Privacy Policy
Last updated: July 19, 2026
Hitt Hosting CRM ("we", "our", "us") is operated by Extant 2000 LLC, the company behind the Hitt Hosting suite. We respect your privacy. This policy describes how we collect, use, protect, and where we host your personal information and the contact data you store in the CRM.
Information We Collect
We collect information you provide directly: name, email, company, and any data you enter into the CRM. We also collect usage analytics to improve the product.
How We Use Your Data
Your data powers the CRM features you use. We do not sell personal data. We use it to provide, maintain, and improve the service.
Where your data is hosted
All of your data is stored and processed in the United States. Our application, web, and mail servers run on infrastructure we operate in Warrenton, Virginia (OVH US). The primary application database runs on managed PostgreSQL (Supabase) in a US region (AWS US West, Oregon). No data is stored outside the United States.
How we secure it
We take a defense-in-depth approach to protecting your data:
- TLS/HTTPS encryption for data in transit
- The application database is encrypted at rest
- PostgreSQL row-level security isolates each organization's data
- Audit logging of access to and changes of sensitive data
- A web application firewall (ModSecurity) with intrusion detection (CrowdSec)
- Regular vulnerability scanning
- Restricted administrative access
- Card payments are handled by Stripe (PCI-DSS Level 1); we never store full card numbers
- Regular backups and production error monitoring
To be clear about what we do not have: we do not currently hold SOC 2, ISO 27001, HIPAA, ITAR, FedRAMP, or PCI certification. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Service providers
We rely on a small set of trusted providers to run the service. Each processes only the data needed for its function:
- Stripe — payment processing (US)
- Supabase — application database and authentication (US)
- OVH US — server hosting (Virginia)
- Cloudflare — DNS
- Sentry — production error monitoring
- Anthropic — AI-assisted features
Email is self-hosted on our own infrastructure; we do not use a third-party email provider. We do not sell personal data.
Your US state privacy rights
If you live in California, Virginia, Colorado, Connecticut, Texas, Oregon, or another US state with a consumer-privacy law, you have the right to know what personal data we hold about you, to request that we correct or delete it, and to receive a copy. We do not sell your personal data, and we do not share it for cross-context behavioral advertising. Exercising these rights will not result in worse treatment. To make a request, email privacy@hitthosting.com — we may need to verify your identity first.
If we decline your request, you can appeal: reply to our decision within 60 days and say you are appealing, and we will re-review it and respond within 60 days. If you live in Virginia and we deny your appeal, you may contact the Virginia Attorney General to submit a complaint.
Contact
Questions about this policy or your data? Email us at privacy@hitthosting.com.
By mail: Extant 2000 LLC, 7051 Brookfield Plz, PO Box 41, Springfield, VA 22150, USA