Privacy Policy

Account information. Your name, email address and profile photo, and the sign-in method you use (Google, Apple, Microsoft or an emailed sign-in link). We do not receive your passwords for those providers.

Your products and plans. What you tell us about the products you add: names, descriptions, websites, audiences, goals, and the plans, drafts, posts, emails and results Hustlin creates for them. We may also read the public pages of a product’s website to understand it.

Connected accounts. When you connect an account, we store the access tokens that provider issues, encrypted, and use them only for the purpose you connected it for:

• Social accounts (such as X, LinkedIn, Threads and Instagram): to publish posts you approve or schedule, and to read engagement on those posts (views, likes, replies, shares).
• Meta (Facebook Pages, Instagram professional accounts, Threads and Meta ad accounts): see section 5.
• Revenue sources (Stripe, Shopify): read-only access to orders, charges and subscription totals so we can report results. We cannot move money, issue refunds or change anything in those accounts.
• Google: your contacts (only if you choose to import them, to suggest people you know who may want to hear about your product; only you see these suggestions), Google Ads (to report on and manage campaigns you ask us to run) and Search Console indexing (to submit your product’s pages for indexing).

Conversations and outreach. Conversations with Ask Hustlin, outreach emails sent on your behalf and replies to them.

Payments. Stripe processes subscription payments. We receive your plan and billing status (and may receive your card’s brand and last four digits), never the full card number.

Usage and device data. IP address, browser and device type, pages and features used, crash and error reports, and, if you allow them, a push notification token for the iOS app.

People you reach out to. When Hustlin prepares outreach for your product, it may find business contact details (name, role, company, work email) for people relevant to that product from public sources and verification providers. See section 7.

• To provide the Service: build and update your growth plan, draft content, publish and send what you approve, and measure the results.
• To run automations you turn on. Autopilot only acts within the channels and limits you set, and every action is recorded in your product’s activity log.
• To send you account email, your weekly digest and notifications. You can turn off non-essential email and notifications in settings.
• To process payments and enforce plan limits.
• To keep the Service secure, prevent abuse, fix bugs and improve features.
• To comply with law and enforce our Terms.

AI processing. Hustlin uses large language models, mainly Google Gemini, to analyze your product and write plans and drafts. The relevant product information and conversation context are sent to the model provider to produce a response. Our providers process this data on our behalf and do not use it to train their models. To measure how AI assistants describe your product, we also send your product’s name and category, not your personal information, to other AI providers (OpenAI, Anthropic, Perplexity).

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

We share information only:

• With platforms you direct us to. When you approve a post or an email, its content goes to the platform or recipient you chose.
• With people you choose to show it to. Public product pages, launches and anything you mark public are visible to others. Collaborators you invite to a product, and instructors of a class you join, can see that product’s plan and progress.
• With service providers who process data for us under contract: Google Cloud and Firebase (hosting, database, sign-in, storage, push notifications), Vercel (web hosting and privacy-friendly analytics), Google Gemini (AI), Stripe (payments), Twilio SendGrid (email), Sentry (error reporting) and Hunter (email verification).
• For legal reasons: to comply with law or valid legal process, or to protect the rights, safety and property of our users, the public or Uxgency.
• In a business transfer, such as a merger or acquisition, subject to this policy.

Hustlin’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements, and the Google Workspace API User Data and Developer Policy.

Specifically: we use Google contacts only to suggest, to you alone, people you know who may want to hear about your product; we never use one person’s contacts for anyone else; we use Google Ads data only to report on and manage the campaigns you ask us to; we use Search Console indexing only to submit your own product’s pages. We do not use Google user data for advertising, we do not sell it, we do not use it to train AI models, and humans at Uxgency do not read it except with your permission, for security, or as required by law. You can disconnect Google at any time in settings or at myaccount.google.com/permissions.

If you connect a Meta account, we receive only what you grant on Meta’s permission screen, and use it only for these purposes:

• Facebook Pages: the list of Pages you manage, so you can pick the one that represents your product, and that Page’s posts and engagement, to report results.
• Instagram professional accounts: your account name and media, and publishing the posts you approve or schedule.
• Threads: your profile and posts, and publishing the posts you approve or schedule.
• Meta ad accounts and business: the ad accounts you choose, to create and manage the campaigns you approve, within the budget limits you set, and to read their spend and results.

We store the access tokens Meta issues (encrypted), the IDs and names of the Pages, accounts and ad accounts you select, the posts and campaigns we create for you, and their performance numbers. We do not sell Meta data, use it for advertising profiles, share it with other users, or use it to train AI models.

Deleting Meta data. Disconnect the account in Hustlin (your product’s Settings, under Connected Accounts) to delete its tokens right away, or remove Hustlin in your Facebook or Instagram settings under Apps and Websites. To delete everything Hustlin holds about you, follow the steps on our data deletion page.

We use cookies and local storage that are needed to keep you signed in and remember your settings. For analytics we use Vercel Web Analytics, which does not use cookies or track you across other sites. We do not use advertising cookies.

Hustlin helps founders contact people who may care about their product, such as journalists, creators, communities and potential customers. For this we process business contact details from public sources and verification providers, and we keep a record of messages sent and replies. Each message identifies the product sending it. If you received a message through Hustlin and want us to delete your details and stop further messages to you through Hustlin, email privacy@hustlin.ai.

• Account and product data: while your account is active.
• When you delete your account, it is scheduled for deletion after a 30-day grace period (during which you can cancel), then removed from our active systems. Copies in backups expire on their normal rotation.
• Billing records are kept as long as tax and accounting law requires (generally seven years).
• Disconnecting an account deletes its stored access tokens right away.
• Error and security logs are kept for a limited period, generally no more than 90 days.

Data is encrypted in transit and at rest, and access tokens for connected accounts are additionally encrypted at the application level. Access inside Uxgency is limited to people who need it. No system is perfectly secure; if a breach affects your data, we will notify you as the law requires. See our Trust Center for more.

Wherever you live, you can:

• access and update your account and product information in the app;
• export your data or delete your account from the Support Center (or in the iOS app under Settings);
• disconnect any connected account at any time;
• turn off marketing email with the unsubscribe link, and notifications in settings.

To make a request we can’t handle in the app, email privacy@hustlin.ai. We will verify your request using your account email and answer within 30 days (45 where the law allows).

If you live in California or another state with a consumer privacy law, you have the right to know what personal information we collect, use and disclose; to get a copy of it; to correct it; to delete it; and to opt out of its sale or sharing for targeted advertising. We do not sell or share personal information, so there is nothing to opt out of, and we honor Global Privacy Control signals regardless. We do not use sensitive personal information for purposes that would require a right to limit. We will not discriminate against you for using these rights. You can use an authorized agent; we may ask them for proof of authority.

In the past 12 months we collected the categories described in section 1 (identifiers, commercial information, internet activity, and professional information), from you, from accounts you connect and from public sources, for the purposes in section 2, and disclosed them to the service providers in section 3.

Uxgency is the controller of your personal data. Our legal bases are: performing our contract with you (running the Service); legitimate interests (security, improving the Service, and the business outreach described in section 7, which you can object to at any time); consent (where we ask for it, such as connecting an account or push notifications, which you can withdraw); and legal obligations.

You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your local data protection authority. Contact our privacy lead at dpo@hustlin.ai.

We are based in the United States and process data there. When we transfer personal data from the EEA, UK or Switzerland, we rely on the European Commission’s Standard Contractual Clauses (and the UK and Swiss equivalents) with our service providers.

The Service is for people 18 and older. We do not knowingly collect personal information from anyone under 18; if you believe a child has given us information, contact us and we will delete it.

We will post any change here and update the date above. If a change is material, we will also tell you by email or in the app before it takes effect.

Uxgency Inc., a Massachusetts corporation
Privacy: privacy@hustlin.ai
Data protection: dpo@hustlin.ai
Help: hustlin.ai/support