Account and data deletion
In productSelf-service permanent deletion at /account/subscription (DELETE /api/v1/user/account). Removes local application data, API keys, and Supabase auth identity.
Loading...
Enterprise trust
Enterprise Trust Center
Security reviewers, legal teams, and MSP partners use this hub for subprocessors, retention, operational controls, and our published Data Processing Agreement. Huntertech ingests public vendor status data; we do not require access to your infrastructure.
- Published DPA
- Published DPA
- Subprocessors listed
- Subprocessors listed
- MSP procurement pack
- MSP procurement pack
Trust center
Updated July 05, 2026Subprocessors
5
In-product controls
6
Retention categories
5
Published DPA
Yes
Document sections
- 01Overview
- 02Legal entity
- 03Controls
- 04Subprocessors
Standard DPA
Published for review
Procurement
At a glance
Subprocessors listed
5
Controls in product
6
Retention categories
5
Published DPA
Yes
Quick links
Standard DPA
Published processor agreement for procurement and legal review.
OpenPrivacy Policy
How we collect, use, and delete personal data across the service.
OpenAPI & alert delivery
Rate limits, webhooks, PagerDuty, Slack, and enterprise procurement notes.
OpenMSP evaluation pack
Use cases and trust materials for managed service provider rollouts.
OpenData scope
Public vendor data, not your infrastructure
Huntertech monitors publicly published vendor status. We process account and API metadata you configure, but never require access to your cloud tenants, endpoints, or internal systems.
- No agent installation inside client networks
- Vendor intelligence from public status pages and feeds
- Account deletion available from subscription settings
What we process
- Account identity and preferences
- API key metadata and usage
- Support and enterprise inquiries
What we do not require
- Cloud tenant or endpoint access
- Private internal incident data
- Network agent installation
Vendor intelligence is sourced from publicly published status pages and feeds
Jump to section
Overview
What Huntertech processes, what we do not touch, and where to find related legal documents.
What we process
- Account identity, billing metadata, and notification preferences you configure
- API key metadata and aggregated usage for quota enforcement
- Support and enterprise inquiry content you submit
What we do not require
- Access to your cloud tenants, endpoints, or customer environments
- Private incident data from your internal systems
- Agent installation inside your network for vendor monitoring
Vendor intelligence content is sourced from publicly published vendor status pages, RSS feeds, and similar public channels. See our Privacy Policy and Data Processing Agreement for role definitions and contractual terms.
Legal entity
Who Huntertech is in contractual terms, and what to tell enterprise counsel during vendor review.
Contracting party
Jonathan R. Hunter, an individual doing business as Huntertech.io
How agreements refer to us
Huntertech.io is operated by Jonathan R. Hunter, an individual doing business as Huntertech.io. In our agreements and policies, references to "Huntertech.io," "Huntertech," "we", "us", or "our", or similar terms mean the Service Provider, unless the context requires otherwise.
Incorporation status
The Service Provider is currently a sole proprietor and is not yet incorporated as a corporation or LLC. We plan to form a U.S. business entity and will offer enterprise customers a reasonable opportunity to assign or novate agreements to that entity when it is formed.
Vendor questionnaires
For vendor security questionnaires and enterprise procurement: Huntertech is operated today by a solo founder (Jonathan R. Hunter, d/b/a Huntertech.io), not a registered corporation. Subprocessors, security controls, and the published DPA reflect current operations. We disclose this status proactively and document our plan to migrate contracts when a formal entity is formed.
Countersigned DPAs use a signature block for Jonathan R. Hunter, d/b/a Huntertech.io. See Section 16 of the Data Processing Agreement.
Operational controls
Maps each trust commitment to what is available in the product, through support, or under an executed enterprise agreement.
Operational controls
10 mappedIn product
6
60% of controls
Support-assisted
1
10% of controls
Enterprise agreement
3
30% of controls
Privacy rights requests (access, correction, deletion)
Support-assistedHandled through in-app support channels per our Privacy Policy. Identity verification may be required before processing.
Subprocessor disclosure
In productCurrent subprocessors are listed on this page and referenced in our standard Data Processing Agreement.
API key lifecycle
In productCreate, rename, and revoke API keys from account settings. Keys are stored hashed; usage is tracked for quota enforcement.
Notification delivery preferences
In productConfigure in-app, email, webhooks, Slack, PagerDuty, and personal feed channels from account notification settings.
Cookie consent for analytics
In productGoogle Analytics loads only after cookie consent. See our Cookie Policy.
Legal contracting party disclosure
In productJonathan R. Hunter, an individual d/b/a Huntertech.io, is identified as the Service Provider in our Terms, DPA, and Privacy Policy. Solo-founder / not-yet-incorporated status is disclosed for procurement.
Countersigned Data Processing Agreement
Enterprise agreementOur standard DPA is published at /legal/data-processing-agreement. Countersigned copies and custom security exhibits are provided through enterprise sales.
Subprocessor change notifications
Enterprise agreementThe subprocessors list on this page is updated when providers change. Enterprise customers with an executed DPA receive notice per that agreement.
Formal breach notification to enterprise customers
Enterprise agreementHandled under the executed DPA and Privacy Policy, not through an automated in-product workflow.
| Control | Status | How it works |
|---|---|---|
| Account and data deletion | In product | Self-service permanent deletion at /account/subscription (DELETE /api/v1/user/account). Removes local application data, API keys, and Supabase auth identity. |
| Privacy rights requests (access, correction, deletion) | Support-assisted | Handled through in-app support channels per our Privacy Policy. Identity verification may be required before processing. |
| Subprocessor disclosure | In product | Current subprocessors are listed on this page and referenced in our standard Data Processing Agreement. |
| API key lifecycle | In product | Create, rename, and revoke API keys from account settings. Keys are stored hashed; usage is tracked for quota enforcement. |
| Notification delivery preferences | In product | Configure in-app, email, webhooks, Slack, PagerDuty, and personal feed channels from account notification settings. |
| Cookie consent for analytics | In product | Google Analytics loads only after cookie consent. See our Cookie Policy. |
| Legal contracting party disclosure | In product | Jonathan R. Hunter, an individual d/b/a Huntertech.io, is identified as the Service Provider in our Terms, DPA, and Privacy Policy. Solo-founder / not-yet-incorporated status is disclosed for procurement. |
| Countersigned Data Processing Agreement | Enterprise agreement | Our standard DPA is published at /legal/data-processing-agreement. Countersigned copies and custom security exhibits are provided through enterprise sales. |
| Subprocessor change notifications | Enterprise agreement | The subprocessors list on this page is updated when providers change. Enterprise customers with an executed DPA receive notice per that agreement. |
| Formal breach notification to enterprise customers | Enterprise agreement | Handled under the executed DPA and Privacy Policy, not through an automated in-product workflow. |
Subprocessors
Third parties that process personal data to operate Huntertech.io.
Subprocessor map
%20--%3e%3crect%20x='14'%20y='14'%20width='228'%20height='228'%20rx='24'%20fill='%231e1b4b'%3e%3c/rect%3e%3c!--%20Pins%20(lighter%20violet)%20--%3e%3cg%20fill='%23a78bfa'%3e%3c!--%20top%20&%20bottom%20--%3e%3cg%3e%3crect%20x='36'%20y='6'%20width='12'%20height='16'%20rx='3'%3e%3c/rect%3e%3crect%20x='60'%20y='6'%20width='12'%20height='16'%20rx='3'%3e%3c/rect%3e%3crect%20x='84'%20y='6'%20width='12'%20height='16'%20rx='3'%3e%3c/rect%3e%3crect%20x='108'%20y='6'%20width='12'%20height='16'%20rx='3'%3e%3c/rect%3e%3crect%20x='132'%20y='6'%20width='12'%20height='16'%20rx='3'%3e%3c/rect%3e%3crect%20x='156'%20y='6'%20width='12'%20height='16'%20rx='3'%3e%3c/rect%3e%3crect%20x='180'%20y='6'%20width='12'%20height='16'%20rx='3'%3e%3c/rect%3e%3crect%20x='204'%20y='6'%20width='12'%20height='16'%20rx='3'%3e%3c/rect%3e%3crect%20x='36'%20y='234'%20width='12'%20height='16'%20rx='3'%3e%3c/rect%3e%3crect%20x='60'%20y='234'%20width='12'%20height='16'%20rx='3'%3e%3c/rect%3e%3crect%20x='84'%20y='234'%20width='12'%20height='16'%20rx='3'%3e%3c/rect%3e%3crect%20x='108'%20y='234'%20width='12'%20height='16'%20rx='3'%3e%3c/rect%3e%3crect%20x='132'%20y='234'%20width='12'%20height='16'%20rx='3'%3e%3c/rect%3e%3crect%20x='156'%20y='234'%20width='12'%20height='16'%20rx='3'%3e%3c/rect%3e%3crect%20x='180'%20y='234'%20width='12'%20height='16'%20rx='3'%3e%3c/rect%3e%3crect%20x='204'%20y='234'%20width='12'%20height='16'%20rx='3'%3e%3c/rect%3e%3c/g%3e%3c!--%20sides%20--%3e%3cg%3e%3crect%20x='6'%20y='36'%20width='16'%20height='12'%20rx='3'%3e%3c/rect%3e%3crect%20x='6'%20y='60'%20width='16'%20height='12'%20rx='3'%3e%3c/rect%3e%3crect%20x='6'%20y='84'%20width='16'%20height='12'%20rx='3'%3e%3c/rect%3e%3crect%20x='6'%20y='108'%20width='16'%20height='12'%20rx='3'%3e%3c/rect%3e%3crect%20x='6'%20y='132'%20width='16'%20height='12'%20rx='3'%3e%3c/rect%3e%3crect%20x='6'%20y='156'%20width='16'%20height='12'%20rx='3'%3e%3c/rect%3e%3crect%20x='6'%20y='180'%20width='16'%20height='12'%20rx='3'%3e%3c/rect%3e%3crect%20x='6'%20y='204'%20width='16'%20height='12'%20rx='3'%3e%3c/rect%3e%3crect%20x='234'%20y='36'%20width='16'%20height='12'%20rx='3'%3e%3c/rect%3e%3crect%20x='234'%20y='60'%20width='16'%20height='12'%20rx='3'%3e%3c/rect%3e%3crect%20x='234'%20y='84'%20width='16'%20height='12'%20rx='3'%3e%3c/rect%3e%3crect%20x='234'%20y='108'%20width='16'%20height='12'%20rx='3'%3e%3c/rect%3e%3crect%20x='234'%20y='132'%20width='16'%20height='12'%20rx='3'%3e%3c/rect%3e%3crect%20x='234'%20y='156'%20width='16'%20height='12'%20rx='3'%3e%3c/rect%3e%3crect%20x='234'%20y='180'%20width='16'%20height='12'%20rx='3'%3e%3c/rect%3e%3crect%20x='234'%20y='204'%20width='16'%20height='12'%20rx='3'%3e%3c/rect%3e%3c/g%3e%3c/g%3e%3c!--%20Inner%20bezel%20--%3e%3crect%20x='26'%20y='26'%20width='204'%20height='204'%20rx='18'%20fill='%238b5cf6'%3e%3c/rect%3e%3c!--%20Gradient%20die%20--%3e%3crect%20x='46'%20y='46'%20width='164'%20height='164'%20rx='16'%20fill='url(%23chipGradient)'%20filter='url(%23innerGlow)'%3e%3c/rect%3e%3c!--%20Subtle%20grid%20--%3e%3cg%20opacity='0.18'%3e%3cpath%20d='M62%2046V210M78%2046V210M94%2046V210M110%2046V210M126%2046V210M142%2046V210M158%2046V210M174%2046V210M190%2046V210'%20stroke='%23ffffff'%20stroke-width='1'%3e%3c/path%3e%3cpath%20d='M46%2062H210M46%2078H210M46%2094H210M46%20110H210M46%20126H210M46%20142H210M46%20158H210M46%20174H210M46%20190H210'%20stroke='%23ffffff'%20stroke-width='1'%3e%3c/path%3e%3c/g%3e%3c!--%20Enlarged%20H%20--%3e%3cg%20fill='%23ffffff'%20transform='translate(66,64)'%3e%3crect%20x='0'%20y='0'%20width='36'%20height='128'%20rx='6'%3e%3c/rect%3e%3crect%20x='84'%20y='0'%20width='36'%20height='128'%20rx='6'%3e%3c/rect%3e%3crect%20x='0'%20y='48'%20width='120'%20height='32'%20rx='6'%3e%3c/rect%3e%3c/g%3e%3c/svg%3e){kind=small}
ProcessorSupabaseUnited States (configurable project region)
StripeUnited States
CloudflareGlobal edge network
MailjetUnited States / EU (provider regions)
GoogleUnited States
5 subprocessors disclosed. Full terms in our published DPA.
Supabase
- Purpose
- Authentication, account identity, and managed Postgres for application data
- Data processed
- Account email, profile metadata, auth session tokens, application records you create
- Region
- United States (configurable project region)
Stripe
- Purpose
- Subscription billing and payment processing
- Data processed
- Billing contact, payment method metadata, invoice and subscription status
- Region
- United States
Cloudflare
- Purpose
- CDN, DDoS protection, and edge delivery for the public site and API
- Data processed
- IP address, request metadata, security and performance logs
- Region
- Global edge network
Mailjet (Sinch Email)
- Purpose
- Transactional email for account and notification delivery
- Data processed
- Recipient email address, message content for opted-in notifications
- Region
- United States / EU (provider regions)
Google Analytics
- Purpose
- Aggregated website usage measurement when cookies are accepted
- Data processed
- Pseudonymous usage events (only with consent)
- Region
- United States
| Provider | Purpose | Data processed | Region |
|---|---|---|---|
| Supabase | Authentication, account identity, and managed Postgres for application data | Account email, profile metadata, auth session tokens, application records you create | United States (configurable project region) |
| Stripe | Subscription billing and payment processing | Billing contact, payment method metadata, invoice and subscription status | United States |
| Cloudflare | CDN, DDoS protection, and edge delivery for the public site and API | IP address, request metadata, security and performance logs | Global edge network |
| Mailjet (Sinch Email) | Transactional email for account and notification delivery | Recipient email address, message content for opted-in notifications | United States / EU (provider regions) |
| Google Analytics | Aggregated website usage measurement when cookies are accepted | Pseudonymous usage events (only with consent) | United States |
Full processor terms: Data Processing Agreement.
Data retention
How long categories of data are kept and when they are removed.
Account and profile data
Retained while your account is active. Removed when you delete your account from Subscription settings (self-service) or after a verified deletion request via support. Billing records may be retained where required by law.
Vendor intelligence cache
Public vendor incidents, maintenance, advisories, and updates are ingested from vendor-published sources. Historical depth follows your plan data window (7 days to unlimited, depending on tier).
API usage metrics
Aggregated hourly request counts per API key and route group for quota enforcement and support. Removed when your account is deleted; not tied to individual HTTP bodies.
In-app notifications
Notification inbox items are retained while your account is active and removed with account deletion. Email engagement signals may update deliverability preferences.
Support and sales inquiries
Enterprise demo requests and support tickets are retained to respond and for operational history unless you request deletion and no legal hold applies.
Data Processing Agreement
Our standard processor agreement for enterprise customers and MSP partners.
The DPA is a full published agreement covering processor obligations, subprocessors, security measures, breach notification, data subject assistance, and deletion at termination.
Enterprise contact
Countersigned DPAs, custom security exhibits, and vendor questionnaires.
Need a countersigned DPA, custom security exhibit, or vendor security questionnaire? Request an Enterprise demo and reference the standard DPA.
Need a countersigned DPA?
Request an Enterprise demo for countersigned agreements, custom security exhibits, or vendor questionnaires.