Privacy Policy

1. Introduction

Welcome to Hot Metal, operated by Far Far Away Labs LTD, a company registered in Israel ("we," "us," or "our"). We are committed to protecting your privacy and ensuring you understand how we collect, use, and safeguard your information. This Privacy Policy applies to hotmetal.app and all related services.

By using Hot Metal, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please do not use our service.

2. Information We Collect

2.1 Information You Provide

When you create an account or use Hot Metal, you may provide us with:

• Account information (name, email address, password)
• Profile information and preferences
• Content you create, draft, or publish through our platform
• Communications with us (support requests, feedback)
• Payment information (billing details are processed securely by Paddle — we do not store your full card details)

2.2 Third-Party Authentication Information

Hot Metal uses Clerk for authentication services. When you sign up or sign in using a third-party identity provider, we receive certain information from that provider:

• Google Sign-In: When you sign in with Google, we receive your name, email address, and profile picture from your Google account. We do not have access to your Google password.
• Other OAuth Providers: If you use other sign-in methods (such as Microsoft, GitHub, or Apple), we receive similar basic profile information as permitted by that provider.

This information is used solely to create and manage your Hot Metal account. Your use of third-party authentication is also subject to the privacy policies of those providers (Google, Microsoft, etc.).

2.3 Publishing and Social Connection Information

When you connect third-party accounts to Hot Metal for publishing purposes, we collect:

• LinkedIn: Profile information, connection data, and permissions to post content on your behalf when you authorize publishing
• X (formerly Twitter): Profile information, account handle, and permissions to post content on your behalf when you authorize publishing

We only access the minimum information necessary to provide our services. You can disconnect these accounts at any time through your account settings.

2.4 Automatically Collected Information

We automatically collect certain information when you use our service:

• Usage data (features used, pages viewed, time spent)
• Device information (browser type, operating system, IP address)
• Log data (access times, error logs, referral URLs)
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process and publish content to your connected platforms (LinkedIn, X) when you authorize it
• Generate AI-assisted content drafts and suggestions
• Communicate with you about your account and service updates
• Respond to your support requests and feedback
• Monitor and analyze usage patterns to improve user experience
• Process subscription payments and manage billing through our payment processor, Paddle
• Detect, prevent, and address technical issues or fraudulent activity
• Comply with legal obligations

4. AI and Content Processing

Hot Metal uses artificial intelligence to help you create content. Here's how we handle your data:

• Your content (ideas, drafts, published posts) is processed by AI models to generate suggestions and variations
• We may use third-party AI providers (such as OpenAI, Anthropic, or others) to process your content
• We do not use your content to train third-party AI models unless you explicitly opt in
• You retain all rights to content you create on Hot Metal

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Third-Party Platforms

When you authorize us to publish content to LinkedIn, X, or other platforms, we share only the content and metadata necessary to complete the publishing action.

5.2 Service Providers

We work with trusted third-party service providers who help us operate our platform:

• Cloud infrastructure providers (Cloudflare)
• Authentication services (Clerk, which facilitates sign-in via Google, Microsoft, and other identity providers)
• Payment processing (Paddle — Paddle.com Market Limited handles all subscription billing and payment data on our behalf, subject to Paddle's Privacy Policy)
• AI and natural language processing services
• Analytics and monitoring services

These providers are contractually obligated to protect your information and use it only for the services they provide to us. When you use third-party authentication (like Google Sign-In), you are also subject to that provider's terms of service and privacy policy.

5.3 Legal Requirements

We may disclose your information if required by law, legal process, or government request, or to protect the rights, property, or safety of Hot Metal, our users, or others.

5.4 Business Transfers

If Far Far Away Labs LTD is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

6. Data Security

We implement industry-standard security measures to protect your information:

• Data encryption in transit (TLS/SSL)
• Data encryption at rest
• Regular security audits and monitoring
• Access controls and authentication
• Secure infrastructure hosted on Cloudflare

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. You can request deletion of your account and associated data at any time. We may retain certain information for legitimate business purposes or as required by law, such as:

• Backup copies (deleted within 90 days)
• Transaction records for accounting purposes
• Logs for security and fraud prevention

8. Your Privacy Rights

You have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Export your content in a standard format
• Opt-out: Unsubscribe from marketing communications
• Restriction: Limit how we process your information

To exercise these rights, contact us at privacy@farfarawaylabs.com. We will respond within 30 days.

9. International Data Transfers

Hot Metal is operated by Far Far Away Labs LTD, registered in Israel. Your information may be transferred to, stored, and processed in Israel or in other countries where our service providers (including Cloudflare, Clerk, and Paddle) operate. By using our service, you consent to this transfer. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

Israel has been recognized by the European Commission as providing an adequate level of data protection. Where we transfer data to other countries, we rely on standard contractual clauses or other appropriate safeguards as required by applicable law.

10. Children's Privacy

Hot Metal is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately, and we will take steps to delete such information.

11. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience:

• Essential cookies: Required for authentication and core functionality
• Analytics cookies: Help us understand how users interact with our service
• Preference cookies: Remember your settings and preferences

You can control cookies through your browser settings. Note that disabling certain cookies may limit functionality.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how we use it
• Right to request deletion of your personal information
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@farfarawaylabs.com.

13. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the rights listed in Section 8 above. Our lawful bases for processing your information include:

• Contract performance (providing our services)
• Consent (when you connect third-party accounts)
• Legitimate interests (improving our service, security)
• Legal obligations (compliance with applicable laws)

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending you an email notification (for significant changes)

We encourage you to review this Privacy Policy periodically. Your continued use of Hot Metal after changes are posted constitutes your acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: