Privacy Policy

Account data: email, full name (optional), language preference, account creation timestamp.

Billing data: Stripe customer ID, subscription status, subscription plan. Payment card details are handled entirely by Stripe — we never see or store them.

Usage data: records of AI generations you create (ad copy, content) including the input and output, tied to your user ID for history and quota tracking.

Technical data: IP address, browser user agent, and standard server logs retained for security and abuse prevention.

We do not collect sensitive categories of personal data (health, biometric, political, etc.) and we do not knowingly collect information from children under 13.

• Provide, operate, and improve the Service
• Process payments and manage your subscription
• Authenticate you and secure your account
• Send transactional emails (welcome, receipts, password resets, account notifications)
• Respond to support requests
• Detect and prevent abuse or fraud

We do not sell your personal data. We do not run ad-tracking pixels, session replay, or third-party analytics on the dashboard.

We use the following vendors to run the Service. They process your data only as needed to provide their function:

• Supabase — database hosting, authentication, row-level security
• Stripe — payment processing and subscription management
• Vercel — application hosting, server-side logs
• Resend — transactional email delivery
• Google Gemini — AI text generation (your prompts are sent to Google to produce ad copy / content outputs)
• EchoTik — TikTok Shop data provider; we send product IDs, no user data

We use only essential authentication cookies set by Supabase to keep you logged in. No advertising, tracking, or analytics cookies are used on authenticated pages. Public marketing pages may use privacy-focused analytics in the future — we'll update this policy if that changes.

We retain account and usage data for as long as your account is active plus 90 days after deletion, unless we're required to keep it longer for legal, tax, or fraud-prevention reasons (billing records are retained for 7 years under Australian tax law).

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Object to or restrict certain processing

To exercise any of these rights, email team@dazsidhu.business. We respond within 30 days.

Data is encrypted in transit (TLS) and at rest (via Supabase and Stripe's infrastructure). Row-level security policies restrict access to your data. Passwords are hashed — never stored in plaintext. No system is 100% secure — if we become aware of a breach affecting your data, we will notify you within 72 hours as required by law.

HustleKit is operated from Australia. Our vendors (Supabase, Stripe, Vercel, Google) are based in the United States and other regions. By using HustleKit, you consent to your data being processed in those locations under standard contractual clauses.

HustleKit is not intended for children under 13. If we learn that we've collected data from a child under 13, we'll delete it.

We may update this policy. Material changes will be emailed to you and posted here at least 14 days before taking effect.

Privacy questions, data access requests, or complaints: team@dazsidhu.business

If you're in the EU/UK, you also have the right to lodge a complaint with your local data protection authority. In Australia, you can contact the Office of the Australian Information Commissioner.