Legal

Privacy Policy

Last updated: September 27, 2026

This Privacy Policy explains how Hitechnine DeepLink ("Hitechnine", "we", "us") collects, uses and protects personal data when you use hitechnine.com and the smart-link service (the "Service"). Hitechnine is operated from Portugal and is the data controller for the purposes described below. For any privacy question or request, contact us at info@hitechnine.com.

1. Data we collect

• Account data — name, email address and a hashed password (we never store your password in readable form). You provide this when you create an account.
• Service data — the links you create, custom aliases, titles, notes, collections, custom domains, workspace settings and API keys (stored only as irreversible hashes, with a short identifying prefix).
• Click analytics — for each smart-link visit we record: timestamp, device type, operating system, browser, in-app browser (e.g. Instagram), referrer host, UTM parameters, routing strategy used, and country code derived from the visitor's IP address. The IP address itself is not stored. Unique visitors are counted with salted, one-way hashes — a privacy-conscious statistic that does not identify anyone.
• Billing data — subscriptions are processed by Stripe. We receive and store only identifiers (customer ID, subscription ID, plan, status, period dates) and never see or store your card details.
• Support data — the tickets you open and the messages exchanged with our support team.
• Technical logs — minimal server logs needed to operate and secure the Service (e.g. errors), retained for a short period.

We do not sell personal data, do not run third-party advertising trackers on our site, and do not store raw IP addresses of visitors who click your links.

2. Cookies and local storage

We use only what is strictly necessary to run the Service:

• Session cookie (asmar_session) — keeps you signed in. It is HTTP-only, same-site, and expires after 30 days or when you sign out.
• Local storage — one entry to remember your light/dark theme preference.

No advertising or third-party analytics cookies are set, which is why you do not see a cookie banner.

3. Why we process this data (legal bases)

• Performance of a contract — to create your account, operate your workspace, route your links, provide analytics and manage your subscription.
• Legitimate interests — to keep the Service secure, prevent abuse (rate limiting, fraud prevention), and improve reliability.
• Legal obligations — to keep billing and tax records where required by law.
• Consent — where we ask for it (for example for optional communications); you can withdraw consent at any time.

4. Sub-processors

We rely on a small set of trusted providers to run the Service:

• Supabase — database hosting (all Service data).
• Hostinger — application hosting for hitechnine.com.
• Stripe — payment processing, invoicing and subscription management.
• Google (Gmail) — delivery of transactional emails such as password resets and support replies.
• Cloudflare (planned) — DNS and edge routing for custom domains.

Some providers are based outside the European Economic Area. Where data is transferred internationally, we rely on the providers' safeguards, including the European Commission's Standard Contractual Clauses.

5. Retention

• Account and service data — while your account exists. Delete your account and we erase or anonymise it, keeping only what the law requires.
• Click analytics — per plan: 30 days (Free), 12 months (Pro), 24 months (Business). Older events are removed automatically.
• Password-reset tokens — expire after 60 minutes and are stored only as hashes.
• Backups — encrypted snapshots retained up to 14 days.
• Billing records — kept for the period required by Portuguese tax law.

6. Your rights

If you are in the EU/EEA you have the right to access, correct, delete and port your personal data, to restrict or object to certain processing, and to lodge a complaint with your supervisory authority (in Portugal, the CNPD — Comissão Nacional de Proteção de Dados). To exercise your rights, contact us at info@hitechnine.com. We respond within one month.

7. Security

Passwords are stored as salted scrypt hashes. Sessions, password-reset tokens and API keys are stored only as SHA-256 hashes. Traffic to hitechnine.com is encrypted in transit (HTTPS). Access to production systems is restricted, and our team accesses personal data only when needed to operate or support the Service.

8. Children

The Service is not directed at children under 16, and we do not knowingly collect their personal data.

9. Changes to this policy

We may update this policy from time to time. Material changes will be announced on this page with a new "last updated" date, and where required, by email.

10. Contact

Privacy questions and requests: info@hitechnine.com. See also our Terms & Conditions.