Privacy Policy

This Privacy Policy explains what personal data HyperVertual collects, why we collect it, how we use it, and the rights you have. We process data to provide a paid digital writing service, not to sell personal information.

1. Data controller

The controller is HyperVertual. Privacy requests: info@hypervertual.com. Support: info@hypervertual.com. Address: Available on request at info@hypervertual.com.

2. Data we collect

• Account data: name, email, password hash, plan, timestamps.
• Usage data: documents and exam essays you choose to save, word counts, feature use, approximate device/browser data, IP address in server logs.
• Payment data: handled by Stripe. We receive limited billing metadata (last4, brand, subscription status, customer id). We do not store full card numbers or CVV.
• Support data: messages you send via the contact form or email.
• Cookies: session cookie for login, and optional preference cookies. See the Cookie Policy.

3. Why we process data (legal bases)

• Contract: create your account, deliver the writing service, authenticate you, bill subscriptions, provide support.
• Legitimate interests: security, fraud prevention, service improvement, defending legal claims.
• Legal obligation: tax, accounting, and responding to lawful requests.
• Consent: where required for non-essential cookies or optional marketing (we do not currently send marketing email unless you ask for it).

4. AI processing

If the operator has connected OpenAI (ChatGPT) or Google Gemini, exam-coach and writing features may send the text you submit to that provider only to generate a response for you. Do not submit secrets, passwords, health data, or other people's personal data. We do not use your documents to train our own public models. Third-party AI providers process data under their own terms as processors/sub-processors.

5. Sharing

We share data only with:

• Stripe — payments and fraud prevention.
• Hosting/database providers — to run the website.
• AI providers you enable — OpenAI and/or Google, when a feature is used.
• Authorities — when required by law.

We do not sell personal data.

6. Retention

Account and document data is kept while your account is open. After deletion we remove or anonymise content within 30 days unless we must retain records for tax, dispute or security reasons (typically up to 7 years for billing records).

7. Security

Passwords are hashed. Sessions use HTTP-only cookies. Access to administration is restricted to authorised operators. No method of transmission is 100% secure. See Security.

8. International transfers

Your data may be processed in the country of our host and in the United States or other countries where Stripe, OpenAI or Google operate. Where required, we rely on contractual clauses or the provider's approved transfer mechanism.

9. Your rights

Depending on your location you may have rights to access, correct, delete, export, or restrict processing, and to object or withdraw consent. Email info@hypervertual.com. You may complain to your local data protection authority. California residents may request disclosure of categories of data collected; we do not sell or share personal information for cross-context behavioural advertising.

10. Children

HyperVertual is not directed at children under 18. We do not knowingly collect their data. If you believe a minor registered, contact us and we will delete the account.

11. Changes

We will post updates on this page with a new effective date.