Privacy Policy

This Privacy Policy explains how HyperScale Ai (“HyperScale,” “we,” “us”) collects, uses, discloses, and safeguards personal information when you use our platform, agency and custom-development services, and website (collectively, the “Services”). It applies to information about visitors, account holders, and the end users of our customers’ workspaces.

We act as a controller for the account and website data we collect directly, and as a processor for the data our customers submit into their tenant workspaces (“Customer Data”). For Customer Data, our customer’s own privacy notice governs, and we process it on their instructions under our Terms.

• Account information — name, email, organization, role, and authentication data you provide when signing up.
• Billing information — plan, transaction records, and limited payment metadata. Card details are handled by our PCI-DSS compliant payment processor and are not stored on our servers.
• Customer Data — the CRM records, projects, messages, documents, and other content you and your team add to your workspace.
• Usage & device data — log data, IP address, browser type, pages viewed, and product analytics used to operate and improve the Services.
• Voice & chat AI interactions — transcripts and related metadata generated when you use our AI agents, used to provide responses and improve agent quality.
• Cookies — see the Cookies section below.

We use personal information to:

• provide, maintain, secure, and improve the Services;
• process payments and manage subscriptions;
• authenticate users, enforce access controls, and prevent fraud and abuse;
• respond to support requests and send service and transactional communications;
• analyze usage to improve features and performance; and
• comply with legal obligations.

We rely on legal bases including performance of a contract, our legitimate interests in operating the Services, your consent (where required), and compliance with law.

Our AI agents process the inputs you provide to generate responses. We do not use your private Customer Data to train third-party foundation models without your consent. Where we use subprocessors to deliver AI features, they are bound by confidentiality and data protection obligations and process data only to provide the service.

We do not sell your personal information. We share it only:

• with subprocessors who provide hosting, payment processing, email delivery, analytics, and AI infrastructure under data protection agreements;
• within your own organization according to the roles and permissions you configure;
• when required by law, legal process, or to protect rights, safety, and security; and
• in connection with a merger, acquisition, or asset sale, subject to this Policy.

We implement technical and organizational measures appropriate to the risk, including encryption in transit, tenant isolation, role-based access control, audited administrative access, secrets management, and regular backups. No method of transmission or storage is completely secure, but we work continuously to protect your information and to respond promptly to any incident.

We retain personal information for as long as your account is active or as needed to provide the Services, and thereafter as required to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or anonymize Customer Data after a reasonable retention window, except where retention is required by law.

Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal information, and to object to certain processing or withdraw consent. To exercise these rights, contact us at [email protected]. If you are an end user of a customer’s workspace, please direct your request to that customer; we will assist them as their processor. You may also have the right to lodge a complaint with your local data protection authority.

We may process and store information in countries other than your own. Where we transfer personal information across borders, we use appropriate safeguards such as standard contractual clauses to protect it in accordance with applicable law.

We use strictly necessary cookies to authenticate sessions and secure the Services, and analytics cookies to understand usage and improve the product. You can control non-essential cookies through your browser settings. Disabling essential cookies may prevent parts of the Services from functioning.

The Services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Services or by email before they take effect. The “Effective” date above indicates when this Policy was last revised.

For privacy questions or requests, contact [email protected] or visit our contact page. See also our Terms of Service.