Privacy Policy

01Who we are

HypeFlow AI ("HypeFlow", "we", "us", or "our"), operated by Influencers NZ, provides an AI-powered creator marketing platform that helps brands and agencies discover, manage, and measure influencer campaigns on TikTok and Instagram.

This Privacy Policy explains what personal information we collect, how we use and protect it, and the choices you have. It applies to our website, marketing pages, and the HypeFlow workspace application (together, the "Service").

If you have questions, contact us at privacy@hypeflow.cc.

02Information we collect

Information you provide

• Account details — your name, work email, company name, and password (stored only as a salted hash).
• Workspace content — campaigns, notes, saved creators (CRM), outreach drafts, and other data you create in the Service.
• Billing information — when you upgrade a plan, payments are processed by Stripe. We receive confirmation and plan details but never see or store your full card number.
• Communications — messages you send us via the contact form, support, or email.

Information collected automatically

• Usage data — pages viewed, features used, search counts, and similar product analytics.
• Device and log data — IP address, browser type, and timestamps, used for security, rate limiting, and diagnostics.
• Cookies and similar technologies — see the Cookies section below.

Creator and social media data

To power creator discovery and analytics, we process publicly available information about social media creators (such as public follower counts, engagement metrics, and recent public posts) obtained through third-party data providers. Audience demographic estimates shown in the product may be modeled approximations and are clearly labeled as estimates where applicable.

03How we use information

• Provide, operate, and maintain the Service and your workspace.
• Authenticate you, secure accounts, enforce plan limits, and prevent abuse.
• Process payments and manage subscriptions.
• Generate AI-assisted outputs (e.g., campaign briefs, outreach drafts, match analysis) based on data you choose to provide.
• Send transactional emails such as password resets and account notices.
• Improve the Service, understand usage, and develop new features.
• Comply with legal obligations and enforce our Terms of Service.

04Legal bases for processing

Where the GDPR or similar laws apply, we rely on the following legal bases: performance of a contract (to provide the Service you request); our legitimate interests (to secure, improve, and market the Service in a balanced way); your consent (for non-essential cookies and certain communications); and compliance with legal obligations.

05How we share information

We do not sell your personal information. We share it only with service providers who process it on our behalf under appropriate agreements, including:

• Stripe — payment processing.
• Resend — delivery of transactional emails.
• Social data providers (e.g., Apify) — retrieval of public creator metrics.
• Cloud hosting and database infrastructure — to run the Service.
• AI model providers — to generate AI-assisted content from the inputs you provide.

We may also disclose information to comply with the law, enforce our agreements, or protect the rights, safety, and security of our users and the public. If we are involved in a merger or acquisition, information may be transferred as part of that transaction with notice to you.

06Cookies and tracking

We use strictly necessary cookies and local storage to keep you signed in and to remember preferences. We may use privacy-respecting analytics to understand aggregate usage. You can control cookies through your browser settings; disabling essential cookies may affect how the Service works.

07Data retention

We keep your personal information for as long as your account is active or as needed to provide the Service. We retain certain records (such as billing records) for as long as required by law. When data is no longer needed, we delete or anonymize it. You may request deletion of your account at any time.

08Security

We protect your information with industry-standard measures, including encrypted transport (HTTPS), hashed passwords, scoped access controls, and single-use, time-limited tokens for sensitive actions such as password resets. No method of transmission or storage is completely secure, but we work continuously to safeguard your data.

09Your rights and choices

Depending on where you live (including under the New Zealand Privacy Act 2020 and the EU/UK GDPR), you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email privacy@hypeflow.cc and we will respond within the timeframe required by applicable law.

Creators: if your public profile appears in our discovery tools and you would like it reviewed or removed, contact privacy@hypeflow.cc and we will action reasonable requests.

10International transfers

We operate globally and may process information in countries other than your own. Where we transfer personal data across borders, we use appropriate safeguards consistent with applicable law.

11Children's privacy

The Service is intended for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

12Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the updated policy.

13Contact us

For any privacy question or request, email privacy@hypeflow.cc. We take your privacy seriously and aim to respond promptly.