Privacy Policy

Last updated: August 5, 2026

This Privacy Policy explains how HyperWav — operated as a sole proprietorship doing business as "HyperWav" ("HyperWav," "we," "us") — collects, uses, shares, and protects information when you use hyperwav.ai, our applications, and related services (the "Service"). Our legal and contact details are available at any time by writing to privacy@hyperwav.ai. This Policy is part of our Terms of Service.

The short version: we collect what we need to run an AI video service — your account details, your uploads, and usage information. Your videos are processed to make your videos, not to build advertising profiles. We do not sell your personal information, and we do not use your content to train generative AI models without your consent.

1. Information We Collect

Account information. Name, email address, and password, or your Google account identifiers if you sign in with Google. Plan, billing period, and account settings.

Payment information. Payments are processed by Stripe. We do not store full card numbers; we receive limited information such as card brand, last four digits, expiry, billing country, and transaction history.

Your Content. The videos, audio, images, B-roll libraries, brand assets, scripts, and prompts you upload, and the videos and assets the Service generates for you. Uploaded video and audio necessarily include the faces and voices of the people appearing in them, and we generate transcripts of uploaded speech. We process faces and voices only to edit and produce your videos (for example framing, captioning, and scene selection). We do not use facial recognition to identify people, and we do not create biometric templates for identification purposes.

Usage and device information. Actions taken in the Service (uploads, renders, feature use, credit balances and consumption), log data, IP address, browser and device type, approximate location derived from IP, and crash/diagnostic data.

Cookies and similar technologies. We use essential cookies (sign-in, security, billing sessions) and analytics cookies to understand how the Service is used. Where the law requires it, we ask for consent before setting non-essential cookies, and you can withdraw consent at any time via the cookie controls on our site. If we use advertising pixels or similar tools in the future, we will update this Policy and honor applicable opt-outs first (see Section 8).

Communications. Emails and messages you send us (support, feedback), and records of notices we send you.

Referral and affiliate data. If you arrive via a referral or affiliate link, we record the referral source to attribute the signup and calculate rewards.

2. How We Use Information

We use information to: provide and operate the Service, including processing your uploads with automated systems to produce your videos; create and manage your account, subscriptions, credits, and billing; send transactional messages (receipts, renewal and expiry warnings, security notices, changes to terms); provide support; monitor, secure, and debug the Service, and prevent fraud and abuse (including enforcing plan limits and detecting multi-account abuse); understand aggregate usage to improve the Service; send marketing emails about HyperWav features and offers, which you can opt out of at any time via the unsubscribe link; and comply with law.

AI processing. Producing your videos involves automated processing of your uploads: transcription, scene and content analysis, editing decisions, caption generation, and — where your edit calls for it — generation of images or clips by third-party AI models. This processing exists to deliver the product you asked for. We do not make decisions producing legal or similarly significant effects about you by solely automated means.

No training without consent. We do not use Your Content to train generative AI models, and we do not permit our AI providers to retain or train on content we send them for processing, except with your consent or as disclosed to you at the time. We may use aggregated, de-identified information (which does not identify you and is not your content) to improve the Service.

3. Legal Bases (EEA/UK)

Where GDPR or UK GDPR applies, we process personal data on these bases: performance of a contract (operating your account, processing your uploads into videos, billing); legitimate interests (securing and improving the Service, preventing abuse, limited first-party marketing to existing customers), balanced against your rights; consent (non-essential cookies, marketing where consent is required, any future optional uses such as training), which you may withdraw at any time; and legal obligation (tax, accounting, lawful requests).

4. People Who Appear in Your Videos

Our users are responsible for having the consent of people who appear or speak in the content they upload, as required by our Terms of Service. If you appear in a video processed by HyperWav and have questions or want to exercise rights over that content, contact privacy@hyperwav.ai — we will assist directly where we can and coordinate with the account holder where they control the content.

5. How We Share Information

We share personal information only with: service providers who process it on our instructions to run the Service — cloud hosting and storage (such as Amazon Web Services), payment processing (Stripe), sign-in (Google), transcription and AI model providers (solely to process your jobs, without retention or training rights as described above), email delivery, analytics, and customer support tooling; stock media providers receive search queries needed to retrieve footage, not your identity; professional advisers (lawyers, accountants) under confidentiality; authorities where required by law, to protect rights and safety, or to enforce our Terms; and a successor in connection with incorporation of the business, or a merger, acquisition, financing, or sale of assets, in which case this Policy continues to apply to your information until updated with notice.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. There is no third-party advertising on the Service.

6. Data Retention

We keep information only as long as needed for the purposes above, and specific schedules apply to content: raw uploaded source footage is deleted 7 days after your video is rendered (files you save to your persistent library are kept while your account and plan quota allow); free plan outputs are deleted 90 days after render, with warning emails before deletion; paid plan outputs and libraries are kept while your subscription is active, subject to plan storage quotas; deleted content may persist in backups for a limited period (currently up to 7 days for expired content and up to 30 days in system backups) before being purged. If you delete your account, we delete or de-identify your personal data within 30 days, except records we must keep (billing and tax records, fraud-prevention signals, legal holds), which we keep no longer than required. Transcripts and edit metadata tied to content are deleted with that content.

7. Your Rights (EEA, UK, and Similar Jurisdictions)

Depending on where you live, you may have the right to: access the personal data we hold about you and receive a copy; correct inaccurate data; delete your data; restrict or object to certain processing, including direct marketing (we always honor marketing opt-outs); data portability; and withdraw consent at any time where processing is based on consent. To exercise these rights, email privacy@hyperwav.ai from your account email; we respond within the time required by law (generally 30 days) and may need to verify your identity. You also have the right to lodge a complaint with your local data protection authority, though we would appreciate the chance to resolve concerns directly first.

8. California and Other US State Privacy Rights

If you live in California or another US state with a comprehensive privacy law, you have rights to: know the categories and specific pieces of personal information we collect, the sources, purposes, and categories of recipients; delete personal information; correct inaccurate personal information; and non-discrimination for exercising these rights. In the past 12 months we have collected these categories: identifiers (name, email, IP); commercial information (plan, transactions); audio/visual information (your uploads and outputs); internet activity (usage and device data); approximate geolocation (from IP); and inferences limited to service operation (for example estimated usage needs). We collect them from you, your devices, and our payment and sign-in providers, use them for the purposes in Section 2, and disclose them to the service-provider categories in Section 5 for business purposes only.

We do not sell personal information and do not share it for cross-context behavioral advertising, and we have no actual knowledge of collecting personal information of anyone under 18. Faces and voices in your uploads may qualify as sensitive personal information in some states; we use them only to provide the Service you request, which does not require an additional opt-out under those laws. We honor opt-out preference signals such as Global Privacy Control where applicable. To exercise rights, email privacy@hyperwav.ai; you may use an authorized agent with proof of authorization. We do not charge for rights requests and respond within the legally required window (generally 45 days, extendable once).

9. International Transfers

We are based in the United States and process data there and in other countries where our providers operate. Where we transfer personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum), or transfers to providers certified under applicable adequacy frameworks. You can request more information about transfer safeguards at privacy@hyperwav.ai.

10. Security

We use technical and organizational measures appropriate to the risk: encryption in transit, access controls and least-privilege access to content, isolation of payment handling with Stripe (we never touch full card numbers), logging and monitoring, and vendor diligence. No service can guarantee absolute security; if we learn of a breach affecting your personal data, we will notify you and regulators as applicable law requires. Report suspected vulnerabilities to security@hyperwav.ai.

11. Children

The Service is for adults 18 and over. We do not knowingly collect personal information from anyone under 18; if we learn we have, we will delete it. If you believe a minor has an account, contact privacy@hyperwav.ai.

12. Changes to This Policy

We may update this Policy as the Service and law evolve. For material changes we will give notice by email and/or in the Service before the change takes effect. The "Last updated" date above always reflects the current version, and prior versions are available on request.

13. Contact

Privacy questions and rights requests: privacy@hyperwav.ai · Security: security@hyperwav.ai · Legal notices: legal@hyperwav.ai. A postal address for correspondence is available on request via any of these addresses.