Privacy Policy

Last updated: August 25, 2026

This Privacy Policy describes how Hitmeet ("we", "us", "our") collects, uses, shares, and protects information when you use our service at hitmeet.com (the "Service").

We do not sell your personal information. We collect and process personal information only as necessary to provide, maintain, secure, and improve the Service, comply with legal obligations, and provide features that you choose to use.

Core Principles

We handle your data according to the following principles:

Lawfulness and transparency. We process your data for specific and legitimate purposes described in this Privacy Policy.
Purpose limitation. We use information only for purposes compatible with providing and operating the Service.
Data minimization. We collect information that is reasonably necessary for the Service.
Storage limitation. We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required by law.
Security. We use reasonable technical and organizational measures designed to protect information from unauthorized access, loss, misuse, or disclosure.

Information We Collect

Account information. We collect your email address for account authentication and service-related communications. You may sign in using a secure magic link sent to your email address or through Google Sign-In. We do not store account passwords. Your name is optional and may be added by you to your account profile.
Team and board information. If you create or join a team, we store team names, team membership, boards, and content associated with those boards, including information created or submitted by team members.
Session information. We use necessary session cookies or authentication tokens to maintain your authenticated session and securely provide access to your account.
Payment and subscription information. If you subscribe to a paid plan, payment processing and subscription management are handled by Paddle. We do not store your full payment card number or complete payment card details on our servers. We may retain limited subscription and transaction information necessary to manage your subscription.
Technical and security information. Our infrastructure may process technical information such as IP addresses, request information, and related security data when necessary to operate the Service, prevent abuse, apply rate limits, troubleshoot technical issues, and protect our systems.
AI-related content. If you choose to use an AI-powered feature, relevant content from your teams, boards, retrospectives, notes, comments, or other information that you submit to that feature may be processed by Hitmeet and our third-party AI service provider, Groq, to provide the requested functionality.

How We Use Your Information

To provide, operate, and maintain the Service.
To authenticate you securely through magic-link sign-in or Google Sign-In.
To detect, prevent, and respond to fraud, abuse, unauthorized access, and security incidents.
To apply reasonable security measures and rate limits, including limiting authentication requests by email address and IP address.
To process payments and manage subscriptions.
To provide optional AI-powered features when you choose to use them.
To communicate with you about your account, service updates, security matters, or support requests.
To maintain, improve, and develop the Service and its features.
To comply with applicable laws, regulations, legal processes, or lawful requests.

How We Share Your Information

We do not sell your personal information. We share information with third parties only when reasonably necessary to provide, secure, or operate the Service, when you choose to use a feature that requires a third-party service, or when required by law.

Google Sign-In. If you choose to sign in with Google, Google acts as an identity provider and provides information such as your email address and basic profile details (including your name and profile picture) to us for account authentication. Google processes information according to its own policies.
Hitmeet Limited Use Disclosure Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use this data exclusively to create your personal account, identify you on collaborative boards, and send you system notifications. We do not use this data for marketing, nor do we transfer or disclose your information to third parties for purposes other than the ones explicitly provided for operating the Service.
Email delivery (Resend). We use Resend to send magic-link authentication emails and transactional communications on our behalf. Resend processes your email address and related delivery information as necessary to deliver these messages.
Payment processing (Paddle). Subscription payments are handled by Paddle. Paddle may act as the merchant of record and processes payment and billing information according to its own policies and applicable requirements.
Hosting and infrastructure (Fly.io). Our application and database may be hosted on Fly.io infrastructure. Information stored on this infrastructure is processed as necessary to host and operate the Service.
AI service provider (Groq). We use Groq to provide optional AI-powered features. When you use an AI-powered feature, relevant content may be transmitted to Groq for processing and generation of the requested result. Groq may process such information in accordance with its applicable terms, privacy policy, and data-processing practices.
Other team members. Content that you create within a shared team or board may be visible to other members of that team, as intended by the functionality and permissions of the Service.
Legal requirements. We may disclose information if required by applicable law, regulation, court order, or other valid legal process.

AI Features and Groq

Hitmeet may provide optional features that use artificial intelligence, including large language models and other AI technologies, to help you generate, summarize, analyze, organize, or transform content.

AI features are optional. Information is transmitted to Groq only when you choose to use a feature that requires AI processing.

Depending on the feature you use, the information transmitted for AI processing may include text or other content from your teams, boards, retrospectives, notes, comments, or other information that you explicitly submit to the AI-powered feature.

Hitmeet does not intentionally send your entire account or unrelated private information to Groq when such information is not required for the requested AI functionality.

AI-generated results may be inaccurate, incomplete, outdated, or unsuitable for a particular purpose. AI-generated content is provided as an assistive tool and should be reviewed before you rely on it or use it to make decisions.

Hitmeet does not guarantee the accuracy, completeness, reliability, or availability of AI-generated results.

You remain responsible for reviewing AI-generated content and for any decisions or actions you take based on such content.

Groq may process information submitted through AI-powered features in accordance with its applicable terms, privacy policy, and data-processing practices.

Cookies

We use essential cookies and similar technologies necessary to keep you signed in and to remember basic preferences.

We do not use third-party advertising cookies or sell information for advertising purposes.

Data Retention

We retain your account information and other data associated with your use of the Service for as long as your account remains active or as otherwise necessary to provide the Service and comply with our legal obligations.

You may delete your account and associated data after your paid subscription period has ended, if applicable. Once deleted, this data generally cannot be recovered.

Some information may be retained for a limited period where necessary for legal compliance, fraud prevention, security, dispute resolution, accounting, or other legitimate purposes.

Account Deletion

You can delete your Hitmeet account after your active paid subscription period has ended, if applicable.

If you have an active paid subscription, you must first cancel it and wait until the current paid subscription period has ended before deleting your account.

Canceling your subscription stops automatic renewal, but you may continue using paid features until the end of the current paid subscription period.

Once the paid subscription period has ended, you can delete your Hitmeet account from your account settings.

When you delete your account, we will delete personal data associated with your account that is stored by Hitmeet, including account information, teams, boards, board content, team membership, and other account-related data, subject to information that we are legally required or otherwise permitted to retain.

Information transmitted to Groq is subject to Groq's applicable terms and privacy practices. Hitmeet does not control the retention or deletion practices of third-party AI providers.

Account deletion may be irreversible, and deleted data may not be recoverable.

Third-Party Services

Hitmeet uses certain third-party services to provide, operate, secure, and improve the Service. These services may include Google, Resend, Paddle, Fly.io, and Groq.

Some third-party services are used automatically as part of operating the Service, while AI-powered features are used only when you choose to use the relevant functionality.

Third-party service providers may process information in accordance with their own terms, privacy policies, and data-processing practices.

Data Security

We use reasonable technical and organizational measures to protect your information, including encrypted connections (HTTPS), restricted access to production systems, and appropriate access controls.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Rights

Depending on your location and applicable law, you may have the right to:

Access. Request a copy of the personal data we hold about you.
Rectification. Ask us to correct inaccurate or incomplete data.
Erasure. Ask us to delete your personal data, subject to applicable legal retention obligations.
Restriction. Ask us to restrict certain processing of your data in circumstances provided by applicable law.
Portability. Request your data in a commonly used, machine-readable format where applicable.
Objection. Object to certain processing of your data where applicable.

To exercise any applicable rights, contact us using the details below. We will respond within the timeframe required by applicable law.

International Data Transfers

Your information may be processed and stored in countries other than your own, including the United States, through our infrastructure and third-party service providers.

Where required by applicable law, we rely on appropriate safeguards for international transfers of personal information.

Children's Privacy

The Service is not intended for children who are not legally permitted to use online services under applicable law.

We do not knowingly collect personal information from children in violation of applicable law.

Changes to This Policy

We may update this Privacy Policy from time to time. We will indicate changes by updating the "Last updated" date above and, where appropriate, provide additional notice.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your applicable data rights, please contact us at legal@hitmeet.com.

Service Provider: Viktor Fesenko, Individual Entrepreneur (FOP)
Country: Ukraine
Email: legal@hitmeet.com