Privacy Policy

1. What We Collect

We collect the following categories of data:

• Account data: Name, email address, and encrypted password when you register.
• Billing data: Payment method details are stored and processed by Authorize.Net. We store only a tokenized reference - we never see your full card number.
• Link data: The URLs you create and their associated short codes.
• Click analytics: When someone clicks your short link, we log the device type, browser, operating system, referrer domain, and timestamp. We do not log IP addresses or build individual visitor profiles.
• Usage data: API requests, plan usage, and account activity logs for security and billing purposes.

2. How We Use Your Data

• To provide, operate, and improve the Service
• To process payments and send billing receipts
• To power the analytics dashboard you see for your links
• To send transactional emails (email verification, password reset, payment receipts)
• To detect and prevent abuse, fraud, and security incidents

3. What We Don't Do

• We do not sell your personal data to third parties
• We do not use click data to build profiles on the visitors who click your links
• We do not send marketing emails without your explicit consent
• We do not share your data with advertisers

4. Data Sharing

We share data only with the service providers necessary to operate the platform - including our payment processor (Authorize.Net) and transactional email provider. These providers are contractually bound to use your data only to provide services to HidURL.

5. Data Retention

Your data is retained for as long as your account is active. When you delete your account, we begin a 30-day deletion process after which your personal data, links, and analytics are permanently removed. Billing records may be retained longer where required by law.

6. Security

We use industry-standard encryption in transit (TLS) and at rest. Passwords are hashed using bcrypt and are never stored in plain text. Access to production systems is restricted and monitored.

7. Cookies

HidURL uses only essential cookies required for authentication and session management. We do not use advertising or tracking cookies.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, please contact us. You can also delete your account directly from the settings page.

9. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated by email or via a notice in your dashboard. Continued use of the Service after the effective date constitutes acceptance.

10. Contact

Questions about this policy? Contact us and we'll respond within one business day.