Privacy policy

What we store

• Your account: your email address and name. If you sign in with Google, we receive these from your Google account.
• Your sites: the business description you give us, the content of the sites you create, and the edit requests you send to the AI assistant.
• Images you upload to use on your sites.
• Your WhatsApp number, if you add it to your account, so we can help you and remind you before your plan ends.
• Billing records: your billing country, subscription and payment status, provider identifiers, amounts, currencies and paid periods. A payment provider may collect your billing address and payment details directly at checkout.

How we use it

• To create your account, sign you in, and build, edit, publish and host your sites.
• To reply when you contact us, and to send you emails about your account and the service.
• For new verified accounts, to send tips for building and publishing your site, product news, Pro offers and short return reminders automatically. You can unsubscribe from any of these emails or in your account.
• To verify payments, activate your plan, manage renewal and refunds, and send account-related billing notices.

We do not sell your data. We measure product use and our advertising as described under Cookies.

Who processes it for us

We use a small number of providers to run hilm: Cloudflare for hosting and storage, and an AI model provider that processes your descriptions and edit requests to generate your site’s content. We share only what’s needed to run the service.

We use Loops for customer emails. New verified accounts are subscribed automatically; existing account choices are kept. While subscribed, we share your name, verified email, account identifier, preferred language, plan, site setup progress and recent app activity timestamps. We do not send your site content, images, prompts, passwords or sign-in codes to Loops. Deleting your account also queues removal of your Loops contact.

When you pay, we share the details needed for checkout with the provider shown in your account: Stripe, Dodo Payments or Kashier. For Stripe Managed Payments purchases, Stripe acts as merchant of record and uses Link for receipts, tax invoices and payment support. These providers process payment information under their own privacy policies. We do not store full card numbers; where Kashier automatic renewal is available and you consent, we keep an encrypted payment token.

Cookies

Essential cookies keep you signed in, protect your account and remember the language you choose on hilm.ai. On hilm.ai and app.hilm.ai, we also use Cloudflare Zaraz to send usage events to Google Analytics, to improve the product, and to Meta, to measure our advertising.

These services receive events such as page visits, registration, site creation and publishing, plus browser and network information and visitor identifiers. Meta may also receive an ad click identifier and, when you create an account, create a site or publish one, hashed versions of your account identifier, verified email, name and approximate location (city, region, postcode and country, estimated from your IP address) for matching. Google Analytics does not receive your email, name or account identifier. We exclude your site content, prompts, private site addresses and authentication details from these events.

To limit this measurement, you can block or delete cookies in your browser and manage your ad preferences in your Meta account. This measurement does not run on sites made with hilm.

Hosted payment pages and Link apply their own cookie and privacy notices.

We use PostHog Cloud in the EU to measure visits and clicks on hilm.ai anonymously, without session recordings. It keeps an anonymous identifier in your browser’s storage on hilm.ai. When you follow a link to app.hilm.ai, we pass that identifier to the app so we can link your visit to your account if you sign up. In the app, PostHog helps us understand onboarding, publishing, returning use and payments. Your account identifier links activity across visits; your name and email appear in your PostHog profile. In the editor, PostHog may record your session, including the site content you edit, the photos you add, what you type and your messages to Sharara. On other app pages, inputs and customer content stay masked or blocked. Sign-in, signup, account and billing pages are never recorded. Payment details and sign-in codes are never recorded. Recordings are kept for a limited time and deleted with your account. PostHog events never include your prompts or site content. The app also keeps PostHog identifiers in its own browser storage. PostHog does not run on sites made with hilm. Deleting your account queues deletion of your PostHog profile, events and recordings.

On your first visit, we keep a cookie for 90 days with the source and campaign name of the link you followed, the first page you opened and the domain of the website that sent you. When you create an account, we add them to your PostHog profile.

Visits to sites made with hilm

When someone opens a site made with hilm, we count the visit so the site’s owner can see how it’s doing: the page and its language, the website the visitor came from, their country and the type of device. Sites made with hilm don’t use cookies, and we don’t store visitors’ IP addresses. To count unique visitors, we use a code made from the IP address and browser that changes every day and can’t be traced back to a person. We keep this data for about three months.

Published sites are public

Anything you publish on your site can be seen by anyone on the internet.

Your choices

You can edit or delete your sites at any time. Pending payments can block account deletion. Stripe and Dodo subscriptions must also end with their provider, and their paid period must end. Manage your subscription from your account before requesting deletion.

Deleting your account removes your sites, their saved versions and account details. The addresses of your published sites stay reserved for 30 days, so no one else can take over links you shared, and then become available again. Payment providers handle their own transaction records and deletion requests under their policies and legal obligations.

Contact us

Questions about privacy? Email us at support@hilm.ai.

You can also call us at +20 100 223 4476.