Privacy, plainly.

What we collect

What you give us when you register and after: your business name and description, services and prices, website address, logo, brand kit files, the photos you attach to ideas, posting preferences, your email, and the emails of the people you invite to your team. Using the product stores the content HillBird drafts and your decisions about it. If you give us a website address, we read that page to learn your colors, fonts and wording.

Links in your posts count clicks. A visitor is counted by a one-way code made from their internet address and browser, under a key that changes each day. The address itself is not stored with the click.

To limit abuse we keep a count of attempts to register, sign in, fill in a lead page or write to us, under the visitor's internet address. Attempts to register or sign in to our staff tools are also counted under the email address that was typed. A count that has not been used for a day is deleted. A message sent through the contact page is kept with the sender's name, email and internet address.

What we use it for

One thing: making your content. Your material builds your brand record; your brand record grounds your posts. We don't sell your data and we don't use your content to advertise to anyone. HillBird does not post to your social accounts. Finished posts are yours to download and post, so no social platform receives anything from us.

AI processing

Drafting and checking your content uses large language models. Pictures, video and voice are made by generation models. Each service we use, and what it receives, is listed below. AI work on your plan is counted against your plan's monthly budget and stops when the budget is used. A video you pay for on its own is charged on its own.

Isolation

Each business's content, brand record, media and leads are separated in the database by row-level rules. The part of HillBird that serves your pages reads the database through a role that is bound by those rules and cannot switch them off. Scheduled jobs and our staff tools work across businesses through a separate role. Sign-in links and sessions, our staff's own sign-in keys, the list of accounts, team memberships, messages sent through the contact page and housekeeping tables are not under row-level rules.

A copy of your data

The owner of an account can download its data from Settings at any time: one zip file with the brand record, the posts and their captions, the leads, the follow-up sequences, the team and the billing facts we hold. Stored photos and videos are listed in it, not included.

Deletion

Deleting your account runs at once: your subscription is cancelled, channel connections are disconnected, sessions end everywhere, and your content and your data are erased. Your stored files are removed from the account at once and erased from storage within 30 days. California residents: this is your CCPA deletion right, honored for everyone.

You can also remove one thing at a time: a brand kit file, your logo, a photo you attached, or a lead. It is removed from your account at once. A removed file is erased from storage within 30 days. A file that a post still uses is kept, and the page says so. A post you remove is hidden at once and deleted with the account. When a video is offered at its own price, a copy of the photo attached to it is kept with that order until the video is made. An order that is not paid, or that ends without a video, keeps it for 30 days. Either way it is deleted with the account.

What is kept, and for how long

A registration that is never paid for is deleted after 30 days, together with the customer record made for it at Stripe. A message sent through the contact page is deleted after 12 months. When screening refuses a registration, a short excerpt is kept for review and deleted after 12 months. The clean-up that does this runs once a day.

After an account is deleted we keep a deletion record: an account number, the dates, and the step reached. It holds no name, no email and no content. A stored file that was removed stays in storage for up to 30 days before it is erased for good. Database backups are kept for 7 days. Data you delete stays in those backups until they expire. Logs are kept for 30 days. Payment records are held by Stripe under its own terms.

Email

Sign-in links have no off switch: they are how you access your account. Notices about your plan and its payments have no off switch either. These notices each have an off switch in settings: approvals, publish problems, reconnects, edit updates, lead limits, lead alerts and the weekly note.

Third-party AI processors

Drafting, checking and rendering use third-party AI services, each under its own terms and content policies. What each one receives is listed here.

Anthropic writes and checks your content. It receives the text of your brand material, your website page, your ideas and your drafts. It receives the photos you attach and the images in your brand kit, to screen them and to read their style. It receives a photo of your menu or price list when you upload one, and the finished picture of a post, to check its design.

TypeSafe screens text before anything is made. It receives the text of what is submitted: ideas, brand material, and the text of a registration form, whether or not the person goes on to become a customer. It receives no images.

Together AI makes pictures. It receives the written description of the picture to make, which is drawn from your idea and your brand record.

Black Forest Labs makes pictures and video. It receives the written description of the picture or the video to make.

fal makes video. It receives the written description of the video to make. It receives the photo you attached when you ask for that photo to be animated, and the picture of a finished post when you ask for a clip of that post. When you pick an ElevenLabs narrator, it passes the words to be spoken on to ElevenLabs.

ElevenLabs speaks the narration when you pick one of its voices. It receives the words to be spoken, through fal, and nothing else.

WaveSpeed makes video. It receives the written description of the video to make.

Google makes video with speech. It receives the written description of the video to make and the words spoken in it.

A photo you attach is sent to Anthropic to be screened, and to fal when you ask for it to be animated. If people can be recognised in it, those services receive their image. The details people leave on your lead pages are not sent to any AI service.

Payment, hosting and email

Stripe takes payment. It receives your business name, the owner's email and an account number. Card details are typed on Stripe's own page and do not reach HillBird.

Meta publishes to Instagram and runs ads, only for an account you connect. It receives the posts you approved for Instagram, with their pictures and captions, and for a campaign you start, its picture, words, link, daily budget and dates. It receives nothing while no account is connected.

Amazon Web Services runs HillBird: the database, the stored files, the queue that holds work waiting to be done, and the network in front of them. It sends our email, so it receives each message and the address it goes to. That includes sign-in links, notices to you, and the follow-ups and review requests sent to the people on your lead lists. It tells us which addresses bounced or reported our mail as spam, and we stop mailing them. It makes the voice for narrated videos, so it receives the words to be spoken.

Lead pages

A lead page is a page HillBird hosts for a business. A person who fills one in gives their name and an email or a phone number, may add a message, and ticks the box beside the business's consent line. We keep which post or campaign brought them. We do not store their internet address with their details.

Those details are the business's data. The business decides how they are used and is responsible for that use. HillBird stores them for the business and sends the business's follow-up messages and review requests. Leads are not deleted automatically. They are deleted when the business removes them or deletes its account.

If you left your details on a lead page: every follow-up message has a line to stop the messages, and using it stops them from that business at once. To have your details removed, ask the business you gave them to. It can remove a lead from its account at any time.

Health information

HillBird is a marketing tool. Do not submit patient records, health conditions, treatment details, or any other protected health information about identifiable people, in text, documents, or photos. HillBird is not a HIPAA covered entity or business associate and does not sign business associate agreements; anything you submit despite this notice is your responsibility, and we may remove it.

Content screening and holds

Every submission is screened automatically before anything is generated, for the categories listed in the terms. A flagged submission is refused and a short excerpt, the category, and the reason are kept for review by our staff; the most serious categories place the account on hold until a person has reviewed it. These records are deleted with the account. The excerpt of a refused registration has no account to be deleted with, and is deleted after 12 months.