URLs you choose
We fetch targets you configure — not open-web crawling.
HuluFlow · Security & compliance
How accounts, keys, run logs, and page extracts are handled — boundaries written so you can evaluate fit.
Principles
We fetch targets you configure — not open-web crawling.
No bypass of login, CAPTCHA, or access controls.
Bearer tokens shown once, stored hashed, revocable anytime.
Snapshots and datasets exist to run the product — we don’t sell page content.
Data
We store your email, workflow graphs, selected fields, run logs, and dataset rows so the product can run. Snapshots support collect and monitor; we don’t resell page content.
Email, plan and credits, session-related data.
Canvas graphs, node config, selected fields, schedules.
Run logs, node output summaries, stored rows.
URLs and requirements if you use the managed brief form.
Access
Bearer tokens are shown once at create time and stored hashed. Revoke a key in the console if it leaks.
Full plaintext isn’t shown again — store it safely yourself.
The server doesn’t keep reversible plaintext keys long-term.
Rotate or kill a key from the console if you suspect a leak.
Fetch scope
HuluFlow fetches the URLs you configure. Use it only on pages you are allowed to collect. We do not bypass login or CAPTCHA.
List, detail, or pagination patterns come from your graph.
Confirm site terms and local law allow your collection.
Login walls, CAPTCHAs, and paywalls are out of scope.
Runtime
Console and API traffic use HTTPS by default.
Workflows, datasets, and keys are scoped to your account.
Kept to help debug runs — not sold externally.
Account or data deletion via privacy email / contact form.
Enterprise
Need a data processing addendum or a custom region discussion? Write via the contact form or hello@huluflow.com.
We can discuss a data processing addendum for procurement.
Tell us your region or deployment constraints by email.
Vendor due-diligence forms can be answered via contact channels.
FAQ
No. The product targets public pages you’re allowed to collect; we don’t bypass login or CAPTCHA.
No. Extracts exist to provide collect and monitor to you — we don’t resell page content.
Revoke it in the console and create a new one. Plaintext can’t be recovered after create.
Email privacy@huluflow.com or use the contact form, and read the Privacy policy.
Related
Questionnaires, DPA, or region topics — contact us. Day-to-day use can start on free credits.