1. Introduction

HyperGL ("we", "our", or "us") is operated by HyperGL LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at app.hypergl.com and related services (collectively, the "Service"). By using the Service, you agree to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

Account Information: Name, email address, password, and workspace details when you register.
Client Data: Client names, industry information, website URLs, brand guidelines, and content you manage through the platform.
Content: Social media posts, articles, images, and other materials you create, upload, or manage.
Payment Information: Billing details processed securely through our payment provider (Stripe). We do not store full credit card numbers.
Communications: Messages sent through the platform's chat system, comments, and support requests.

2.2 Information Collected Automatically

Usage Data: Pages visited, features used, timestamps, and interaction patterns.
Device Information: Browser type, operating system, screen resolution, and IP address.
Cookies: Session tokens and preference cookies essential for platform functionality.

2.3 Information from Third Parties

OAuth Integrations: When you connect Google, Meta, LinkedIn, or TikTok accounts, we receive access tokens and basic profile information as authorized by you.
Analytics and Advertising Data: Search Console rankings, Google Analytics traffic data, Google Ads and Meta Ads campaign performance, and social media metrics fetched via authorized API connections.

3. How We Use Your Information

To provide, maintain, and improve the Service.
To manage your account, workspace, and client relationships.
To process transactions and send billing-related communications.
To generate AI-powered content, analytics insights, and SEO recommendations.
To fetch and display data from third-party integrations you have authorized.
To send notifications about content approvals, task updates, and system alerts.
To detect, prevent, and address technical issues and security threats.
To comply with legal obligations.

4. AI-Powered Features

HyperGL uses Google Gemini AI to provide content generation, SEO analysis, and image creation features. When you use these features, relevant content (such as prompts, captions, and website data) is sent to Google's AI services for processing. We do not use your content to train AI models. AI-generated outputs are stored within your workspace and subject to the same data protection measures as your other data.

5. Google User Data

This section describes our use of data obtained through Google APIs, and applies in addition to the rest of this policy.

5.1 What We Access, and Why

When you connect a Google account, HyperGL requests only the scopes required by the features you use. Each is requested at the point of use, and connecting is always initiated by you:

Google Ads (auth/adwords): to read the campaign, ad group, keyword, search term, ad and conversion data of the advertising accounts you choose, so we can display reporting, budget pacing and alerts; and — only where you explicitly approve each change in the product — to apply management actions such as pausing a campaign, adjusting a budget, adding a negative keyword or publishing an ad.
Google Search Console and Google Analytics: to read search performance and site traffic data for the properties you select, for SEO reporting.
Google Business Profile: to publish and manage the posts and profile information of locations you connect.
Basic profile (openid, email): to show which Google identity a connection belongs to, so you can tell several connected accounts apart.

5.2 Limited Use

HyperGL's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

We use Google user data only to provide and improve the features you have connected it to.
We do not transfer Google user data to third parties except as necessary to provide those features, for security purposes, or to comply with applicable law.
We do not use Google user data for advertising, and we do not sell it.
We do not allow humans to read Google user data unless we have your explicit consent for specific data, it is necessary for security purposes or to comply with applicable law, or the data has been aggregated and anonymized.
We do not use Google user data to train generalized artificial-intelligence or machine-learning models.

5.3 Separation Between Accounts

Data from a connected Google account is stored against the workspace and client project that authorized it, and is never combined with, or made visible to, another customer's workspace. We do not use one advertiser's data to benchmark, model or inform another's.

5.4 Storage, Retention and Revocation

Storage: OAuth access and refresh tokens are encrypted at rest (AES-256) and transmitted only over TLS. Performance data we retrieve is stored in our database to power reporting and historical comparisons.
Retention: disconnecting an integration deletes its stored tokens immediately and ends all further access. Performance data already retrieved stays in your workspace so that historical reports remain intact; it is deleted when you delete the project or client it belongs to, or when you delete your account (see section 8). You can request earlier deletion at any time using the contact details in section 14.
Revocation:you can disconnect a Google account at any time from the project's settings in HyperGL. You can also revoke our access directly from your Google account at myaccount.google.com/permissions. Revoking from either place stops all further access.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

Service Providers: Third-party services that help us operate the platform (hosting, payment processing, email delivery).
Authorized Integrations: Third-party platforms (Google, Meta, LinkedIn, TikTok) only as explicitly authorized by you.
Legal Requirements: When required by law, regulation, or legal process.
Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice.

7. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS/SSL), encrypted storage of OAuth tokens and sensitive credentials, rate limiting, CORS protection, and regular security audits. However, no method of transmission over the Internet is 100% secure.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

Access and receive a copy of your personal data.
Correct inaccurate or incomplete data.
Request deletion of your personal data.
Object to or restrict processing of your data.
Data portability — receive your data in a structured format.
Withdraw consent at any time for optional processing activities.

To exercise these rights, contact us at [email protected].

10. Cookies

We use essential cookies for authentication and session management. We do not use advertising or third-party tracking cookies. You can control cookie settings through your browser preferences.

11. International Data Transfers

Your data may be processed on servers located outside your country of residence. We ensure appropriate safeguards are in place for any international data transfers in compliance with applicable data protection laws.

12. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: [email protected]
Company: HyperGL LLC
Website: hypergl.com