1. Who controls your data
Hyprr Retail LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, United States, is the data controller. HyprrIQ is our product, operating under the HyprrX brand.
Privacy contact: admin@hyprriq.com
HyprrIQ is offered to business customers in the United States. We do not currently offer accounts to customers in the United Kingdom or the European Economic Area.
2. What we collect
When you sign up: name, email address, and where you provide it, company name and billing details.
When you submit a case: the supplier name, website and marketplace you enter; the brand names you enter; any notes you write; and any documents you upload.
Automatically: authentication and session information, and basic technical data needed to operate the service securely.
Payment details are collected and held by Stripe. We never receive or store your card number.
3. Information about suppliers and third parties
To produce a report we research the supplier you name. That research is overwhelmingly about businesses — company registrations, addresses, websites, trade listings, marketplace policies.
It may also include limited information about individualswhere that information is published in a business context: a named director in a company register, or a named employee on a company’s public profile.
Our basis for this is our legitimate interest in providing commercial due-diligence research our clients need to make informed purchasing decisions, using information already published in a business context. We consider this proportionate: the information is public, business-related, used only to answer a specific commercial question, and never used to make decisions about the individuals themselves.
If you are named in a report and wish to exercise your rights, contact admin@hyprriq.com.
We do not deliberately collect sensitive personal information, and we do not use this information for profiling, advertising, or automated decisions about individuals.
4. Why we use your data
| Purpose | Basis |
|---|---|
| Providing the service you bought | Performance of a contract |
| Processing payments | Performance of a contract |
| Transactional email — submission and delivery notices, support replies | Performance of a contract |
| Keeping the service secure and preventing abuse | Legitimate interest |
| Researching the supplier you name | Performance of a contract (for you); legitimate interest (as to third-party business information) |
| Meeting tax, accounting and legal obligations | Legal obligation |
| Defending payment disputes and legal claims | Legitimate interest |
| Marketing email | Your consent only — see §7 |
We do not sell your personal information. We do not use it to train AI models. We do not use it for advertising.
5. Who processes data for us
Each provider below is bound by a data-processing agreement and may act only on our instructions.
| Provider | Purpose |
|---|---|
| Supabase | Database and file storage |
| Vercel | Hosting |
| Clerk | Sign-in and account security |
| Stripe | Payments |
| Anthropic | Automated research and analysis |
| Serper | Web search |
| WHOIS XML API | Domain records |
| Cloudmersive | Malware scanning of uploads |
| Resend | Transactional email |
| Inngest | Background processing |
What goes to our research providers: the supplier and brand names you enter, and the contents of documents you upload, are processed by our search and analysis providers in order to produce your report.
6. Where your data is held
Our infrastructure and service providers are located in the United States. Your data is stored and processed there.
7. Marketing email
We send marketing email only to people who have asked for it. When you subscribe we record your email address, the fact of your consent, the date and time, and where you subscribed from.
Every marketing email carries an unsubscribe link. Unsubscribing is permanent and immediate, and we keep a record of it so you are not re-added.
Transactional emails are different — submission confirmations, delivery notices, payment and account messages. These are part of the service you bought and are not marketing. They do not carry an unsubscribe link, because unsubscribing from them would mean not being told when your own report is ready.
8. How long we keep it
See the Data Protection & Retention Policy for the full table. In summary: uploaded documents at most 12 months, or within 30 days after your account closes, whichever is sooner · delivered reports while your account is active, then within 30 days after closure · case and audit records while your account is active · account details within 30 days after closure · transaction records 7 years, as tax and accounting law requires.
9. Your rights
You may access your data, ask us to correct it, ask us to delete it, ask for a copy in a portable format, and withdraw consent to marketing at any time.
Email admin@hyprriq.com. We respond within 30 days.
One limit, stated plainly: we must keep transaction and invoice records for 7 years to meet tax and accounting obligations. Those cannot be deleted on request. Everything else can.
California residents: the CCPA gives you the right to know what personal information we collect, to request deletion, to request a copy, and not to be discriminated against for exercising those rights. We do not sell personal information and we do not share it for cross-context behavioural advertising. Email admin@hyprriq.com; we respond within 45 days.
Residents of Colorado, Connecticut, Utah and Virginia have comparable rights and may use the same contact.
10. Security
Data is encrypted in transit and at rest. Access is restricted and role-based, and administrative actions are logged. Uploads are size- and type-restricted and scanned for malware before they are stored. Database access is governed by row-level security so a client’s records are reachable only by that client.
If a breach occurs that presents a risk to you, we will notify you and the relevant authorities as the law requires.
11. Children
The service is for businesses. It is not directed at anyone under 18 and we do not knowingly collect their information.
12. Changes
Material changes will be notified by email at least 14 days before taking effect.