Privacy Policy

Account information. Your name, email address, profile photo and the details you add to your profile. If you sign in with Google, Apple, Facebook or Telegram, we receive your name, email address (where the provider shares it) and an account identifier from that provider. We never receive your password for those services.

Workflows and requests. The workflows you build, the requests your agents and integrations send through them, any files attached to those requests, and the decisions, comments and edits reviewers make. We keep an audit log of who did what and when.

Teams and invitations. The people you invite to a workflow, the join codes you create, and who joined with them.

Billing. If you choose a paid plan, payment is handled by Stripe. We receive your plan, billing status and the billing details Stripe shares with us. We do not see or store your full card number.

Mobile app. A push notification token for your device, the device type and operating system version, and your notification settings. If you use calls, the app asks for access to your microphone and your phone's speech recognition so you can answer a request out loud. The text of each request read to you is sent to our voice provider to turn it into speech.

Connected services. When you connect Telegram, an email inbox or another service to a workflow, we receive what is needed to deliver and receive requests through it, such as your chat identifier or the emails that match the trigger you set up.

AI steps. If you add an AI step to a workflow, you give us an API key for the model provider you choose (for example OpenAI, Anthropic or Google). We store the key securely and use it only to run your steps.

Usage and device information. Your IP address, browser type, pages and features you use in the portal, and logs our servers record when you or your agents call the API.

Messages to us. Anything you send when you contact support or email us.

We use the information we collect to:

• Run HITL: deliver requests to the right people, record their decisions and send the results back to your agents and workflows
• Send notifications by push, email, Telegram or call, based on your settings
• Create and manage your account, workflows and team
• Process payments and enforce plan limits
• Keep HITL secure, prevent abuse and fix problems
• Understand how the portal and apps are used so we can improve them
• Send service messages, such as receipts, security alerts and changes to these terms, and occasional product news you can unsubscribe from
• Meet our legal obligations

We do not sell your personal information, and we do not use the content of your workflows or requests to train AI models.

When your organization uses HITL, the content of its workflows and requests belongs to it. The workflow owner decides what goes into a request and who sees it. We process that content on the owner's behalf and following their instructions.

If you join a workflow as a reviewer, including with a join code, the owner and admins of that workflow can see your name, email address, profile photo and the decisions and comments you make on their requests.

We share information only with the service providers that help us run HITL, under contracts that limit how they can use it:

We also share information:

• With the people in your workflows, as described above
• With services you connect yourself, such as Telegram or your AI model provider, when a workflow uses them. Their own privacy policies apply to what they receive
• When the law requires it, or to protect the rights, safety and property of HITL, our users or others
• As part of a merger, acquisition or sale of assets, in which case we will tell you before your information becomes subject to a different policy
• With your consent

We keep your information for as long as your account is active. Workflow owners can delete their workflows at any time, and reviewers can leave a workflow. If you ask us to delete your account, we delete your personal information within 30 days, except what we must keep for legal, tax or security reasons, such as billing records.

Backups are overwritten on a regular cycle, so deleted information may stay in them for a short time.

We encrypt information in transit and at rest, limit access to the people who need it to run HITL, and protect API access with keys that you can regenerate at any time. No system is perfectly secure, so please keep your sign-in details, API keys and join codes private, and tell us at [email protected] if you think something is wrong.

You can update your name and profile photo in Settings, and turn notifications on or off in the apps.

Depending on where you live, including the European Union, the United Kingdom and California, you may have the right to:

• Access the personal information we hold about you and get a copy of it
• Correct information that is wrong
• Delete your information
• Object to or limit how we use it
• Withdraw consent you gave us
• Complain to your local data protection authority

To use any of these rights, email [email protected]. We will answer within 30 days. We will not treat you differently for using them. If you are a reviewer in someone else's workflow, we may pass your request to the workflow owner, who is responsible for that content.

The portal uses cookies and similar storage to keep you signed in, remember your settings and measure how the product is used. We do not use advertising cookies. You can clear or block cookies in your browser, but you will then need to sign in again and some features may not work.

HITL is based in the United States and our providers operate around the world, so your information may be processed outside the country where you live. When we transfer information out of the European Economic Area, the United Kingdom or Switzerland, we rely on safeguards such as the European Commission's Standard Contractual Clauses.

HITL is not meant for children under 13, or under 16 in the European Economic Area and the United Kingdom. We do not knowingly collect their information. If you think a child has given us information, contact us and we will delete it.

We may update this policy as HITL changes. We will post the new version here and update the date at the top. If the changes are significant, we will also tell you by email or in the portal before they take effect.

Questions about this policy or your information? Get in touch:

HITL, Inc.
2021 Fillmore St
San Francisco, CA 94115
Email: [email protected]