Privacy

• Your account. Your email address and a password. The password is stored only in hashed form by our sign-in provider; we can't read it.
• Your firm's setup. Your website address, the firm name and description, the countries, client questions and competitors you choose. To suggest these, we read the public pages of the website you enter.
• Results. The answers ChatGPT and Google AI Mode give to your questions, word for word, and the public pages those answers cite.
• Billing. Stripe, our payment provider, collects your card details; we never see or store the card number. We keep your Stripe customer and subscription references, your plan, its status and dates, and a card fingerprint: a code Stripe derives from the card number, which can't be used to charge the card or recover its number. We use the fingerprint only to allow one free trial per card.
• Messages to us. If you fill in our contact form: your name, work email, company, website, where your clients are, and anything you write.
• Technical logs. Our hosting providers record standard request details, such as IP address, browser and time, which we use to keep the service secure and fix problems.

• To run the service: collect answers to your questions every week and show you the results.
• To bill you, and to apply the one-free-trial-per-card rule.
• To reply to you and support your account.
• To keep the service secure, prevent abuse and fix problems.

We never show another customer which firms you track, or that anyone tracks your firm. Your questions, competitors and results are visible only to people with access to your workspace and to us when we support you.

These companies process data on our behalf, only to provide their part of the service:

• Supabase: database and sign-in.
• Vercel: hosting for the website and app.
• Trigger.dev: runs the weekly collection.
• Stripe: payments, invoices and receipts.
• Anthropic: reads the public text of your website to draft your firm profile and questions.
• treg: sends your client questions to ChatGPT and Google AI Mode and returns the answers. It receives each question and its country, not your name or email.

Our database is in the United States, and these providers may process data in other countries. We rely on their contractual commitments to protect it.

We use only the cookies needed to keep you signed in. We don't use analytics or advertising cookies. Stripe sets its own cookies on its payment pages; see Stripe's privacy policy.

• Account, setup and results: while your account is open, and until you ask us to delete them.
• Contact form messages: until you ask us to delete them.
• Billing records: as long as tax and accounting law requires, held by Stripe and us.
• Card fingerprints: kept after an account is deleted, unlinked from it, so the same card can't start a second free trial.

You can ask to see the personal data we hold about you, correct it, or delete it, and you can withdraw consent you've given. Email support@hushrocket.com from the address on your account. Deleting your account stops tracking and removes your setup and results. For how cancelling a plan works, see Refunds.

HushRocket is for businesses. It isn't meant for anyone under 18, and we don't knowingly collect their data.

If we change how we use your data, we'll update this page and its date. If the change matters to you, for example a new kind of data or a new use, we'll email you before it takes effect.