1. What we collect

Account data — your email address and the display name you choose. We verify email with a magic link or one-time code; there are no passwords.

Huddle content — messages, files and call/thread summaries inside your Huddles. When you CC new@instanthuddle.net on an email thread, we read that single email — participants, subject and body — to open the Huddle and give members a summary. We never see your wider mailbox.

Billing data — if you upgrade, payments are handled by Stripe. We store your plan and a Stripe customer reference; your card details never touch our servers.

Usage data — basic operational logs (sign-ins, joins, errors) needed to run and secure the service.

Product analytics — on instanthuddle.com and app.instanthuddle.com we use Google Tag Manager / Google Analytics to understand aggregate traffic (pages viewed, referrers, device type). Analytics does not read Huddle message or file contents.

2. How Huddles stay private

Every Huddle is isolated to exactly its members — a client only ever sees their own room. All traffic is encrypted in transit and files are encrypted at rest. Calls are real-time and not recorded by us. We never train AI models on your content; AI features (like thread summaries) process your content only to show the result to the members of that Huddle.

3. Who we share data with

Nobody, except the processors we need to run the service: Cloudflare (hosting, storage, email routing and AI processing), Stripe (payments), our transactional email provider (magic links and notifications), and Google Tag Manager / Google Analytics (site usage). Each receives only what its job requires. We don't sell your data or share it with advertisers, and we disclose it to authorities only when legally required.

4. Cookies

We use one essential cookie — your session (ih_session) — so you stay signed in. We also use Google Tag Manager / Google Analytics on the marketing site and app, which may set cookies or use similar identifiers; see Google's Privacy Policy. The try-it-free form uses Cloudflare Turnstile to block bots; it runs invisibly and is subject to the Cloudflare Turnstile Privacy Addendum. We don't use advertising cookies.

5. Retention and your rights

Your Huddles and their content stay available for as long as your account exists — a Huddle is meant to be permanent. You can export any Huddle's history and files anytime. You can ask us to correct or delete your personal data, or delete your account entirely, by emailing us; we'll act within 30 days, subject to records we must keep for legal or billing reasons. Where GDPR or similar laws apply, you also have the rights to access, portability, restriction and objection.

6. Changes and contact

If this policy changes in a way that matters, we'll notify you by email or in the product first. Questions or requests: support@instanthuddle.com. See also our Terms of Service.