Skip to main content

Privacy Policy

Last updated: May 2026

Effective for all accounts created on or after May 7, 2026.

1. Who We Are

Hypear AI is operated by Alun Creative LLC ("Hypear AI," "we," "us," or "our"). This Privacy Policy explains how we collect, use, store, and share information about you when you use hypear.ai (the "Platform"). If you have questions, contact us at support@hypear.ai.

2. Information We Collect

Information you provide directly

  • Account data: email address, password (stored as a bcrypt hash — never in plaintext), name, and username.
  • Creator profile: biography, location, country, social media handles (Instagram, Pinterest, Higgsfield, LinkedIn, X, TikTok, website), specializations, industries, AI tools used, collaboration preferences, and availability status.
  • Portfolio content: images, videos, campaign metadata, and any optional captions or descriptions you upload.
  • Brand profile: company name, website URL, and brief descriptions of your creative needs.
  • Messages and applications: free-text pitch messages and direct messages exchanged between brands and creators on the Platform.
  • AI agent conversations: chat messages you send to and receive from the Hypear AI Agent.

Information collected automatically

  • Usage data: pages visited, features used, clicks, and session timing, collected by PostHog (see Section 4).
  • Device and network data: IP address (used for rate-limiting and fraud prevention), browser type, and operating system.
  • Authentication cookies: session tokens used to keep you signed in. We do not use advertising cookies.

Information from third parties

  • Google OAuth: if you sign in with Google we receive your name, email address, and profile picture from Google. We do not receive your Google password.
  • Kajabi community data: for the purpose of verifying that creator applicants are members of the Alun Creative AI Creators Hub, we maintain a read-only mirror of Kajabi community member names and email addresses in our database. This data is sourced from the Alun Creative Kajabi site and is refreshed periodically by an internal sync process.

3. How We Use Your Information

  • Operate, maintain, and improve the Platform and its features.
  • Match creators with brand opportunities and display creator profiles to potential brand partners.
  • Verify your identity and, for creators, confirm membership in the Alun Creative AI Creators Hub.
  • Send transactional and service emails (account verification, password reset, new brief notifications, application updates, and direct message alerts).
  • Power the AI Agent features described in Section 5, including generating and storing personalized "memories" from your conversations.
  • Detect and prevent fraud, abuse, and security incidents, and enforce our Terms of Service.
  • Comply with legal obligations and respond to lawful requests from public authorities.
  • Produce anonymized and aggregated analytics about Platform usage. These datasets do not identify individuals.

4. Third-Party Processors

We share data with the following third-party service providers solely as required to operate the Platform. Each is bound by contractual data-processing obligations.

OpenAI (AI Agent)

When you use the Hypear AI Agent, your chat messages (and any images you attach) are transmitted to OpenAI, LLC for processing via their API. OpenAI uses this data to generate responses and, under our API agreement, does not use API inputs to train its public models. Chat history and extracted memories (see Section 5) are stored in our database, not by OpenAI.

OpenAI Privacy Policy

Resend (Transactional Email)

We use Resend, Inc. to deliver transactional emails. Resend receives your email address, your name (where included in the email body), and email metadata (subject, timestamp, delivery status). Resend does not use your data for marketing or profiling.

Resend Privacy Policy

Cloudflare R2 (File Storage)

Portfolio images, videos, and avatar photos you upload are stored in Cloudflare, Inc.'s R2 object storage. Files are served via a Cloudflare CDN. Cloudflare receives the file content and associated metadata (file size, content type, upload timestamp). Public portfolio items are accessible at a predictable URL; private items require a time-limited signed URL generated server-side.

Cloudflare Privacy Policy

PostHog (Product Analytics)

We use PostHog, Inc. for product analytics. PostHog collects pseudonymous event data — which features you use, which pages you visit, and timing metadata. We link events to an internal user ID (not your email) once you are signed in. We do not send raw email addresses or passwords to PostHog. IP addresses are used for geolocation and then discarded; PostHog is configured to respect the "Do Not Track" browser signal.

PostHog Privacy Policy

Upstash (Rate Limiting)

We use Upstash, Inc.'s Redis service to enforce rate limits on authentication and sensitive actions. Upstash stores a hashed representation of your IP address and a sliding-window counter. No personally identifiable information beyond IP address is sent to Upstash; counters expire automatically within minutes.

Railway (Cloud Hosting)

The Platform is hosted on Railway Corp. servers in the us-west-1 region. All application data, including the PostgreSQL database, is stored on Railway infrastructure. Railway provides encryption in transit (TLS) and at rest.

5. AI Agent Memories

When you use the Hypear AI Agent, we run an automated process that reads your conversation and extracts structured facts — for example, the types of projects you specialize in, your preferred collaboration style, or gaps in your profile. These extracted facts ("memories") are stored in our database and injected into the system context of future agent conversations so the Agent can provide more relevant assistance.

This constitutes automated processing of personal data for the purpose of personalisation. The processing happens server-side; we do not share the extracted memories with any third party except as described in the OpenAI section above (the memory-extraction call is made to the OpenAI API). Memories are linked to your user account and are deleted when your account is deleted.

You may request deletion of your AI memories at any time without deleting your account by emailing support@hypear.ai. Deleting memories does not affect your conversations or your profile data.

Before your first Agent session, the Platform will present a clear consent screen explaining this processing and giving you the option to proceed or decline. You may withdraw consent at any time by contacting support.

6. Portfolio Content and Public Profiles

Portfolio items you mark as Public are displayed on your creator profile page, which is indexed by search engines and accessible to anyone — including visitors who are not Hypear AI users. Items you mark as Private are stored but not shown on your public profile or in brand-facing search results. You can change the visibility of any item at any time from your portfolio management page.

7. Kajabi Community Data

We maintain a mirror of Alun Creative's AI Creators Hub member list (name and email) sourced from Kajabi. This data is used solely to verify that creator applicants are Hub members before allowing account creation. We do not display this data to third parties or use it for marketing. Hub member email addresses are compared against applicant-provided emails using case-insensitive matching; no other analysis is performed.

If you are a Kajabi community member and wish to have your data removed from this mirror, contact us at support@hypear.ai.

8. Your Rights and Choices

Depending on your location, you may have the right to:

  • Access: request a copy of the personal data we hold about you.
  • Correction: request that inaccurate data be corrected.
  • Deletion: request that your personal data be deleted, subject to legal retention requirements.
  • Portability: request your data in a structured, machine-readable format.
  • Withdrawal of consent: where we process your data on the basis of consent (e.g., AI Agent memories), you may withdraw that consent at any time.
  • Opt-out of analytics: you can opt out of PostHog analytics by enabling the "Do Not Track" setting in your browser.

To exercise any of these rights, email support@hypear.ai. We will respond within 30 days.

9. Data Retention

We retain your personal data for as long as your account is active. When you delete your account we remove your personal data from our primary database within 30 days. Encrypted database backups are retained for up to 90 days before expiring. Some data may be retained longer where required by law or for legitimate fraud-prevention purposes. Aggregated and anonymized analytics data is not subject to deletion requests because it cannot reasonably be linked back to an individual.

10. Data Security

We implement industry-standard security measures including TLS encryption in transit, encryption at rest for databases and file storage, bcrypt hashing for passwords, SHA-256 hashing for sensitive tokens (password reset, email verification), and authentication guards on all data-mutation endpoints. Access to production systems is restricted to Hypear AI team members on a need-to-know basis.

No security system is perfectly secure. If you believe your account or data has been compromised, contact us immediately at support@hypear.ai.

11. Children

The Platform is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Platform before the change takes effect. The "Last updated" date at the top reflects the most recent revision.

13. Contact

Questions or requests about this Privacy Policy? Email us at support@hypear.ai. Alun Creative LLC, Parkland, Florida, USA.