What we collect, and what we do with it
HitchAI is a federal-market intelligence product for companies. It is operated by Hitch Intelligence LLC, doing business as HitchAI ("HitchAI", "we"). This policy covers hitchintel.com, the signed-in platform, email we send, and the HitchAI connector for AI assistants (the hosted MCP server at mcp.hitchintel.com, including when you use it from Claude or ChatGPT). Questions go to [email protected].
What we collect
| Category | What | Why |
|---|---|---|
| Account | Name, work email, password (hashed), the company you belong to and your role in it, invitations you send or accept. | To sign you in, seat you in your company, and apply your company's licence. |
| Your work in the product | Saved markets, watches, pursuits, tasks and notes, alert settings, criteria files you upload, questions you ask Ask Hitch, and the "lens" you set. | To run the product for you and your team, and to send the alerts you asked for. |
| Usage records | Which pages and features you used and when, which connector tools were called and when, your IP address, your browser type, and the AI client that connected on your behalf. | To meter your plan's limits, keep the service reliable and secure, and understand what is used. |
| Billing | If your company pays by card, our payment processor holds the card details. We hold the customer and subscription identifiers, never the card number. | To bill the subscription. |
| Support | What you send us by email or the contact form. | To answer you. |
We do not buy data about you, run advertising, or sell or rent personal data. We do not collect precise location. The product is for people at work and is not directed to children under 13.
The AI connector in particular
When you connect HitchAI to an AI assistant (Claude, ChatGPT, Claude Code or any other MCP client), you sign in on hitchintel.com and approve the connection. From then on the assistant calls our server as you, read-only, within your company's plan. For each call we record which tool was called, when, your account, your IP address and which assistant made the call. We do not receive or store your conversation with the assistant; we receive only the arguments of each tool call (for example a search term), answer them, and do not keep them beyond the server's own short-lived logs. The assistant's own provider (Anthropic, OpenAI) handles your conversation under its own privacy terms. You can disconnect the assistant in its settings at any time; a connection already made keeps working for up to an hour after that, and we revoke access on our side on request ([email protected]).
Who receives data
We use these providers to run the product. Each receives only what its job needs.
- Supabase — sign-in, the database that holds accounts, companies and your work in the product, and the usage ledger. Hosted in the United States.
- Cloudflare — serves the website, routes requests, holds published data files, and runs the bot check on sign-in (Turnstile).
- DigitalOcean — the servers that build and serve the data and the connector (New York).
- Google (Gemini API) and Anthropic (Claude API) — when you use Ask Hitch, Deep Research or another AI feature, your question and the data needed to answer it are sent to the model provider to generate the answer. We do not use your data to train models, and our agreements with these providers do not permit them to.
- Resend — sends our email (alerts, digests, invitations, account mail).
- Stripe — card payments, where used.
Beyond these, we share personal data only when the law requires it, to protect the service or its users, or with your direction. Within your company, your colleagues can see the markets, watches, pursuits and notes you share with them, as the product shows.
How long we keep it
- Account and your work in the product: for as long as your company's licence or your account is active. When an account is closed, or when you or your company ask, we delete or anonymise it within 90 days, except what we must keep for billing, tax or legal reasons.
- Usage records: kept to meter plans and for security; detailed records are kept no longer than 24 months.
- Server logs: short-lived and used only to run and secure the service.
- Email we sent you: records of what was sent and whether it bounced, for as long as the account is active.
What you can do
- See and change your account details and alert settings on the Account page.
- Ask us for a copy of the personal data we hold about you, to correct it, or to delete it: email [email protected]. We answer within 30 days.
- Disconnect any AI assistant from its own settings; ask us to revoke connector access on our side.
- Unsubscribe from any digest or alert email with the link in it. Account and billing mail is not optional while you have an account.
Security
Data moves over TLS. Passwords are hashed. The connector is read-only by construction: it has no route to anything that writes. Access inside Hitch Intelligence LLC is limited to what operating the service needs. If a breach ever affects your data we will tell you and the authorities the law names, without undue delay.
Cookies and local storage
We use your browser's storage to keep you signed in and to remember what you chose in the product. We do not use advertising cookies or third-party trackers. Cloudflare may set a cookie to protect the site from abuse.
Where data lives, and changes
HitchAI operates from the United States and your data is stored and processed there. We will post changes to this policy here, with the date above, and tell you by email about any change that matters to you.