Privacy Policy

This page says what personal data Hushr collects, why, who it goes to, how long we keep it, and how to delete it.

1. Who is responsible

Adroi Ltd., 5 Hahoresh St., Yehud, Israel, runs Hushr and is responsible for your personal data (the "controller").

Privacy questions and requests: support@hushr.io.

2. What we collect and why

  • Your Google sign-in: your name, email address and Google account id. We use them to sign you in, name your account, decide if your email can get a free trial or the Free plan, and support you. We never see your Google password.
  • What you tell Hushr: your messages in the setup chat, your description of your ideal customer, your brand and rival names, and the subreddits you pick. We use them to find and score posts for you.
  • Your website: if you give us your website address, Hushr reads that page once (following its redirects). It keeps the website's domain name (for example example.com) and up to 12,000 characters of the page's text, to draft your customer profile. It does not keep the rest of the address.
  • Your Slack alert link: if you connect Slack, we keep the webhook link encrypted and use it only to send your alerts.
  • Your voice: the text you save in the "Your voice" box in settings, so replies are drafted in your own style.
  • Replies: the replies Hushr drafts for you and the edits you make.
  • Emails you send us: if you write to support@hushr.io, we keep your email address, the name your email shows, and what you write. We use them to reply to you.
  • Billing: your plan, subscription status, and Paddle's ids for your subscription. Paddle holds your card and billing details. We never see your card.
  • Usage and costs: how many AI calls your account made and what they cost, and how much you use each feature (for example summaries, reply drafts and Pull now). We use this to apply plan limits, to support you, and to see how our service is used.
  • Product usage: which pages you open, when you press Pull now or Upgrade (and which plan you pressed it for), and which reply draft you copy (its place in the set of five and its style, never its text), with your account id, your user id and the time, so we can see which features are used and fix confusing ones.
  • Sign-in and security records: our sign-in provider records sign-ins, including the IP address and browser used, to keep accounts safe. Our servers keep short technical logs to find and fix errors.
  • Invites: while Hushr is invite only, we keep the email address of each person we invite, the plan and number of days the invite gives, a short note on why we invited them, and when it was used. If you sign in with Google without an invite, our sign-in provider still keeps a record of that Google account (your name, email address and Google account id), but we make no Hushr account for it.

We do not sell your personal data. We do not use it for advertising. We do not use your data to train AI models.

3. Reddit posts

Hushr collects public posts and comments from the subreddits our customers pick, and from Reddit searches for the brand names they add. These include the Reddit usernames of the people who wrote them. We keep them so the customer who watches that subreddit can read them in Hushr.

We collect them from Reddit's pages on a computer we run, using a browser session from a Reddit account we control, because Reddit blocks requests from cloud servers. We never use your Reddit account.

We do not try to find out who a Reddit user is, and our terms forbid customers from doing so.

If a post is deleted on Reddit after we collected it, our copy can stay until every customer account that has it is deleted. We delete accounts by hand. We remove the post within 4 days after the last of those accounts is deleted.

If you wrote a post and want our copy removed, write to support@hushr.io with the link. We will remove it by hand within 30 days.

4. Legal basis

We use your account data because we need it to give you the service you signed up for (our contract with you).

We use emails you send us because you asked us to: to reply to you.

We use security records and Reddit posts because we have a legitimate interest in keeping Hushr safe and in showing public posts to the customers who watch them.

To support customers and see how Hushr is used, our team looks at each account's details: the account's name, the people on it, their email addresses and whether each is an owner or a member, its plan and tags (Test, Internal or Archived), whether it has paid, is on a trial until a given day, is on Free, is internal, is a test account or is closed, its Paddle subscription status, its AI spend, how many subreddits and brands it has against its plan limits, how much it uses each feature, whether its Slack alerts are connected, how far its setup has got, the last thing someone on it did in Hushr and when, and when its people last signed in. We also see the account id, the date the account was created and how many posts are in its feed. For anyone who signed in but has no account, we see their email address, their sign-up date and when they last signed in. We have a legitimate interest in doing this.

We use product usage records because we have a legitimate interest in seeing which features of Hushr are used and fixing confusing ones. We record them on our own server, with no tracking script and no cookie, and our team sees them per account on our private admin page.

5. Who we share it with

We use these companies and systems to run Hushr. Each only gets what it needs for its job.

  • Supabase (database and sign-in), in the United States: all of the data above.
  • Amazon Web Services (the server that runs Hushr), in the United States: the data passes through it, and it keeps technical logs.
  • Our own computer, in Israel: it fetches Reddit posts and runs our background jobs (scoring, summaries and alerts). Before launch it also runs the AI requests for the setup chat, summaries and reply drafts. It can reach the data those jobs and requests need.
  • Anthropic (AI models): the posts being scored or summarized, your customer description, your brand names, your setup chat, your website text, the voice description you save (when drafting replies), and the reply drafts you write or approve (when we check them before you post). Before launch, these requests run through a Claude subscription on our own computer, under Anthropic's consumer terms. Once launched, they go to Anthropic's API under its commercial terms: Anthropic does not train its models on this data and deletes it within 30 days, unless it is flagged for misuse.
  • Google (sign-in): Google tells us your name and email when you sign in. Our sign-in page can show Google's own sign-in button. When it is turned on, the button loads from Google, so Google sees your IP address and browser when you open that page.
  • Paddle (payments, as Merchant of Record): your billing details and payments. Paddle has its own privacy policy.
  • Slack (only if you connect it): each alert's posts (title, subreddit, link, score and a short reason written by our AI) go to the Slack channel you chose.
  • Telegram (our own error alerts): your account id and error details when something breaks. Never your posts or messages.
  • Reddit: the subreddit names you pick and the brand names you add are used as Reddit requests and searches.
  • Hostinger and Cloudflare (hosts of our public homepage, hushr.io): they serve that site and protect it. They see visits to the public site: your IP address, browser details and the pages you ask for. Hostinger gets no account data, because you do not sign in on the homepage. Before launch, Cloudflare also carries the AI requests between our server and our own computer (the data listed for Anthropic above), only to pass them on.
  • Zoho (Zoho Mail, our email host), in the United States: emails you send to support@hushr.io and our replies, including your email address and anything you write.

We may also share data with our professional advisers, or with authorities when the law requires it.

6. Where your data is stored

Our database and server are in the United States (AWS us-east-1, Virginia). Our own computer that fetches Reddit posts, runs background jobs and, before launch, runs AI requests is in Israel. If you are outside these countries, your data is moved there.

Our email is hosted by Zoho Mail in the United States.

7. How long we keep it

  • While you have an account, on any plan including Free, we keep your data so Hushr can work.
  • When a trial or a paid plan ends, the account moves to the Free plan, unless our terms (section 6) say it cannot have one. Either way we keep its data. Ask us and we delete it.
  • We keep the email domain of a company that had a free trial (for example acme.com, never the full address), even after its account is deleted, so that each company gets one trial and one Free account.
  • We keep product usage records (which pages you open and which actions you take) for 400 days, then delete them.
  • We keep invites, used or not, and the sign-in record of a Google account that tried to sign in without an invite, until you ask us to delete them.
  • Deleted data can stay in backups until they are replaced: up to 7 days in our server's daily snapshots, and as set by our database host, up to 30 days, in database backups.
  • Paddle keeps billing records as the law requires. Ask Paddle about those.
  • We keep emails you send us, and our replies, until you ask us to delete them.

8. Your rights and how to delete your data

You can ask us to show you your data, send you a copy, correct it, or delete it. You can also object to how we use it.

To delete your account and its data, write to support@hushr.io from the email you sign in with. We delete it by hand within 30 days and email you when it is done.

We answer every request within one month.

If you are in the EU or UK and are unhappy with our answer, you can complain to your local data protection authority.

9. Security

We use HTTPS everywhere. Your Slack link is encrypted. Only people and systems we run for Hushr, and the providers in section 5, can reach your data, and only as needed to run Hushr. No method is perfect, so we cannot promise absolute security.

10. Cookies

Hushr uses cookies only to keep you signed in. We use no advertising or tracking cookies.

When you pay, Paddle's checkout may set its own cookies.

When Google's sign-in button is on the sign-in page, it may use Google's own cookies.

11. Children

Hushr is for businesses. It is not for anyone under 18.

12. Changes

We will post any change here with a new date. If a change matters, we will email account owners first.