Privacy Policy

Individual data controller: Li Jiawei (李嘉伟) · Updated: September 14, 2026

This Policy applies to media.hiitun.top, HIITUN account services, and the HIITUN Matrix Manager desktop software. The individual data controller is Li Jiawei (李嘉伟) (“HIITUN,” “we,” or “us”). It explains what information we process, why we process it, when a third party you choose receives it, and how you can exercise privacy rights.

1. Information We Process

• Website and security information: When you visit the website, hosting and network providers may process your IP address, request time, page address, browser and device information, diagnostics, and security logs to deliver pages, troubleshoot issues, and prevent abuse. The website is hosted by Vercel; technical logs are handled under the service configuration and retention rules that apply to that service.
• HIITUN account and authentication information: When you register or sign in, we process your email address, account identifier, creation time, email verification code and its expiry, sign-in status, and session expiry information. Passwords are stored as salted hashes; verification codes and session tokens are not stored in directly usable plain text. The authentication service may use request IP addresses, email addresses, and rate-limit records to prevent spam registration, brute-force attempts, and abuse. Email verification codes are sent by an email provider.
• Desktop operations data: When you add accounts or create content in the software, platform names, account names or identifiers, social-platform authorization data (such as cookies or session data), drafts and copy, image and video assets, publishing tasks and schedules, execution logs, post links, operational statistics, proxy settings, and software preferences are primarily stored on your device. AI service addresses, model settings, and API keys you enter are also stored in local settings.
• Subscription and support information: If you request a subscription, make a payment, or contact support, we may process your account email, selected plan, order reference or payment status, and messages or attachments you send. We use this information to activate a plan, address payment issues, provide support, and meet legal obligations. Full payment credentials such as card numbers and security codes are handled by Waffo or the payment partner named on the purchase page; HIITUN does not store full card numbers or security codes.

2. Local Storage, AI Requests, and Social Platform Actions

The desktop software writes operations data to the application data folder on your device and processes it through its local service. Except for account authentication, website operation, online actions you request, and the cases described in this Policy, using the software does not automatically synchronize your drafts, assets, social account cookies, publishing logs, or AI keys to the HIITUN website. You are responsible for securing your device and operating-system account and backing up important data.

When you choose to use an AI feature, the software sends your prompts, text, or requested assets, together with the API credentials needed for the request, to the AI provider you configure or select. That provider processes the request under its own terms and privacy policy. When you connect a social account, publish content, collect data, or manage comments, relevant information is sent to the corresponding social platform as needed for the action you request. Review third-party permissions and rules before authorizing them.

3. Purposes and Disclosures

We use information to provide the website, account sign-in, subscription management, and support; protect service security; carry out desktop software functions you request; handle payments and disputes; and comply with legal obligations. Information may be processed by the following providers only as needed for these purposes: Vercel (website hosting and delivery), an email provider (verification or support messages), Waffo or the payment partner shown at checkout (payments and subscription management), the AI provider you select, and social media platforms you connect to or use.

We do not sell personal information or provide it to third parties for cross-context behavioral advertising. We do not disclose personal information to other third parties except for your actions or authorization, service providers processing it on our instructions, legal requirements, or situations necessary to protect rights and security.

4. Retention and Security

Local operations data remains on your device until you delete it in the software or remove or clear it yourself. Uninstalling the software may not delete data from its user-data folder. Remote account, authentication, and session information is retained only as needed to provide accounts, prevent abuse, handle support or disputes, and meet legal obligations. A sign-in session may remain valid for up to 30 days; verification codes and anti-abuse rate-limit records expire and are cleared according to their validity periods. Order and payment records may be retained for tax, accounting, or dispute requirements. Each hosting or payment provider’s retention rules apply to information it processes.

We use access controls and security measures appropriate to the information processed, but no transmission or storage method is guaranteed to be completely secure. Do not send passwords, payment security codes, or unrelated sensitive information to support.

5. Privacy Rights for U.S. Residents

If a state privacy law applies to the processing, you may have the right to know about or access personal information, receive a portable copy, correct or delete it, opt out of sale, sharing, or targeted advertising, and limit certain processing of sensitive personal information. Residents of some states may also appeal a decision to deny a request or use an authorized agent. Rights, exceptions, and applicability thresholds vary by state.

To submit a request, email the address below and identify the right you wish to exercise and the HIITUN account involved. We may ask for reasonable identity verification to prevent unauthorized access. We will not discriminate against you for exercising a privacy right. If we deny a request covered by applicable law, you may reply to ask for a review and may also contact your state privacy regulator.

6. Children’s Privacy

The services are intended for creators and teams generally and are not directed to children under 13. We do not knowingly collect personal information from children under 13 or intentionally allow them to create accounts. If we learn that we have collected such information, we will take reasonable steps to delete it. A parent or guardian may contact us below. Where the U.S. Children’s Online Privacy Protection Act (COPPA) applies to our processing, we will comply with its requirements.

7. International Processing

The individual operator, Li Jiawei (李嘉伟), is based in China. If you access the website or software from the United States, account authentication and support information may be processed in China. Website hosting, payment, email, AI, and social-platform providers may also process information in other countries where they operate. Data protection rules differ by location. We will use safeguards required by applicable law, and you should review the privacy information of third-party services you choose to use.

8. Updates and Contact

We may update this Policy as the software, providers, or legal requirements change. We will give appropriate notice of material changes on the website or in the software and update the date on this page.