Privacy Policy
What HillGen collects, why, and who it is shared with.
Last updated
Draft for legal review. Written in plain language by the HillGen team; not legal advice. Items in [brackets] must be filled in, and the policy should be reviewed by counsel, in particular for GDPR and CCPA wording, before launch.
This policy explains what [HillGen legal entity name] (“HillGen”, “we”) collects when you use hillgen.com and the HillGen app at app.hillgen.com, and what we do with it.
What we collect
Account information. When you sign in with Google we receive your name, email address and profile picture from Google. When you sign in with an email code we store your email address and the time you verified it. We record when you last signed in.
Workspace content. The prompts you write, the files you upload as references, the settings you choose, and the images, videos and audio that are generated for you. Each generation also records which account ran it and when.
Billing information. Our payment processor, Stripe, collects your card details; we never see them. We store your Stripe customer id, your subscription status, your invoices and a ledger of every credit you were granted or spent.
Team information. When you invite someone to a team workspace, we store the email address you invite and who sent the invite.
Technical and usage information. Server logs record requests to our backend (including IP address, timestamps and error details). If we have enabled product analytics (PostHog), we also collect page views, feature usage and crash reports from the app and the marketing site. We do not use advertising trackers.
How we use it
- To run the Service: sign you in, store your work, send your requests to model providers, and show you your results.
- To bill you: grant monthly credits, charge your plan and send receipts.
- To keep the Service safe: enforce rate limits and our terms, detect abuse, and investigate problems.
- To improve the Service: understand which features are used and where errors happen.
- To contact you: sign-in codes, invites, receipts, and notices about your account or changes to our terms. We send marketing email only if you opt in, and you can unsubscribe at any time.
We do not sell your personal information, and we do not use your prompts, uploads or generations to train AI models.
Who receives your data
We use these processors to run the Service. Each receives only what it needs:
| Processor | Purpose | What they receive |
|---|---|---|
| Convex | database and backend hosting | account, workspace and billing records |
| Cloudflare (R2) | file storage and delivery | your uploads and generated files |
| Vercel | hosting the app and website | request logs |
| Stripe | payments | name, email, payment details you enter with Stripe |
| Resend | transactional email | your email address and the message |
| sign-in | authentication only | |
| Replicate, Higgsfield, Fish Audio, ElevenLabs | running the model you choose | the prompt, settings and reference files of that generation |
| PostHog (if enabled) | analytics and error tracking | usage events, device and browser information |
Model providers process your request under their own terms and may retain it for abuse monitoring for a limited time; we link to each provider’s policy from the app. We may also disclose information when the law requires it, or to protect the rights and safety of HillGen, our users or the public.
Where data is stored
Our processors store data in [the United States and the European Union]. If you are in the EU or UK, transfers outside your region rely on the processors’ standard contractual clauses or equivalent safeguards.
How long we keep it
Your content stays in your workspace until you delete it or your account. Reference files you upload but never use are deleted after one day. When you delete your account, we delete your workspaces, files and personal data within [30] days. We keep invoices, the credit ledger and records needed for tax, accounting and fraud prevention for [7] years, and server logs for [30] days.
Your choices and rights
- Access, correction, deletion. You can see and change your name in your account settings and delete individual generations or your whole account from the app. For anything else, email [privacy email].
- Export. Every generated file can be downloaded from the app at full resolution. Ask us if you need a full export of your account data.
- Marketing. Unsubscribe links are in every marketing email.
- Cookies. We use only the cookies needed to keep you signed in, plus analytics cookies if PostHog is enabled. You can block analytics in your browser without affecting the Service.
If you are in the EU, UK, California or another place with privacy legislation, you may have additional rights, such as objecting to processing, restricting it, or lodging a complaint with your supervisory authority. Contact us at [privacy email] to exercise them; we respond within [30] days. Our legal basis for processing under the GDPR is performance of our contract with you, our legitimate interest in running and securing the Service, and your consent where we ask for it.
Children
The Service is for adults. We do not knowingly collect information from anyone under 18; if you believe a minor has an account, email us and we will delete it.
Changes
We will post changes here and update the date above. For material changes we will email account holders in advance.
Contact
[HillGen legal entity name], [address]. Privacy questions: [privacy email].