Privacy Policy

1. Who we are

Hypemango (“we”, “us”) provides AI-assisted social marketing tools. This policy describes personal and account data we process when you use the product. Operator entity and jurisdiction details will be finalized with counsel (Stripe merchant entity is registered in Canada).

2. Data we collect

• Account data — name, email, password hash, profile preferences (e.g. time zone, language), and account status.
• Billing data — plan and subscription status; Stripe customer and subscription identifiers. Card numbers are collected and stored by Stripe, not on Hypemango servers.
• Project content — project descriptions, documents you upload, brand settings, signals, drafts, and published post metadata.
• Social connection tokens — OAuth tokens for connected channels (Facebook, X, LinkedIn), stored encrypted at rest and used only to publish and collect metrics you enable.
• Usage and technical data — login sessions, IP address, approximate location (country, region, city), and user-agent for security — shown to you under Profile so you can spot and revoke unfamiliar sign-ins — and operational logs needed to run workers and support. Cookies and browser storage are listed in our Cookie Policy.

3. How we use data

• Provide authentication, projects, review, and publishing.
• Process payments and trials via Stripe.
• Run AI analysis and generation (signals, copy, images) using content you supply and connected metrics.
• Send transactional email (e.g. verification, trial reminders).
• Secure the service and enforce plan limits.

4. AI processing

Content you provide (and, where configured, public signal sources such as YouTube metadata/transcripts obtained via our providers) may be sent to third-party AI and transcription services to discover signals and generate drafts. We do not sell your content. Provider subprocessors and retention will be listed when production vendors are contracted.

5. Sharing

We share data with processors that help us operate the product (hosting, database, email, Stripe, social APIs, AI/transcription), under contractual safeguards. We may disclose information if required by law. We do not sell personal information.

6. Retention & security

We retain account and project data while your account is active and for a limited period afterward as needed for billing, backups, and legal obligations. Passwords are hashed; refresh tokens are hashed; social tokens are encrypted at rest. No method of transmission or storage is perfectly secure.

7. Your choices

You may update profile settings, disconnect social accounts, cancel a subscription, or request account deletion by contacting us. Marketing email preferences (when applicable) can be managed from your profile or unsubscribe links.

8. Contact

Privacy questions: use the contact page. This draft will be replaced with counsel-approved language before public launch.