1. Information We Collect
We collect the following types of information to provide and improve our service:
- Account Information: Email address, name (full_name), and encrypted password. We also store optional profile information such as avatar_url.
- Usage Data: Information on how you use the service, including logs, search queries, last login timestamps (last_login_at), and interaction patterns.
- Hunt Configuration Data: Product names, product descriptions, pain points, buy signals, target audience definitions, score thresholds, timezone preferences, and cron expressions you provide for monitoring configurations.
- Payment Data: Transaction history processed securely by Stripe. We do not store full credit card numbers or sensitive payment information on our servers.
- Beta Program Data: If you participate in our beta program, we may collect additional information such as your use case for Reddit, product information, and feedback comments.
2. How We Use Your Information
We use your data to:
- Provide, maintain, and improve the Huntopic service
- Process your monitoring configurations (Hunts) using Artificial Intelligence to generate search queries, create product embeddings, and analyze Reddit posts for relevance
- Send billing, administrative, and support emails via Brevo (formerly Sendinblue)
- Send push notifications via ntfy.sh when new leads are discovered that meet your configured thresholds
- Prevent fraud and abuse
- Comply with legal obligations
3. Data Sharing and Third Parties
We do not sell your personal data. We share data only with essential service providers:
- AI Providers (OpenAI, Google Gemini): Your hunt configuration inputs (product description, target audience, pain points, buy signals) are sent to Large Language Models (LLMs) to perform analysis, generate search queries, create embeddings, analyze post relevance, and generate suggested replies. These providers are bound by confidentiality agreements and do not use your data to train their public models. We use OpenAI for embeddings and reply generation, and Google Gemini for analysis tasks.
- Cloud Infrastructure (Supabase): To host the service and database. Supabase provides our PostgreSQL database and authentication services. All data is encrypted in transit and at rest.
- Payment Processors (Stripe): To handle billing and subscription management. Stripe processes all payment transactions securely and we do not have access to your full payment card details.
- Email Service (Brevo): To send transactional emails, notifications, and support communications.
- Push Notification Service (ntfy.sh): To deliver real-time push notifications to your devices when new leads are discovered. Notifications are sent to channels identified by your user ID or hunt ID.
4. Public Data (Reddit)
Huntopic indexes and analyzes publicly available content from Reddit. We collect and process the following public data from Reddit posts:
- Post titles, content, and metadata (author, subreddit, URL, permalink)
- Reddit scores, comment counts, and position in subreddit
- Post creation timestamps
We do not claim ownership of this content. We process this data strictly to provide lead generation insights to our users. Posts are analyzed using AI to determine relevance scores (opportunity scores), generate summaries, identify pain points, and suggest replies. Posts that meet your configured score threshold are saved to your inbox. Posts below the threshold may be temporarily saved for validation purposes but are not permanently stored in your account.
5. Data Security
We take reasonable measures to protect your data, including:
- Encryption of data in transit using SSL/TLS
- Secure database storage with restricted access on Supabase
- Password encryption and secure authentication via Supabase Auth
- Regular security audits and monitoring
- Access controls and authentication requirements for all API endpoints
6. Cookies
We use cookies and similar technologies for:
- Authentication (keeping you logged in via session tokens)
- Basic analytics to understand how our service is used
You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of our service.
7. Your Rights (GDPR / LGPD)
Depending on your location, you may have rights to:
- Access: Request access to the personal data we hold about you
- Deletion: Request deletion of your account and associated data
- Export: Request an export of your data in a portable format
- Correction: Request correction of inaccurate personal data
- Objection: Object to processing of your personal data in certain circumstances
To exercise these rights, please contact us at support@huntopic.com. We will respond to your request within 30 days.
8. Data Retention
We retain your data for as long as your account is active or as needed to provide our services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.
Posts discovered from Reddit that you have saved or archived will be retained until you delete them or close your account. Posts that were discarded and temporarily saved for validation may be automatically purged after a reasonable period.
9. Children's Privacy
Our service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
10. Changes to This Policy
We reserve the right to modify this Privacy Policy at any time. We will notify users of significant changes via email or dashboard notification.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
Email: support@huntopic.com