Privacy

What does HitLight store?

HitLight stores account identity, beta-access state, show configuration, collaboration state, and the diagnostics needed to operate the public beta. Show data is visible only to its collaborators.

AI requests are processed by OpenAI. Raw per-turn operational diagnostics expire after 30 days. Submitted support and chat-quality reports expire after 90 days; they can contain the instruction and show context the reporter chooses to send. Uploaded fixture manuals remain private to the show and are available only to the profile-generation service and authorised reviewers.

What about website analytics?

Website analytics and error reporting are optional and disabled until you consent. Website events are anonymous when collected. If you later sign in to the HitLight product in the same browser, PostHog may associate those earlier events with your internal Firebase user ID. HitLight does not send your name or email to PostHog.

Optional product analytics use that internal ID across the hosted app and desktop app. Error reports are stripped of raw messages, URL queries, invite codes, and page content. There is no click or form autocapture and no session recording. Analytics never include show names, DMX values, fixture manuals, or generated fixture definitions.

When a product user opts into product metrics, assistant traces contain performance, token, outcome, and tool-name metadata only. Prompts, replies, shared chat history, system prompts, tool arguments and results, show state, DMX data, fixture-source content, and Auto Show vibe or palette text are excluded. More detail is on AI and your data.

How do I delete my data?

You can delete shows or your account from Settings. Account deletion removes owned shows, private profiles, membership, the account's owned invite, and PostHog data associated with the internal user ID; people previously admitted by that invite keep their own access.

Questions: privacy@hitlight.app.

Last verified 1 August 2026.