PostHog) only start after you press “Accept” in the cookie notice; until then PostHog is not even loaded. You can withdraw any time under “Cookie settings” at the bottom of the page; rejecting deletes PostHog's records in your browser and keeps only a marker that you refused.

Security

Connections are encrypted, passwords are stored only as hashes and access to data is limited to the systems that need it.

Changes

We may update this policy. We announce important changes in the Service.

Contact

ORKESTRA YAZILIM BİLİŞİM TEKNOLOJİLERİ PRODÜKSİYON DANIŞMANLIK İNTERNET HİZMETLERİ REKLAM SANAYİ VE TİCARET LİMİTED ŞİRKETİ, DUMLUPINAR MAH. YUMURTACI ABDİBEY CAD. NO: 15C İÇ KAPI NO: 19 KADIKÖY / İSTANBUL, Göztepe Vergi Dairesi, VKN 6470355018, MERSİS 0647035501800001, contact@hithunter.ai