Privacy Policy

1. Controller and Scope

HuntAI (“we,” “our,” or “us”) operates huntai.tools (the “Service”) and is the data controller for personal information whose purposes and means we determine. This Policy covers the HuntAI directory, accounts, product submissions, corrections, and promotion services. Our privacy contact is [email protected]; no separate data protection officer is currently appointed.

2. Information We Collect

• Account and authentication data: User ID, name, email, profile picture, and session data returned by Google or GitHub OAuth. We do not receive your OAuth password.
• Submission and public listing data: Product name, official URL, description, category, pricing type, launch date, screenshots, external references, corrections, and review information you submit. Approved information may be displayed publicly.
• Promotion and payment data: Selected Free, Basic, or Pro tier, submission slug, requested promotion date, account identifier, and email. The necessary details are sent to Waffo Pancake when checkout is created. HuntAI does not receive or store full card numbers, CVVs, or card-authentication data.
• Communications: Support, refund, report, appeal, and feedback messages you send us.
• Technical and usage data: IP address, request time, browser/device category, page visits, and error/security logs. Self-hosted Plausible receives paths with query/hash removed, referring-site origins, and aggregate engagement. Only after analytics consent does GA4 receive low-sensitivity events such as page type, locale, controlled action enums, search-length/result-count buckets, public product slugs, and positions. We do not send full search text, email, tokens, cookies, or submission content to analytics tools.

3. Uses and Legal Bases

• Provide accounts, directory features, submission review, corrections, and promotion: performance of a contract.
• Create checkout and support fulfillment/refunds: performance of a contract and legal obligations.
• Prevent fraud, abuse, SSRF, and unauthorized access: legitimate interests and security obligations.
• Respond to support, reports, and appeals: contract performance or legitimate interests.
• Basic aggregate measurement and performance diagnostics: legitimate interests; GA4 analytics: your consent.
• Tax, accounting, regulatory, or law-enforcement requirements: legal obligations.

4. Cookies and Analytics Choice

Authentication uses cookies required to keep you signed in. Self-hosted Plausible creates no analytics cookie and measures basic page traffic. GA4 does not load unless you choose Allow in the analytics prompt; declining does not affect the directory, search, submissions, or sign-in. The choice is stored in localStorage and can be changed through Analytics preferences in the Footer. Vercel Speed Insights is used only for performance RUM.

5. Sharing and Payment Processing

We do not sell or rent personal information. We share only what is needed with:

• Waffo Pancake: merchant of record for checkout, payment cards, taxes, receipts, and refunds. Payment-card data does not pass through HuntAI servers.
• Google and GitHub: authentication through the OAuth provider you choose.
• Controlled PostgreSQL and hosting infrastructure: accounts, submissions, and service operation.
• Self-hosted Plausible, consent-enabled Google Analytics 4, and performance-only Vercel Speed Insights.
• Courts, regulators, or law enforcement: only when legally required or necessary to protect users and the Service.

6. Security and Breach Response

We use HTTPS, restricted server credentials, access controls, input validation, rate limiting, and security logs, and isolate payment-card handling to Waffo Pancake. No internet service can guarantee absolute security. If a personal-data breach requires notice, we will notify affected users and authorities without undue delay and target regulatory notice within 72 hours of awareness where applicable law requires it.

7. Retention

• Account/authentication data: retained while the account exists; active data deleted within 30 days after a verified deletion request, with restricted backups retained for up to 90 additional days.
• Non-public submission, review, and support records: up to 24 months after review/ticket closure for disputes, abuse prevention, and corrections.
• Public product information: retained while relevant to the directory; verified correction or removal requests are handled subject to editorial and legal obligations.
• Server and security logs: up to 90 days unless a security investigation or legal requirement needs longer.
• Analytics events: up to 24 months, then deleted or aggregated.
• Payment-card data: never retained by HuntAI; Waffo Pancake retains transaction records under its legal, tax, and accounting obligations.

8. Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent, and complain to a regulator. Withdrawal does not affect earlier lawful processing.

Contact [email protected]. We will verify your identity and normally respond within 30 calendar days.

9. International Transfers

HuntAI and its providers may process data outside your country or region. Where required, we use data-processing agreements, Standard Contractual Clauses, adequacy decisions, or other recognized safeguards and limit recipients to agreed purposes.

10. Children

The Service is intended for users aged 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor provided data, contact us so we can verify and delete it.

11. Third-Party Sites

The directory links to third-party products, websites, and privacy policies. This Policy covers only processing controlled by HuntAI; review external terms and privacy practices before visiting those sites.

12. Policy Changes

We may update this Policy and will change the “Last updated” date on this page. Material changes will be announced through the website or account email where reasonably practicable.

13. Relationship to the Terms

Payment, refund, acceptable-use, reporting, and enforcement rules are in our Terms of Service.

14. Contact Us

Email: [email protected]
Website: huntai.tools