Privacy Policy

1. Scope

This policy applies to visitors of the public website, registered workspace users, trial users, administrators, and any third-party data processed through the service, including source feeds, generated digests, and connected social publishing accounts.

2. Information we collect

2.1 Account and identity data

• Name, email address, login credentials, account role, and billing plan details.
• Administrative activity such as subscription updates, publishing actions, and configuration changes.

2.2 Workspace and content data

• Branches, keywords, sources, prompts, schedules, templates, draft digests, and generated outputs.
• Article metadata, imported feed data, source URLs, commentary text, calendar slots, and publication history.

2.3 Integration data

• API keys entered by users or administrators for AI providers.
• OAuth tokens, profile identifiers, page identifiers, usernames, and account metadata for supported social platforms.
• Webhook verification tokens and application credentials used to connect platform APIs.

2.4 Technical and diagnostic data

• IP address, browser or device information, session data, error logs, job logs, and security event records.
• Usage metrics required to monitor service health, job execution, and abuse prevention.

3. How we use information

• To provide the service, authenticate users, and maintain secure account access.
• To generate digests, publish content, manage sources, and execute scheduled workflows.
• To enforce subscription plans, protect against abuse, investigate errors, and improve reliability.
• To process customer support requests, legal requests, and data deletion requests.
• To comply with applicable law, platform requirements, and payment obligations.

4. Legal bases for processing

Where applicable, we process personal data because it is necessary to perform a contract, because you have requested or initiated the use of the service, because we have a legitimate interest in securing and operating the platform, or because we must comply with legal obligations.

5. AI and third-party processing

The service may send data to third-party processors selected by your workspace, including AI model providers, social networks, payment processors, and infrastructure providers. The specific processors used depend on the keys, tokens, and integrations configured inside your workspace.

6. Social platform connections

When you connect Telegram, Facebook, Instagram, Threads, Reddit, or other supported channels, we store the minimum token and account data required to refresh profiles, assign branch targets, and publish on your behalf. If you disconnect an integration, we remove stored tokens and clear related branch links from the application database.

7. Billing and payment data

Payments are processed through Stripe or another designated processor. We do not store full payment card details in the application. We may store plan, billing cycle, payment status, invoice references, and refund event data needed to manage subscriptions and support requests.

8. Data retention

• Account and billing records are retained for as long as needed to provide the service and meet legal obligations.
• Workspace content remains until deleted by the user, deleted by request, or removed according to internal retention rules.
• Security and diagnostic logs may be retained for a limited period to investigate abuse, outages, or compliance events.

9. Security

We use access controls, credential scoping, role-based restrictions, logging, and encrypted secret storage to reduce the risk of unauthorized access. No system is perfectly secure, and you remain responsible for safeguarding your own credentials and the external platform accounts connected to your workspace.

10. International transfers

Because the service may rely on global infrastructure and third-party providers, data may be processed in jurisdictions outside your own. By using the service, you acknowledge that such transfers may occur as necessary to operate the product.

11. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, object to, restrict, or delete your personal data. You may also withdraw connected integrations and request account closure.

Requests can be sent to legal@hitechbg.com or support@hitechbg.com.

12. Children

The service is not intended for children and is designed for business, editorial, research, or operational use by adults or authorized workplace users.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material updates may be communicated through the website, the application, or other reasonable channels.

14. Contact

For privacy and legal questions, contact legal@hitechbg.com. For support matters, contact support@hitechbg.com.