Privacy Policy
Last updated: August 30, 2026
Effective for all accounts created on or after May 7, 2026.
1. Who We Are
Hypear AI is operated by Alun Creative LLC, a Florida limited liability company d/b/a Hypear ("Hypear AI," "Hypear," "we," "us," or "our"). This Privacy Policy explains how we collect, use, store, and share information about you when you use hypear.ai (the "Platform"). If you have questions, contact us at support@hypear.ai.
2. Information We Collect
Information you provide directly
- Account data: email address, password (stored as a bcrypt hash - never in plaintext), name, and username.
- Creator profile: biography, location, country, social media handles (Instagram, Pinterest, Higgsfield, LinkedIn, X, TikTok, website), specializations, industries, collaboration preferences, and availability status.
- Portfolio content: images, videos, campaign metadata, and any optional captions or descriptions you upload.
- Brand profile: company name, website URL, and brief descriptions of your creative needs.
- Messages and applications: free-text pitch messages and direct messages exchanged between brands and creators on the Platform.
- AI agent conversations: chat messages you send to and receive from the Hypear AI Agent.
Information collected automatically
- Usage data: pages visited, features used, clicks, and session timing, collected by PostHog (see Section 4).
- Device and network data: IP address (used for rate-limiting and fraud prevention), browser type, and operating system.
- Authentication cookies: session tokens used to keep you signed in. We do not use advertising cookies.
Information from third parties
- Google OAuth: if you sign in with Google we receive your name, email address, and profile picture from Google. We do not receive your Google password.
- Kajabi community data: for the purpose of verifying that creator applicants are members of the Alun Creative AI Creators Hub, we maintain a read-only mirror of Kajabi community member names and email addresses in our database. This data is sourced from the Alun Creative Kajabi site and is refreshed periodically by an internal sync process.
Payment, identity, and transaction data
Hypear no longer handles payments. For a project funded through the Platform before August 27, 2026, our licensed third-party payment and escrow processor collected information needed to process those payments, verify identity, and meet legal obligations. For creators receiving payouts, this includes identity-verification ("Know Your Customer") information such as legal name, date of birth, address, government-issued identification, and tax-onboarding information (for example, a W-9 or W-8 and a taxpayer identification number) and payout/bank account details. For brands funding projects, this includes billing and payment-instrument information. This information is collected and held by the payment processor; Hypear receives only the limited transaction and status information needed to administer the marketplace.
Transaction and escrow data: project identifiers, Project Price and Platform Fee amounts, escrow funding and release events, acceptance/approval timestamps, refunds, and dispute records.
3. How We Use Your Information
- Operate, maintain, and improve the Platform and its features.
- Display creator profiles in the directory and distribute job posts to creators, including by email.
- For creators, confirm membership in the Alun Creative AI Creators Hub at sign-up. Hypear does not otherwise verify the identity, credentials, or background of any user.
- Send transactional and service emails (account verification, password reset, new brief notifications, application updates, and direct message alerts).
- Power the AI Agent features described in Section 5, including generating and storing personalized "memories" from your conversations.
- For a project funded through the Platform before August 27, 2026, process payments, hold and release escrow funds, and pay creators. Hypear no longer funds new projects or holds funds for them.
- For a project funded before August 27, 2026, our payment processor verified identity, prevented fraud and money laundering, and met "Know Your Customer" obligations for the payments it handled.
- Prepare and file tax information (for example, IRS Form 1099) and otherwise comply with tax and financial-record laws.
- Detect and prevent fraud, abuse, and security incidents, and enforce our Terms of Service.
- Comply with legal obligations and respond to lawful requests from public authorities.
- Produce anonymized and aggregated analytics about Platform usage. These datasets do not identify individuals.
4. Third-Party Processors
We share data with the following third-party service providers solely as required to operate the Platform. Each is bound by contractual data-processing obligations.
Payment & Escrow Processor (legacy projects only)
Hypear no longer charges brands, holds funds, or pays out creators. For a project funded through the Platform before August 27, 2026, a licensed third-party payment processor charged the brand, held the project funds in escrow, performed identity and tax verification of the creator, and paid the creator out. The processor collected the payment, identity-verification (KYC), and tax-onboarding information described in Section 2 directly from you, shares limited transaction and status data with us while those projects close out, and handles your information under its own privacy policy, which was presented when you provided payment or payout details.
OpenAI (AI Agent)
When you use the Hypear AI Agent, your chat messages (and any images you attach) are transmitted to OpenAI, LLC for processing via their API. OpenAI uses this data to generate responses and, under our API agreement, does not use API inputs to train its public models. Chat history and extracted memories (see Section 5) are stored in our database, not by OpenAI.
Resend (Transactional Email)
We use Resend, Inc. to deliver transactional emails. Resend receives your email address, your name (where included in the email body), and email metadata (subject, timestamp, delivery status). Resend does not use your data for marketing or profiling.
Cloudflare R2 (File Storage)
Portfolio images, videos, and avatar photos you upload are stored in Cloudflare, Inc.'s R2 object storage. Files are served via a Cloudflare CDN. Cloudflare receives the file content and associated metadata (file size, content type, upload timestamp). Public portfolio items are accessible at a predictable URL; private items require a time-limited signed URL generated server-side.
PostHog (Product Analytics)
We use PostHog, Inc. for product analytics. PostHog collects pseudonymous event data - which features you use, which pages you visit, and timing metadata. We link events to an internal user ID (not your email) once you are signed in. We do not send raw email addresses or passwords to PostHog. IP addresses are used for geolocation and then discarded; PostHog is configured to respect the "Do Not Track" browser signal.
Upstash (Rate Limiting)
We use Upstash, Inc.'s Redis service to enforce rate limits on authentication and sensitive actions. Upstash stores a hashed representation of your IP address and a sliding-window counter. No personally identifiable information beyond IP address is sent to Upstash; counters expire automatically within minutes.
Ably (Realtime Messaging)
We use Ably Realtime Ltd. to deliver messages and notifications to your browser as they happen. Message content passes through Ably's infrastructure in transit; your browser connects with a short-lived, scoped token. Messages are stored in our database, not by Ably.
Slack (Feedback Reports)
When you send feedback through the in-app feedback form, the text you write, along with your name and email so we can follow up, is forwarded to our internal Slack workspace (Slack Technologies, LLC), where our team reads and triages it. Do not include sensitive personal information in feedback reports.
Railway (Cloud Hosting)
The Platform is hosted on Railway Corp. servers in the us-west-1 region. All application data, including the PostgreSQL database, is stored on Railway infrastructure. Railway provides encryption in transit (TLS) and at rest.
5. AI Agent Memories
When you use the Hypear AI Agent, we run an automated process that reads your conversation and extracts structured facts - for example, the types of projects you specialize in, your preferred collaboration style, or gaps in your profile. These extracted facts ("memories") are stored in our database and injected into the system context of future agent conversations so the Agent can provide more relevant assistance.
This constitutes automated processing of personal data for the purpose of personalisation. The processing happens server-side; we do not share the extracted memories with any third party except as described in the OpenAI section above (the memory-extraction call is made to the OpenAI API). Memories are linked to your user account and are deleted when your account is deleted.
You may request deletion of your AI memories at any time without deleting your account by emailing support@hypear.ai. Deleting memories does not affect your conversations or your profile data.
Before your first Agent session, the Platform will present a clear consent screen explaining this processing and giving you the option to proceed or decline. You may withdraw consent at any time by contacting support.
6. Portfolio Content and Public Profiles
Portfolio items you mark as Public are displayed on your creator profile page, which is indexed by search engines and accessible to anyone - including visitors who are not Hypear AI users. Items you mark as Private are stored but not shown on your public profile or in brand-facing search results. You can change the visibility of any item at any time from your portfolio management page.
7. Kajabi Community Data
We maintain a mirror of Alun Creative's AI Creators Hub member list (name and email) sourced from Kajabi. This data is used solely to verify that creator applicants are Hub members before allowing account creation. We do not display this data to third parties or use it for marketing. Hub member email addresses are compared against applicant-provided emails using case-insensitive matching; no other analysis is performed.
If you are a Kajabi community member and wish to have your data removed from this mirror, contact us at support@hypear.ai.
8. Your Rights and Choices
Depending on your location, you may have the right to:
- Access: request a copy of the personal data we hold about you.
- Correction: request that inaccurate data be corrected.
- Deletion: request that your personal data be deleted, subject to legal retention requirements. Some data cannot be deleted on request - in particular transaction, escrow, payment, identity-verification, and tax records, which we and our payment processor are legally required to retain.
- Portability: request your data in a structured, machine-readable format.
- Withdrawal of consent: where we process your data on the basis of consent (e.g., AI Agent memories), you may withdraw that consent at any time.
- Opt-out of analytics: you can opt out of PostHog analytics by enabling the "Do Not Track" setting in your browser.
To exercise any of these rights, email support@hypear.ai. We will respond within 30 days.
9. Data Retention
We retain your personal data for as long as your account is active. When you delete your account we remove your personal data from our primary database within 30 days. Encrypted database backups are retained for up to 90 days before expiring. Some data may be retained longer where required by law or for legitimate fraud-prevention purposes. Aggregated and anonymized analytics data is not subject to deletion requests because it cannot reasonably be linked back to an individual. Transaction, escrow, payment, identity-verification, and tax records are retained for as long as required by applicable financial-record and tax laws (generally up to seven years), even after account deletion.
10. Data Security
We implement industry-standard security measures including TLS encryption in transit, encryption at rest for databases and file storage, bcrypt hashing for passwords, SHA-256 hashing for sensitive tokens (password reset, email verification), and authentication guards on all data-mutation endpoints. Access to production systems is restricted to Hypear AI team members on a need-to-know basis.
No security system is perfectly secure. If you believe your account or data has been compromised, contact us immediately at support@hypear.ai.
11. Children
The Platform is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact us and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Platform before the change takes effect. The "Last updated" date at the top reflects the most recent revision.
13. Contact
Questions or requests about this Privacy Policy? Email us at support@hypear.ai. Alun Creative LLC, Parkland, Florida, USA.