Privacy Policy

1. Introduction

HotTake ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Chrome extension and web application (collectively, the "Service").

By using HotTake, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, and profile picture when you sign up via Google OAuth.
• Payment Information: Processed securely by Stripe. We do not store your full credit card details.
• Writing Samples: LinkedIn posts you optionally provide for writing style analysis.
• User Preferences: Your preferred tone, settings, and customization options.

2.2 Information Collected Automatically

• Usage Data: Features used, comments generated, posts created, and engagement metrics.
• Device Information: Browser type, operating system, and extension version.
• LinkedIn Content: Post content you interact with (only when actively using HotTake features).

2.3 Information We Do NOT Collect

• Your LinkedIn login credentials
• Your LinkedIn private messages
• Your browsing history outside of LinkedIn
• Data from other websites or applications

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Generate AI-powered comments and posts that match your writing style
• Process payments and manage your subscription
• Track your usage against subscription limits
• Improve and personalize your experience
• Communicate with you about updates, support, and marketing (with consent)
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service Providers: Third parties that help us operate the Service (e.g., OpenAI for AI generation, Stripe for payments, Vercel for hosting).
• Legal Requirements: When required by law, court order, or government request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.
• With Your Consent: When you explicitly authorize us to share information.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Regular security assessments
• Access controls and authentication
• Secure cloud infrastructure (Vercel, Neon)

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. You can request deletion of your account and associated data at any time by contacting us at support@hottake.ly.

Upon account deletion, we will remove your personal information within 30 days, except where retention is required for legal compliance.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Request transfer of your data
• Objection: Object to certain processing activities
• Withdrawal: Withdraw consent where processing is based on consent

To exercise these rights, contact us at support@hottake.ly.

8. Chrome Extension Permissions

Our Chrome extension requests the following permissions:

• linkedin.com: To inject our UI and read post content for generating relevant comments
• hottake.ly: To communicate with our backend for AI generation and authentication
• storage: To save your preferences locally
• cookies: To maintain your authentication session

The extension only activates on LinkedIn.com and our own domain. It does not access any other websites.

9. Third-Party Services

We use the following third-party services:

• OpenAI: For AI-powered content generation
• Stripe: For payment processing
• Google OAuth: For authentication
• Vercel: For hosting and analytics
• Neon: For database hosting

Each service has its own privacy policy governing their use of your data.

10. Children's Privacy

HotTake is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: