Privacy

Your account. An email address, and a password unless you sign in with Google. If you use Google we receive your email address and basic profile details from them — never your Google password.

What you analyze. The links you give us, and the analysis produced from each one: transcript, hooks, structure, CTA and a performance read. A single thumbnail frame per video is stored so your Library has something to show. We do not keep the source video.

What happens to a link you paste. The link travels: to ZM API, which resolves it to a direct file URL and reads the post’s public counts; then to our own service, which downloads the video, converts it and sends it to the analysis model. The video file is deleted as soon as the model has watched it. We keep the written analysis, one thumbnail frame, and the public counts — never the video, and never anything from your account on the platform the video came from. We never sign in to that platform, and we hold no credentials for it.

Billing. If you buy a plan, the payment is handled by Polar. Card details go to them and never reach us. We keep the fact that a payment succeeded, the plan it bought, and the credits it granted.

Product analytics. Pages visited, features used, and where people get stuck — buttons pressed, steps reached, sign-in attempts that failed. This is what tells us which part of the product is broken.

Session recordings. We record browsing sessions on the app so we can see where people get stuck instead of guessing. This is the item most worth reading twice, so it has its own section below.

A session recording is a reconstruction of what happened on your screen — pages, clicks, scrolling, and how long each step took. It is rebuilt from a description of the page rather than a video of your computer, and it never leaves the Hiruno tab.

Everything you type is hidden by default. Text you enter into any field — your email, your password, the links you paste — is masked before the recording is sent, so it is not recoverable from the recording. We chose to mask everything and opt fields out one at a time, rather than the reverse, because the reverse fails silently the first time somebody adds a new field.

We use recordings to find and fix problems in the product. We do not sell them, and we do not use them to build a profile of you for advertising.

Only the companies that run parts of the product. Each one gets the minimum needed to do its job.

• Supabase — Stores your account, your Library and your credits.
• Vercel — Serves the website.
• PostHog — Product analytics, error reports and the session recordings above.
• Polar — Payments and subscriptions. They handle card details; we do not.
• ZM API — Resolves the video link you paste into a direct file URL, and returns the post’s public engagement counts. They receive the link, and nothing about you.
• Railway — Runs the service that fetches the video, converts it, and calls the analysis model. It holds the video only for the length of one analysis.
• OpenRouter and Google (Gemini) — Perform the video analysis itself when you run a tool.
• Google — Only if you choose to sign in with Google.

We do not sell your data, and we do not share it with advertisers.

Connecting Hiruno to an AI agent authorizes that agent to use the tools on your account and read the analyses in your Library. That connection is yours to revoke: remove the connector in your agent, or contact us and we will detach it. What your agent does with an analysis after it receives one is governed by the privacy policy of whoever makes that agent, not this one.

Specific timelines, because “a limited window” is not an answer:

• Your account and your Library— until you delete them. Deleting your account deletes both.
• The source video— not retained at all. It exists only for the minutes one analysis takes, and is deleted as soon as the model has watched it.
• Session recordings — 30 days, then deleted automatically.
• Analytics events — 12 months, then deleted automatically.
• Billing records— kept while your account exists and for as long afterwards as tax and accounting rules require.

You can delete any analysis from your Library at any time. To delete your whole account, or to ask for a copy of what we hold, email us at hirunoai@gmail.com and we will action it.

If you would rather not be recorded or measured at all, an ad or tracking blocker set to block analytics will stop the browser-side collection described here.

If we start collecting something materially different, we will update this page and move the date at the top.