Privacy Policy

1. Who we are

This Privacy Policy explains how HyporaAI (“we”, “us”) collects, uses and protects personal information when you use hyporaai.com, its dashboard and its alerts (the “Service”). It should be read with our Terms and Conditions. For any privacy question or request, email contact@hyporaai.com.

2. Information we collect

Information you give us:

• Account details: your email address, and your name and profile picture if you sign in with Google.
• Your setup: the streamers on your watchlist, sensitivity settings, Discord webhook addresses and browser notification subscriptions.
• Videos and links: links you paste, videos you upload, and the clips, transcripts and results made from them.
• Feedback: what you do with clips (for example downloaded or posted) and any post links or view counts you choose to add.
• Support: messages you send in the support chat or by email, and problem reports, including the page you were on.

Information collected automatically:

• Billing information from Stripe: your plan, subscription status and payment history. Stripe handles your card; we never see or store your full card number. We store your card's fingerprint (an anonymous identifier) and funding type to enforce one free trial per card.
• Usage and cost records: which features you use, alerts sent to you, and what processing your account used (to enforce plan limits and keep costs sustainable).
• Technical information: IP address, browser and device information and server logs, collected by us and our hosting providers for security and troubleshooting.
• Cookies and local storage: cookies that keep you signed in (strictly necessary) and browser storage for small conveniences, such as remembering a link you pasted before signing up. We don't use advertising cookies.

Public information we process: to detect moments, the Service reads public live-stream information and public chat messages on Twitch, Kick and YouTube, including public usernames. Short samples of public chat can appear in alerts shown to users watching that streamer.

3. How we use your information

• To provide the Service: monitor streams, send alerts, make and deliver clips, run VOD scans and long-form clipping.
• To manage your account, subscriptions, trials and payments, and to enforce plan limits.
• To prevent fraud and abuse, such as repeat free trials, and to keep the Service secure.
• To provide support, answer questions and fix problems you report.
• To improve the Service, for example by tuning how moments are detected using clip feedback.
• To send service emails (sign-in links, billing notices, important changes). We don't send marketing emails without your consent, and you can opt out of any we send.
• To meet legal obligations, such as tax records, and to respond to lawful requests.

If you're in the European Economic Area or the United Kingdom, we rely on these legal bases: performing our contract with you; our legitimate interests in running, securing and improving the Service and preventing fraud; your consent (for example browser notifications, which you can switch off any time); and compliance with legal obligations.

4. AI processing

Some features send content to AI providers acting on our behalf: audio is sent to OpenAI for transcription, and transcripts, a few video frames and support chat messages are sent to Anthropic. They process it to provide those features to us and, under their business terms, don't use it to train their models.

The support chat is an AI assistant. Don't share passwords, card numbers or other sensitive information in it.

5. Who we share information with

We don't sell your personal information, and we don't share it for advertising. We share it only with:

• Supabase: database and sign-in (United States)
• Vercel: website hosting
• Railway: the servers that watch streams and make clips
• Cloudflare R2: private storage for clips and uploads
• Stripe: payments, subscriptions and fraud checks
• Resend: emails such as sign-in links and support replies
• Google: Google sign-in (if you use it) and the YouTube Data API
• OpenAI: speech-to-text transcription for captions and long-form clipping
• Anthropic (Claude): choosing long-form clips from transcripts, checking video frames for the facecam layout, and the support chat
• DataImpulse: a network proxy used for some YouTube downloads (it sees which videos are downloaded, not who you are)
• Discord and browser push services: delivering alerts to the Discord webhooks and browsers you connect

These providers process information on our instructions and under agreements that protect it. We may also share information if the law requires it, to protect people's safety or our rights, or as part of a sale or reorganisation of our business (in which case this policy continues to apply to it).

6. International transfers

We and our providers store and process information in the United States and other countries, which may have different privacy laws from where you live. When we transfer personal information internationally, we rely on our providers' contractual safeguards (such as standard contractual clauses) to protect it.

7. How long we keep information

• Clips: deleted automatically about 48 hours after they're made.
• Uploaded videos: deleted once their clips are made, or after 24 hours if the upload is abandoned.
• Account information, settings, scan results and transcripts: kept while your account exists, and deleted within 30 days after you ask us to delete your account.
• Billing and tax records: kept as long as the law requires (Stripe also keeps its own records).
• Support messages and problem reports: kept while needed to help you and improve the Service, and deleted with your account.
• Backups: copies may remain in secure backups for a limited time until they're replaced.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict some processing, and to withdraw consent. Email contact@hyporaai.com from the address on your account and we'll respond within 30 days. We may need to confirm your identity first.

You can also update your watchlist and alert settings in the dashboard, switch off browser notifications in your browser, and cancel your plan from the Billing page.

Australia: we handle personal information in line with the Australian Privacy Principles. If you're not satisfied with our response to a complaint, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

EEA and UK: you can also complain to your local data protection authority.

California: we don't sell or share personal information as those terms are defined under California law, and we won't discriminate against you for exercising your privacy rights.

9. Security

We protect information with encryption in transit, private storage, short-lived download links, access controls and limited staff access. No system is perfectly secure, so we can't guarantee absolute security; if a breach affects you, we'll tell you as the law requires.

10. Children

The Service is for people aged 18 and over. We don't knowingly collect personal information from children. If you think a child has given us information, contact contact@hyporaai.com and we'll delete it.

11. Changes to this policy

We may update this Privacy Policy. If a change materially affects how we use your information, we'll tell you by email or in the dashboard before it takes effect. The date at the top shows when it was last updated.

12. Contact us

For privacy questions, requests or complaints, email contact@hyporaai.com.