This policy explains what Hunter collects, why, and what you can do about it. It is written to be read, not skimmed past.
What we collect
- Your account. Email address, name, and, if you sign in with Google, the basic profile Google shares (name, email, avatar). We never see your Google password.
- Your workspace data. Leads, notes, tasks, emails you send through Hunter, sequences, integration settings, and activity logs. This is your business data; you own it.
- Usage and diagnostics. Server logs (IP address, browser, timestamps, request paths) kept for security and debugging, and counts of AI drafts and emails sent for plan limits.
How we use it
- To run the product: store your pipeline, send the emails you ask us to send, run follow-up sequences, and deliver webhooks to the endpoints you configure.
- To draft first replies with an AI model when you click “Draft”. Only the lead's public details and your business profile are sent to the model; the model provider does not train on it.
- To email you about your account: confirmations, password resets, invitations, and service notices. No marketing without your consent.
Leads you store about other people
You are the controller of the lead data you put into Hunter; we process it on your instructions. Use Hunter in line with the anti-spam and privacy laws that apply to you (for example CASL in Canada, GDPR in the EU, CAN-SPAM in the US). Hunter stops sequences the moment someone replies, and every outreach email carries a reply path to you.
Who else sees it
- Subprocessors: Supabase (database and authentication, US West), Vercel (hosting), Resend (email delivery), Apify (lead finding, only with your own token), Google or Anthropic (AI drafts). Each is bound by its own data processing terms.
- Integrations you connect (Slack, webhooks, Zapier and similar) receive exactly the events you subscribe them to.
- We do not sell personal data and we do not share it with advertisers.
Retention and deletion
Workspace data stays as long as your workspace exists. Delete a lead and its history goes with it. Delete your workspace, or ask us to, and everything is removed within 30 days, except logs kept for security for up to 90 days and records we must keep by law.
Your rights
You can export your leads as CSV at any time, correct anything in the app, and ask us to access, correct, port, or delete your data by emailing hello@usehunter.app. We answer within 30 days.
Security
Data is encrypted in transit and at rest. Access is scoped per workspace at the database layer; API keys and integration secrets are stored hashed or server-side only and are never shown again after creation.
Changes
If this policy changes in a way that matters, we email account owners before it takes effect.