Privacy

Who we are

Hultin & Co is a sole proprietorship that makes short videos, automations and websites for small businesses in New Jersey and Massachusetts. "We" on this page means Hultin & Co. To ask about your information, text or email us using the buttons at the bottom of this page.

What this website collects

This website has no sign-up, no forms and no accounts. It doesn't set cookies, and it doesn't run analytics, ad trackers or tracking pixels.

Loading any web page shares some technical details with the servers that send it. On our site, that means these companies:

Cloudflare, our host

The site is hosted on Cloudflare Pages. Like any web host, Cloudflare receives standard request details, such as your IP address, your browser and device type, and which page was asked for and when. It uses them to deliver and protect the site, under Cloudflare's privacy policy.

Google Fonts

Our fonts load from Google Fonts. To send them, Google's servers receive your IP address and browser details. Google's privacy policy applies.

TikTok and Instagram videos

Our video plans page shows example videos. Nothing from TikTok or Instagram loads until you tap a video. When you do, that platform's own player loads inside our page. TikTok or Instagram can then collect information, including through cookies, under its own policy: TikTok's privacy policy or Instagram's privacy policy.

Links to other sites

Our clips, examples and sources link to other sites, such as TikTok, Instagram and the websites we've built. Once you follow a link, that site's own privacy policy applies.

Texts and emails you send us

When you text or email us, we receive your phone number or email address, your name if you give it, and whatever you write or attach. We use it to reply, to quote, and to do any work you hire us for.

Texts are kept on our phone. Emails are kept in our Gmail account, which Google runs. We keep them while we need them to talk with you and to keep a record of work we do together. You can ask us to delete them, as explained below.

Payments

Payments go through Stripe, by card or US bank transfer. Stripe handles your card and bank details, and we never receive your full card number. We see what Stripe shows the businesses that use it, such as your name, email, the amount and date, and the last four digits of your card or account. Stripe's privacy policy covers what Stripe does with your details.

If you hire us

Every client signs an agreement that covers their information. In short:

• Your business information. We keep your non-public business information private and use it only for your work. That includes logins, customer lists, finances, plans and private prices.
• Access, not passwords. Where a platform allows it, you give us partner or manager access instead of your password. We keep any logins in a password manager and remove our access within 7 days after the agreement ends.
• Your customers' information. Our work may handle your customers' personal information, such as form entries, call recordings and texts. We use it only to provide the services and keep it secure. Within 30 days after the agreement ends, we delete it or give it back, unless the law requires us to keep it.
• Your own privacy notice. You're responsible for your own privacy notice to your customers, and for having the right to collect their information.
• Security problems. If we learn that someone got into your data without permission, we tell you promptly, and within 72 hours at the latest.
• Call recordings. If calls to your phone assistant are recorded or transcribed, it says so at the start of each call. Recordings and transcripts are kept for 90 days, then deleted, unless you ask us in writing to keep them longer.
• AI tools. We only use business-grade AI services. Where a service lets us, we switch off use of your information for training its models. We never type card numbers, health records or passwords into AI tools, and the phone assistant never asks callers for them.
• AI twins. If the person cloned withdraws consent, or the Clone plan ends, we delete the twin and the voice from the AI services within 14 days.

Who we share information with

We don't sell personal information.

We share it when the work needs it: with the services we use to run the business and do client work (such as Stripe for payments, Google for email, Cloudflare and other hosts for websites, the platforms we post to, and the AI services we use), with anyone who helps us with your work (we stay responsible for work done on our behalf), and when the law requires it.

Children

This site and our services are for businesses. They aren't directed at children under 13, and we don't knowingly collect information from them. If you think a child has sent us information, tell us and we'll delete it.

Seeing, correcting or deleting your information

Text or email us to ask what we hold about you, to correct it, or to delete it. If we have to keep something, such as payment and tax records or anything the law or a signed agreement requires, we'll tell you what and why.

If you called or texted one of our clients and their AI assistant answered, that business is responsible for your information and for its own privacy notice. Please ask them first. You can contact us too.

Changes to this page

If what this site collects changes, we'll update this page and the date at the top. For how we work with clients, see our terms of service and refunds and cancelling pages.