Privacy Policy

Last updated: June 3, 2026

This policy describes how Hitfactor, Inc. ("we", "us") handles your data. We'll be straight with you: what we collect and why, how we handle it, and your rights.

We never sell your data. Never have, never will.

What We Collect

Our guiding principle is to collect only what we need. Here's what that means in practice:

Account Information: Name, email, profile picture (optional), company name (optional). That's so you can personalize your account and we can send you product updates. We'll never sell your personal info to third parties, and we won't use your name in marketing statements without your permission either.
Payment Information: Billing address and last 4 digits of card number. Your full card details go directly to Stripe, our payment processor, and never touch our servers. We store just enough to send you invoices and help with billing support.
Your Content: Brand details, audience information, video titles, scripts, thumbnails, publishing data. This is the stuff you came here to create - we store it so you can use Hitfactor as intended.
Usage Data: How you use our service, browser type, IP address — collected via cookies and similar tracking technologies through PostHog analytics. We use this to make the product better and keep the bad actors out.

Why We Collect It

  • To provide the service you're paying for
  • To process payments and send invoices
  • To send you important service updates
  • To send marketing emails (only with your consent - we're not monsters)
  • To prevent fraud and keep the spammers at bay
  • To make Hitfactor better based on how people actually use it

How We Process and Share It

Internal processing. Within Hitfactor, your information is processed by our application servers and a small number of authorized employees to deliver the product: to authenticate you, store and display your content, run the analytics and content-intelligence features you use, process billing, and provide support. Access to your data inside Hitfactor is limited to personnel who need it to operate or support the service.

External processing. We share information with a small group of third-party service providers ("sub-processors") who process it on our behalf, only to the extent needed to run Hitfactor. We do not share your information with any other external party except as described below. Specifically:

  • Stripe (payment processor, United States) - receives your billing details to issue invoices and process payments. Stripe processes this data under its own privacy policy.
  • Hetzner (hosting provider, United States) - hosts our application servers and databases, and therefore stores the account information and content you provide to us.
  • Google / YouTube (integrations) - we exchange data with Google and YouTube API Services to authenticate your YouTube account and read and (with your OAuth authorization) write YouTube data on your behalf. See the "YouTube API Services" section below for specifics.
  • PostHog (product analytics, United States) - receives usage data (such as pages viewed, feature interactions, browser type, and IP address) so we can understand how the product is used and improve it.

That's it. We don't share your data with any other internal or external party unless we're legally required to by a valid court order or other lawful request. And again, we never sell your data. Not to advertisers, not to data brokers, not to anyone.

Hitfactor does not display third-party advertisements and does not serve third-party ad content of any kind. We do not share your data with advertisers or ad networks.

Cookies & Device Storage

Hitfactor stores, accesses, and collects information directly on your device, and allows certain third parties to do so on our behalf, by placing, accessing, and recognizing cookies, local storage, and similar technologies in your browser. We use these to:

  • Keep you signed in - we set first-party authentication cookies so your session persists between visits.
  • Run the app - we use browser storage (such as local storage and IndexedDB) to cache your data on your device so the app loads quickly and works reliably.
  • Understand usage - our analytics provider, PostHog, sets cookies and reads similar identifiers on your device to measure how the product is used.

You can control or delete cookies and clear local storage through your browser settings. Blocking essential cookies may prevent you from signing in or using parts of Hitfactor.

YouTube API Services

Hitfactor uses YouTube API Services to provide its core functionality. By using Hitfactor, you acknowledge and agree to the following:

YouTube Data We Access: We access and store the following data from YouTube API Services: channel metadata (channel name, description, subscriber count, video count), video metadata (titles, descriptions, durations, view counts, thumbnails), and — with your explicit OAuth authorization — per-video performance metrics from the YouTube Analytics and Reporting APIs (such as views, watch time, average view duration, thumbnail impressions and click-through rate, likes, comments, shares, subscriber changes, and traffic sources). With your OAuth authorization we also read and write your video titles, descriptions, and thumbnails on your behalf.
How We Use YouTube Data: We use YouTube data to provide channel analytics, content performance insights, cross-video pattern analysis, and content classification. When you grant OAuth authorization (via the youtube.force-ssl scope), we also enable management of your video metadata — including updating video titles, descriptions, and thumbnails, individually or in bulk — on your behalf. We do not aggregate YouTube data across unrelated channel owners.
YouTube Data Retention: Channel and video metadata is refreshed periodically and deleted or purged within 30 days if no longer needed. If you revoke your OAuth authorization, any authorized data (such as video titles, descriptions, and thumbnails, and the per-video performance metrics accessed via the authorized scopes) is deleted from our systems within 7 days.
Compliance: Our use of YouTube API Services complies with the YouTube Terms of Service and Google Privacy Policy.
Deleting Your Data and Revoking Access: You can ask us to delete the YouTube data we have stored about you at any time. Disconnecting your YouTube account from within your Hitfactor account settings, or emailing [email protected], triggers deletion of your stored YouTube data on the schedule described above. Separately, and in addition to our normal deletion procedure, you can revoke Hitfactor's access to your Google and YouTube data directly through Google by visiting https://myaccount.google.com/connections?filters=3,4&hl=en.

Your Rights

You're in control of your data. You can:

  • Access your data
  • Correct your data
  • Delete your data
  • Export your data
  • Opt out of marketing emails
  • Tell us to stop processing your data

Many of these you can do right from your account settings. For anything else, just email [email protected] and we'll take care of you.

California Residents

If you're in California, you have some additional rights under the CCPA:

  • Right to know what personal information we collect, use, and disclose
  • Right to delete your personal information
  • Right to opt-out of sale (though again, we don't sell your data)
  • Right to non-discrimination for exercising your rights

Categories we collect: Identifiers, commercial information, internet activity, professional information

We have not sold personal information in the past 12 months and do not sell personal information. Period.

Data Security

All data is encrypted via SSL/TLS when transmitted from our servers to your browser. We also encrypt data at rest. Your data lives on servers in the United States, specifically on the West Coast.

When You Delete Stuff

Delete specific content: We'll move it to trash for 30 days (in case you change your mind), then permanently delete it within 90 days total.
Close your account: Your content becomes immediately inaccessible and will be completely purged from our systems within 60 days. When it's gone, it's gone.

Contact Us

Have questions, concerns, or just want to chat about privacy? We're here for it: [email protected]

Changes to This Policy

We may update this policy from time to time. If we make significant changes, we'll email you. We won't make changes that reduce your rights without giving you a heads up.

The bottom line: We treat your data like we'd want our own data treated. We use it to run our service, we protect it carefully, and we never sell it. That's the deal.