Privacy policy
Effective date: 20 October 2026
This policy explains how HUNTIT TECHNOLOGIES SRL ("Huntit", "we", "us") handles personal data as a controller: when you visit our website, use a Huntit portal as a member of a customer's team or with demo access, deal with us as a customer or prospect, or contact us. Our company details are in our Terms (huntit.ai/terms). For any privacy question or request, write to privacy@huntit.ai.
1. Our roles
We are the controller of the personal data described in Sections 2 to 7.
Our customers use Huntit to track public social media content and to work on it with their teams. For the data in a customer's workspace, the customer is normally the controller and we process it on its behalf, under the data processing addendum in our Terms. Where the customer uses Huntit for its own client, that client is the controller, the customer is its processor and we are a sub-processor. Questions about that data are best sent to the customer; if you write to us, we will pass your request on.
Section 8 is for people whose public content is tracked through Huntit.
2. What we collect and why
| Data | Why we use it | Legal basis (GDPR) |
|---|---|---|
| Account data: your name, work email, role and sign-in records | To give you access to the portal and keep sign-in secure | Our legitimate interest in providing the service our customer contracted for and keeping it secure (Art. 6(1)(f)) |
| Demo access data: your name, work email, organisation and sign-in records | To run your demo and our commercial conversation with you | Performance of the demo terms you accept when you sign in (Art. 6(1)(b)) and our legitimate interest in presenting Huntit (Art. 6(1)(f)) |
| Customer and billing data: contact and invoicing details of our customers' representatives, contracts and payment records | To manage contracts, invoice and meet our legal obligations | Our legitimate interest in managing the commercial relationship with your organisation, and legal obligation (Art. 6(1)(f) and (c)) |
| Communications: messages you send us, including support requests and any screenshots you attach, and our replies | To answer you and keep a record of our dealings with you and your organisation | Contract (Art. 6(1)(b)) or our legitimate interest in answering and improving our service (Art. 6(1)(f)) |
| Usage and security records: actions taken in the portal or through a connected AI assistant, and related technical events | To secure the service, prevent abuse, enforce our Terms and fix problems | Our legitimate interest in a secure, working service (Art. 6(1)(f)) |
| Technical data: IP address, browser and request logs recorded by our hosting providers when you visit our websites | To operate and secure our websites | Our legitimate interest in a secure, working website (Art. 6(1)(f)) |
We collect this data from you, from your organisation (for example, when it invites you to a workspace), and from our systems as you use them. You do not have to give us personal data, but without account data we cannot give you access to a portal.
We do not sell personal data or use it to target advertising. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
3. Who receives it
We share personal data only as needed for the purposes above, with:
- the customer whose workspace you use (for example, its account owner sees who its members are);
- our hosting and infrastructure providers, and our email delivery provider;
- tools we use for support;
- services that retrieve public post media and metrics, and AI analysis providers;
- the AI assistant or other services you or your organisation connect to a workspace, which act for you or your organisation;
- our professional advisers, authorities where the law requires, and a buyer or successor of our business.
Our sub-processors are listed at huntit.ai/subprocessors.
4. Where it is stored
We host personal data mainly in the European Union. A customer's workspace may be hosted in the United States where the customer chose that region. Sign-in accounts are hosted in the EU.
Some of our providers process data outside the European Economic Area. Where they do, we take reasonable steps to ensure an appropriate safeguard under Chapter V GDPR, such as an adequacy decision or the Standard Contractual Clauses. You can ask us for a copy of the relevant safeguard at privacy@huntit.ai.
5. How long we keep it
We keep personal data only for as long as we need it for the purpose it was collected for:
- Account data: while you have access to a workspace. When a customer leaves Huntit, accounts that belong only to its workspace are deleted with it.
- Demo access data: deleted within 30 days after your demo ends, unless you become a contact for a customer.
- Customer and billing data: for the period accounting and tax law requires.
- Communications: for as long as we need them to handle your request and to keep a record of our dealings with you and your organisation.
- Usage, security and technical records: for as long as needed to secure and operate the service.
We may keep data longer where the law requires it or to establish, exercise or defend legal claims.
6. Cookies
The Huntit portal uses cookies that keep you signed in, and a few cookies and browser storage entries that remember your choices and progress on screen, such as your table layout. They are needed for the portal to work as you use it. We use no analytics or advertising cookies.
Our website huntit.ai and shared report pages set no cookies of their own. If you play a post inside a report, the platform's own player loads and may set its cookies under that platform's policy.
You can clear or block cookies in your browser. Without the sign-in cookies, the portal cannot keep you signed in.
7. Your rights
You can ask us for access to your personal data, and to correct, delete or restrict it, or to receive it in a portable format. You can object at any time to processing based on our legitimate interest. Write to privacy@huntit.ai. We may need to confirm your identity before we act on a request.
If your data sits in a customer's workspace, the customer decides on your request; we will pass it on and assist.
You can complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro), or to the authority in the EU country where you live or work.
8. Tracked content
This section is for creators, brands and other people whose public social media content is tracked through Huntit.
What is collected. Huntit collects only publicly available content, from the social media platforms where it was published: public profile information (such as username, profile picture, bio and follower count), public posts and media as published, public metrics and how they change over time, and, when a customer runs a comment analysis, public comments with the commenter's public username. Huntit also generates AI analysis of that content.
Who is responsible. The customer that chose to track the content is normally the controller, and we process it on that customer's behalf; where the customer tracks for its own client, that client is the controller. On Huntit's own demonstration workspaces, we are the controller.
Why, and on what basis. Customers use this data for competitive and market analysis of content its authors have made public. Each customer determines its own legal basis, usually its legitimate interest (Art. 6(1)(f) GDPR). On our demonstration workspaces, we use it on the basis of our legitimate interest in demonstrating Huntit.
Who receives it. The customer and its team, the people it shares reports with, and the providers described in Section 3. On our demonstration workspaces, the people we give demo access.
How long it is kept. For as long as the customer that tracks it needs it for its analysis, and at the latest until that customer's workspace is deleted. Older content is removed from the working system on a regular schedule. On our demonstration workspaces, for as long as we use it to demonstrate Huntit.
Your rights. You have the rights described in Section 7, including the right to object. Write to privacy@huntit.ai with the profile or post concerned. We will identify the customer responsible and pass your request on, or handle it ourselves where we are the controller. Where removal is required, we remove the content from the workspace. You can also complain to ANSPDCP (dataprotection.ro) or to the authority in your own country.
9. Changes to this policy
We may update this policy from time to time. The current version, with its effective date, is published at huntit.ai/privacy. Where a change is significant, we will take reasonable steps to inform the people it affects.
10. Contact
HUNTIT TECHNOLOGIES SRL. Privacy requests: privacy@huntit.ai. Everything else: contact@huntit.ai.