Privacy Policy

This policy explains what HypeSlide (“we”) collects, why, and the choices you have. It covers our website, web app, emails and MCP/API service.

Information about you

• Account: email address, optional display name, timezone and notification preferences.
• Your content: the apps you add, collections, notes, product descriptions you submit for cloning, and the slideshows we generate for you.
• Billing: handled by Dodo Payments, which acts as merchant of record (it sells to you, charges your card and handles sales tax/VAT). We store your Dodo customer and subscription identifiers and plan status, never card details.
• Usage and security: usage counters for quotas, API key metadata (keys are stored only as hashes), an audit log of billing and account changes, and hashed IP addresses for rate limiting.
• Analytics: product analytics run in cookieless mode (no cookies or local storage) and record events against an internal user ID, never your email.

Public TikTok data

Our database contains publicly available information about public TikTok accounts and posts (handles, display names, profile images, captions, slide images and public engagement metrics), obtained through a third-party public-data provider. We don't collect private accounts or private messages. If you are the owner of an account and want it removed, contact us and we'll remove it and exclude it from future collection.

How we use information

• To provide the service (your apps' viral feeds, breakdowns, slideshow making, MCP access).
• To bill you and prevent fraud and abuse.
• To send transactional emails (receipts, payment and security notices) and, if you keep it on, the weekly email about new viral slideshows for your apps.
• To improve the product using aggregated, pseudonymous usage data.

Processors

We use Supabase (database, authentication, storage), Vercel (hosting), Dodo Payments (payments, as merchant of record), Resend (email), Anthropic (AI analysis: post data and the product details you submit), Higgsfield (image generation: prompts only), Upstash (rate limiting), Sentry (error monitoring, with request data collection disabled) and PostHog (cookieless analytics).

Retention

Account data is kept while your account is active. When you delete your account we delete your profile, collections, notes, API keys, generated files and usage records, and cancel your subscriptions. Dodo Payments keeps its own transaction records as merchant of record, as the law requires. Our billing records required by law and anonymised audit entries are kept for up to 7 years.

Your rights (GDPR, UK GDPR, Saudi PDPL and similar laws)

You can access and export your data and delete your account at any time from Settings → Your data. You can also ask us to correct data, object to or restrict processing, or complain to your data protection authority. Contact support@hypeslide.com.

Security

We use encryption in transit, row-level security on every database table, hashed API keys, strict content security policies, rate limiting and least-privilege access.

Children

The service is not intended for anyone under 16.

Changes

We'll post changes here and, for material changes, email account holders.