Privacy policy

What we store

• Your account: your email address and name. If you sign in with Google, we receive these from your Google account.
• Your sites: the business description you give us, the content of the sites you create, and the edit requests you send to the AI assistant.
• Images you upload to use on your sites.
• Your WhatsApp number, if you add it to your account, so we can help you and remind you before your plan ends.
• Billing records: your billing country, subscription and payment status, provider identifiers, amounts, currencies and paid periods. A payment provider may collect your billing address and payment details directly at checkout.

How we use it

• To create your account, sign you in, and build, edit, publish and host your sites.
• To reply when you contact us, and to send you emails about your account and the service.
• To verify payments, activate your plan, manage renewal and refunds, and send account-related billing notices.

We do not sell your data. We measure product use and our advertising as described under Cookies.

Who processes it for us

We use a small number of providers to run hilm: Cloudflare for hosting and storage, and an AI model provider that processes your descriptions and edit requests to generate your site’s content. We share only what’s needed to run the service.

When you pay, we share the details needed for checkout with the provider shown in your account: Stripe, Dodo Payments or Kashier. For Stripe Managed Payments purchases, Stripe acts as merchant of record and uses Link for receipts, tax invoices and payment support. These providers process payment information under their own privacy policies. We do not store full card numbers; where Kashier automatic renewal is available and you consent, we keep an encrypted payment token.

Cookies

Essential cookies keep you signed in, protect your account and remember the language you choose on hilm.ai. On hilm.ai and app.hilm.ai, we also use Cloudflare Zaraz to send usage events to Google Analytics, to improve the product, and to Meta, to measure our advertising.

These services receive events such as page visits, registration, site creation and publishing, plus browser and network information and visitor identifiers. Meta may also receive an ad click identifier and, when you create an account, create a site or publish one, hashed versions of your account identifier, verified email, name and approximate location (city, region, postcode and country, estimated from your IP address) for matching. Google Analytics does not receive your email, name or account identifier. We exclude your site content, prompts, private site addresses and authentication details from these events.

To limit this measurement, you can block or delete cookies in your browser and manage your ad preferences in your Meta account. This measurement does not run on sites made with hilm.

Hosted payment pages and Link apply their own cookie and privacy notices.

Visits to sites made with hilm

When someone opens a site made with hilm, we count the visit so the site’s owner can see how it’s doing: the page and its language, the website the visitor came from, their country and the type of device. Sites made with hilm don’t use cookies, and we don’t store visitors’ IP addresses. To count unique visitors, we use a code made from the IP address and browser that changes every day and can’t be traced back to a person. We keep this data for about three months.

Published sites are public

Anything you publish on your site can be seen by anyone on the internet.

Your choices

You can edit or delete your sites at any time. Pending payments can block account deletion. Stripe and Dodo subscriptions must also end with their provider, and their paid period must end. Manage your subscription from your account before requesting deletion.

Deleting your account removes your sites, their saved versions and account details. The addresses of your published sites stay reserved for 30 days, so no one else can take over links you shared, and then become available again. Payment providers handle their own transaction records and deletion requests under their policies and legal obligations.

Contact us

Questions about privacy? Email us at support@hilm.ai.