Privacy policy

Account information is about you as a HungryHub user: your name, email address, password (stored only as a secure hash by our sign-in provider), workspace name, role and settings. We are responsible for it.

Workspace content is what you and your team put into HungryHub: your contacts, companies, deals, tickets, projects, files, notes, proposals, emails and your clients' website data. You (the agency) decide what goes in and why; we store and process it only to provide HungryHub to you, following your instructions. For that content, you are the business responsible for it and we act as your service provider. If someone whose details are in your workspace asks us about their information, we'll pass the request to you.

• Account and billing details: name, email, workspace, plan and subscription status. Card details are entered on Stripe's page and stored by Stripe; we never see or store full card numbers.
• Workspace content, as described above, including files you upload and email you connect.
• Information from services you connect, only when you connect them: Gmail messages and labels, Google Calendar events and free/busy times, Google Analytics and Search Console reports, Google Business Profile details, reviews, posts, photos and performance numbers, Stripe customers, invoices and payments, Zoom meetings, and GitHub repository content for website editing.
• Information people send through pages you share: proposal signatures, form answers and uploads, bookings, referrals, review feedback and website lead forms. Public pages may record when they were opened, the browser used and the IP address, for security and so you can see who viewed a proposal or report.
• Usage and technical data: sign-in times, the actions recorded in your workspace's activity log, error logs and basic request data (IP address, browser) kept by our hosting providers.

• To run HungryHub: store your workspace, show it to the people you invite, send the emails and notifications you set up, and run the integrations you connect.
• To bill your subscription and manage your trial.
• To keep HungryHub secure: sign-in checks, rate limits, spam protection and investigating misuse.
• To answer you when you contact us, and to tell you about changes to HungryHub or these terms.
• To fix problems and improve HungryHub, using error logs and aggregate usage, not by reading your workspace content.

We don't sell personal information, we don't share it for advertising, and we don't use your workspace content to train AI models.

When you connect a Google account, HungryHub asks only for the access the features you choose need, and asks for each kind separately when you turn that feature on:

• Gmail: reading and labelling the email threads you mark for support or projects, and sending email you write (your own Gmail can be connected to send only).
• Google Calendar: checking free/busy times and adding meetings that are booked.
• Google Analytics and Search Console (read-only): showing visitor and search numbers for the sites you link, in HungryHub and in reports you send.
• Setting up Google for a site, when you choose to: creating a Google Analytics property and web stream for a client's site, and adding and verifying the site in Search Console (with its sitemap).
• Google Business Profile: reading a profile's details, reviews, photos and performance numbers, and, only when you click to do so or switch on scheduled posts, posting review replies, publishing posts, adding or removing photos and updating profile details such as the description, services, categories and holiday hours.

We use this data only to show it to you in HungryHub and to provide those features. We don't use it for advertising, we don't sell it, and people don't read it except with your permission, for security, or where the law requires.

HungryHub's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Some Google data is sent to our AI provider to write a draft you asked for, and only the part that draft needs: for example a review's text to draft a reply, a Business Profile's details and recent reviews to draft a post, or a site's Search Console numbers to suggest page changes. Google user data is never used to train or improve AI models, ours or anyone else's, and is not kept by the AI provider beyond producing that answer under its commercial terms.

How Google data is stored: the sign-in Google gives us is encrypted before it is saved. Data copied into HungryHub (for example an email turned into a ticket, reviews, or daily Analytics and Search Console numbers) is stored in your workspace's database in the United States, encrypted at rest and sent only over HTTPS. Only the people in your workspace with the right permission can see it; HungryHub staff look at it only to help when you ask, for security, or where the law requires.

How Google data is shared: only with the service providers listed below, and only to run the feature you used (our database and hosting, and the AI provider for drafts). It is never sold, never used for advertising, and never shared with other HungryHub customers.

How long Google data is kept: for as long as the Google account stays connected and your workspace exists. Reviews and numbers are refreshed from Google and replaced as they change. When you disconnect a Google account its saved sign-in is deleted at once; when you delete your workspace, everything copied from Google is deleted with it. You can ask us to delete it sooner by writing to ram@hungryram.com.

You can disconnect a Google account at any time in Settings › Integrations (your own Gmail in Settings › Email), or from your Google account's security settings. Disconnecting stops new access; data already copied into your workspace (for example a ticket created from an email) stays until you delete it.

Some features use Anthropic's Claude to write drafts and answers: proposal and sales letters, task lists from notes, SEO page suggestions, report summaries, review replies and Business Profile posts, and the website chat that answers a business's website visitors. When they run, the text needed for that answer (for example your notes, a review, a page's text and its search numbers, or a visitor's chat messages with what the business has told the chat about itself) is sent to Anthropic to produce it. It is processed under Anthropic's commercial terms, which do not allow it to be used to train their models. Drafts are suggestions; nothing is sent to your clients or posted to Google without you, except chat answers to website visitors and posts on a schedule you switched on.

We use these companies to run HungryHub. Each gets only what it needs for its part:

• Cloudflare: hosting for the app and this website.
• Supabase: database and sign-in (stored in the United States).
• Cloudflare R2 and Supabase Storage: files you and your clients upload.
• Stripe: payments for your subscription, and your clients' billing data when you connect Stripe.
• Postmark: sending email (notifications, invites, proposals, forms, campaigns) and receiving email sent to support addresses or forwarded from a mailbox you set up to forward to HungryHub. Forwarded email that doesn't become a ticket (for example, email from someone who isn't one of your clients) is dropped as it arrives and not saved in your workspace.
• Google: the Gmail, Calendar, Analytics, Search Console, Business Profile and PageSpeed features you use.
• Anthropic: the AI drafting features.
• DataForSEO: search rankings, keyword research and site audits for websites you track (website addresses and keywords, not your contacts).
• Twilio: sending and receiving text messages, for businesses that use texting.
• Zoom: meeting links, when you connect it.
• GitHub: reading and publishing website content, when you connect it.

This website sets no tracking or advertising cookies. The app uses only the cookies it needs to work: keeping you signed in and remembering which workspace you have open. Some preferences, like dark mode or table columns, are kept in your browser's local storage on your device.

We keep your account and workspace content while your account is active. Records you delete go to the recycle bin and are permanently deleted after 30 days. If you close your workspace, we delete its content within a reasonable time, except what we must keep for legal, tax or security reasons (such as billing records). Backups held by our providers roll over on their own schedules.

Data is encrypted in transit (HTTPS) and at rest by our providers. Each workspace's data is kept separate, access is limited to the people in it according to their roles, and public links (proposals, forms, reports) use long random codes. No system is perfectly secure; if a breach affects your information, we'll tell you as the law requires.

You can see and change your account details in Settings, export or delete records in your workspace, and close your account. Depending on where you live (for example California under the CCPA, or the EU and UK under the GDPR), you may have the right to access, correct, delete or receive a copy of your personal information, and to object to some uses. Email us to make a request; we'll answer within the time the law sets and won't treat you differently for asking.

If you are a client of an agency that uses HungryHub, please contact that agency first: they control their workspace and can act on your request.

HungryHub is run from the United States and stores data in the United States. If you use it from elsewhere, your information is transferred to and processed in the United States.

HungryHub is a business tool and isn't meant for anyone under 16. We don't knowingly collect information from children.

If we change this policy, we'll update the date at the top. For significant changes we'll also tell account owners by email or in the app before they take effect.

Questions or requests about privacy: Hungry Ram LLC, Irvine, California, USA. Email: ram@hungryram.com.