Privacy Policy

Hitch lets you chat with AI models from OpenAI, Anthropic, and Google in one place, using accounts you connect yourself. This policy explains what we collect, how we use it, and the choices you have.

Information we collect

• Account details: your name, email address, and profile picture when you sign in with Google or an email code.
• Connected AI accounts: when you connect ChatGPT, Claude, or Gemini, we store the access tokens those services issue. Tokens are encrypted at rest (AES-256-GCM) and used only to send your requests to that service.
• Your content: chats, messages, files you upload, skills you create, and MCP servers you add (their credentials are encrypted at rest).
• Workspace files: files created in a chat's sandbox are kept until you delete that chat.

How we use it

• To sign you in and keep your session.
• To send your messages and files to the AI provider you choose, and to show you its replies.
• To save your chat history and uploads so you can return to them.
• To email sign-in codes.

We do not sell your data or use it for advertising.

Who we share it with

• AI providers you connect (OpenAI, Anthropic, Google) receive the messages and files you send them, under their own terms and privacy policies.
• Infrastructure providers that host our database and file storage (Neon) and send email (Resend).
• People you share with: a chat or message you share by link can be viewed by anyone who has the link, until you revoke it.

Google user data

Hitch's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google account data only to sign you in and, if you connect Gemini, to send your requests to the Gemini API. We do not use it to train models or for advertising, and we do not let humans read it except with your permission, for security, or as required by law.

Your choices

• Disconnect any AI account under Settings → Providers.
• Delete chats (and their sandbox files) or uploads at any time.
• Revoke share links from the share dialog.
• To delete your account and all associated data, email nabinkhair12@gmail.com.

Security

Data is sent over HTTPS. Provider tokens and MCP credentials are encrypted at rest. No system is perfectly secure, but we work to protect your information.

Changes and contact

We may update this policy and will change the date above when we do. Questions? Email nabinkhair12@gmail.com.