Privacy Policy

1. Introduction

HYPRMERGE ("we," "us," or "our") operates an AI-powered analytics and automation platform for enterprises, including solutions for e-commerce, banking, finance, and insurance. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, platform, APIs, and related services (collectively, the "Services"). By using the Services, you consent to the practices described in this policy. If you do not agree, please do not use the Services.

2. Information We Collect

We collect information that you provide directly (e.g., name, email, company, job title, and communications when you contact us or sign up), account and billing information for paid plans, and data you submit through the Services ("Customer Data"), which may include business documents, analytics inputs, and other content processed by our AI and automation features. We also collect information automatically, such as device and browser information, IP address, log data, and usage data (e.g., features used, actions taken, and performance metrics) to operate, secure, and improve the Services. We may use cookies and similar technologies as described in our cookie notice or in-product settings.

3. Google Workspace Data

When you connect your Google account to HYPRMERGE, we request access to certain Google Workspace APIs to power the AI intelligence features of the platform. This section explains exactly what data we access, how we use it, and how it is protected.

3.1 Data We Access

• Google Calendar (calendar.readonly, calendar.events): We read your calendar events, including event titles, dates, times, attendees, and descriptions, to allow you to query your schedule and surface relevant upcoming events through the AI interface. We may also create or update calendar events through the AI agent when you explicitly instruct it to do so.
• Google Sheets (spreadsheets.readonly): We read the contents of Google Sheets files you connect to the platform, including cell data, sheet names, and structure, so you can query and analyze your business data through natural language without opening Sheets manually.
• Basic profile (userinfo.email, userinfo.profile, openid): We access your Google account email address and public profile information to authenticate your identity and personalize the platform experience.

3.2 How We Use Google Workspace Data

Google Workspace data is used solely to provide and improve the user-facing features of HYPRMERGE that you explicitly request. Specifically:

• Calendar data is used to surface and display your schedule in response to your queries.
• Sheets data is used to read and analyze spreadsheet content that you have explicitly connected.
• Data retrieved from Google APIs is processed transiently to generate responses and is not stored beyond the immediate session unless you explicitly save a result within the platform.

3.3 Data Sharing with Third Parties

To generate AI-powered responses to your queries, HYPRMERGE uses large language model (LLM) APIs (including but not limited to Google Gemini and other providers accessed via LiteLLM). Relevant portions of your Google Workspace data may be transmitted to these LLM providers as part of processing your query. These providers are contractually bound to process data only for the purpose of generating responses and are prohibited from using your data for their own model training.

We do not sell, rent, or share your Google Workspace data with any other third parties, advertisers, data brokers, or analytics services. We do not use Google Workspace data for targeted advertising, credit scoring, lending decisions, or any purpose other than providing the features you actively use within the platform.

3.4 Data Protection

All data transmitted between your browser, our servers, and third-party APIs is encrypted in transit using TLS. Our backend infrastructure is hosted on AWS (ap-south-1 region) with access controls, environment isolation, and security monitoring in place. Google Workspace data is not written to persistent storage unless you explicitly save a result. Access to production systems is restricted to authorized personnel only.

3.5 Data Retention and Deletion

We do not persistently store raw Calendar or Sheets data. Data retrieved from Google APIs is held only in memory for the duration of processing your query and is discarded immediately after the response is generated. If you disconnect your Google account or delete your HYPRMERGE account, any residual session data associated with your Google connection is deleted within 30 days. You may request immediate deletion of any stored data by contacting us at the details in Section 12.

4. Google API Limited Use Compliance

HYPRMERGE's use of data received from Google APIs, including Google Calendar and Google Sheets APIs, adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Limited Use Statement: The use of raw or derived user data received from Google Workspace APIs (including Google Calendar and Google Sheets) will adhere to the Google API Services User Data Policy, including the Limited Use requirements. This data is used exclusively to provide and improve user-facing features within HYPRMERGE and is not used to develop, improve, or train generalized AI or ML models, nor is it transferred to any third-party service for such purposes.

5. How We Use Your Information

We use the information we collect to: provide, maintain, and improve the Services; process and analyze Customer Data in accordance with your instructions and our agreements; authenticate users and manage accounts; process payments and prevent fraud; communicate with you about the Services, updates, and support; send marketing communications where you have opted in or where permitted by law; monitor and analyze usage and trends; protect the security and integrity of the Services and our users; comply with legal obligations and enforce our terms; and for other purposes described at the time of collection or with your consent.

6. Legal Basis for Processing (EEA/UK)

Where applicable law requires a legal basis, we process personal data based on: performance of a contract (e.g., providing the Services); your consent where we have asked for it; our legitimate interests (e.g., security, analytics, product improvement, marketing where permitted); and compliance with legal obligations. You may have the right to withdraw consent or object to certain processing; see Section 10 for your rights.

7. Sharing and Disclosure

We may share your information with: service providers and processors who assist us in operating the Services (e.g., hosting, analytics, payment processing, email delivery, LLM API providers), subject to contractual obligations to protect your data; our affiliates for consistent service delivery; professional advisors (e.g., lawyers, auditors) where necessary; and law enforcement, regulators, or other parties when required by law or to protect our rights, safety, or property. We do not sell your personal information. In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy. Google Workspace data is never shared with third parties except as described in Section 3.3.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide the Services, and thereafter as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. Customer Data is retained in accordance with your contract and your configuration (e.g., deletion on request or at end of contract). Log and usage data may be retained for a limited period for security and analytics. Google Workspace data (Calendar, Sheets) is not persistently stored and is discarded immediately after query processing as described in Section 3.5. You may request deletion of your personal data subject to applicable law and our retention requirements.

9. Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction, including encryption in transit (TLS) and at rest where applicable, access controls, infrastructure isolation on AWS, and regular security assessments. No method of transmission or storage is completely secure; we cannot guarantee absolute security and are not responsible for circumvention of our safeguards.

10. International Transfers

Your information may be transferred to and processed in countries other than your country of residence, including where we or our service providers operate. Our primary infrastructure is hosted in AWS ap-south-1 (Mumbai, India). Where we transfer personal data from the EEA, UK, or other regions with restricted transfer laws, we rely on adequacy decisions, standard contractual clauses, or other approved mechanisms to ensure an adequate level of protection. Details are available on request.

11. Your Rights and Choices

Depending on your location, you may have the right to: access and receive a copy of your personal data; correct or update inaccurate data; request deletion of your personal data; restrict or object to certain processing; data portability; withdraw consent where processing is consent-based; and lodge a complaint with a supervisory authority. To exercise these rights, contact us using the details in Section 13. We will respond in accordance with applicable law. You may also manage cookie preferences through your browser or our cookie settings, and opt out of marketing emails via the unsubscribe link in our emails. You may revoke HYPRMERGE's access to your Google account at any time via Google Account Permissions.

12. Children

The Services are not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe we have collected information from a child, please contact us and we will take steps to delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy on our website and update the "Last updated" date. For material changes, we may provide additional notice (e.g., by email or in-product notification). Your continued use of the Services after the effective date constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

14. Contact Us

For questions about this Privacy Policy, our privacy practices, or to exercise your rights (including deletion of Google Workspace data), please contact us at harish.khope@hyprmerge.ai or via the contact form on our website. We will respond to your request in accordance with applicable law.