Privacy Policy

We collect the following categories of information:

• Account information: name, email address, profile photo, and authentication identifiers when you sign up or sign in (including via Google).
• Content you create: prompts, scripts, generated videos, audio, and other media you produce using the Service.
• Billing information: processed by our payment provider (Stripe). We do not store full card details on our servers.
• Usage data: pages visited, features used, generation history, credit consumption, device, browser, and IP address.
• Cookies and similar technologies: for authentication, preferences, and analytics.

• Provide, operate, and maintain the Service.
• Process AI generation requests through third-party model providers.
• Manage accounts, subscriptions, billing, and credit balances.
• Improve, personalize, and expand features.
• Send transactional emails (receipts, security alerts, important updates).
• Detect, prevent, and address fraud, abuse, or technical issues.
• Comply with legal obligations.

We do not sell your personal information. We share data only with:

• Service providers who help us operate the platform (hosting, database, AI model providers such as fal.ai and ElevenLabs, email delivery, analytics).
• Payment processors (Stripe) to handle subscriptions and transactions.
• Legal authorities when required by law, subpoena, or to protect rights, safety, and property.
• Successors in the event of a merger, acquisition, or asset sale, subject to this Policy.

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Service is used. You can disable cookies in your browser settings, but some features may not function properly without them.

We retain your account information for as long as your account is active. Generated content is stored while your account exists or until you delete it. Billing records are retained as required by tax and accounting laws (typically up to 7 years). When you delete your account, we remove or anonymize personal data within 30 days, except where retention is required by law.

Depending on your jurisdiction (including the EU/EEA, UK, and California), you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and personal data.
• Export your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent at any time.
• Lodge a complaint with a data protection authority.

To exercise these rights, contact us using the details below.

We use industry-standard safeguards including TLS encryption in transit, encrypted storage at rest, role-based access controls, row-level security on our database, and regular security reviews. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

The Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us personal data, contact us and we will delete it promptly. Users between 13 and the age of majority in their jurisdiction must have parent or guardian consent to use the Service.

We may update this Privacy Policy from time to time. The "Effective date" at the top reflects the latest revision. Material changes will be communicated through the Service or by email. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

For privacy questions or to exercise your rights, contact us at privacy@hyperpostai.com.