Privacy Policy
Effective date: March 26, 2026 · Last updated: March 26, 2026
Data Controller
HyperReel UG (haftungsbeschränkt)
Roonstrasse 23a
76137 Karlsruhe, Germany
Email: admin@hyperreel.ai
Phone: +49 155 67250680
1. Overview
HyperReel UG (“HyperReel”, “we”, “us”, or “our”) operates the website hyperreel.ai and related services (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our Service, in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
By using our Service, you acknowledge that you have read and understood this Privacy Policy.
2. Data We Collect
2.1 Account Data
When you create an account, we collect:
- Name and email address
- Password (stored in hashed form only)
- Profile information you choose to provide
2.2 Content Data
When you use our AI content generation features, we process:
- Text prompts and generation parameters you provide
- AI-generated images, videos, and audio outputs
- Character profiles, persona configurations, and scheduling settings
2.3 Usage Data
We automatically collect:
- IP address and approximate geolocation
- Browser type, operating system, and device information
- Pages visited, features used, and timestamps
- Referring URL and exit pages
2.4 Communication Data
When you contact us or interact with us through messaging platforms, we collect:
- WhatsApp messages sent to our business account (via Meta WhatsApp Business API)
- Email correspondence
- Support requests and feedback
2.5 Payment Data
Payment transactions are processed by third-party payment providers. We receive limited payment information (e.g., last four digits of your card, billing address, transaction ID) but do not store full credit card numbers.
3. How We Use Your Data
| Purpose | Legal Basis (GDPR Art. 6) |
|---|---|
| Providing and operating the Service | Performance of contract (Art. 6(1)(b)) |
| Processing AI content generation requests | Performance of contract (Art. 6(1)(b)) |
| Managing your account and authentication | Performance of contract (Art. 6(1)(b)) |
| Responding to inquiries via email or WhatsApp | Contract (Art. 6(1)(b)) / Legitimate interest (Art. 6(1)(f)) |
| Service-related notifications | Performance of contract (Art. 6(1)(b)) |
| Marketing and advertising (incl. Meta Ads) | Consent (Art. 6(1)(a)) / Legitimate interest (Art. 6(1)(f)) |
| Improving and optimizing the Service | Legitimate interest (Art. 6(1)(f)) |
| Preventing fraud and ensuring security | Legitimate interest (Art. 6(1)(f)) |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
4. Meta Platforms Integration
We use services provided by Meta Platforms, Inc. (“Meta”) in the following ways:
4.1 Meta Ads & Meta Pixel
We use Meta Ads (Facebook/Instagram Ads) to display targeted advertisements. The Meta Pixel may be deployed on our website to measure ad campaign effectiveness. The Meta Pixel collects:
- HTTP header information (IP address, browser type, page location, referring URL)
- Pixel-specific data (Pixel ID, cookie data)
- Button click data, form field names, and page metadata
- Optional advanced matching data (e.g., hashed email address)
This data is transmitted to Meta and used to deliver targeted ads, measure ad performance, and build custom audiences. Meta processes this data as an independent controller under its own Data Policy.
Legal basis: Consent (Art. 6(1)(a) GDPR). The Meta Pixel is only activated after you have given consent via our cookie consent banner.
You can opt out of interest-based advertising from Meta in your Facebook Ad Preferences.
4.2 WhatsApp Business API
We use the Meta WhatsApp Business API to communicate with you via WhatsApp. When you message our WhatsApp business number, the following data is processed:
- Your WhatsApp phone number and profile name
- Message content (text, images, documents you send)
- Timestamps of messages sent and received
Messages are routed through Meta’s WhatsApp Cloud API infrastructure. Meta acts as a data processor for message delivery. We store message content on our servers for the purpose of responding to your inquiries.
Legal basis: Performance of contract (Art. 6(1)(b)) for support inquiries; Consent (Art. 6(1)(a)) for marketing messages. You can opt out of WhatsApp marketing messages at any time by replying “STOP”.
For details on how Meta processes WhatsApp data, see the WhatsApp Privacy Policy.
4.3 Instagram & Facebook Pages
We maintain business profiles on Instagram and Facebook. When you interact with our profiles (e.g., liking, commenting, or messaging), Meta processes your data in accordance with its Data Policy. We receive anonymized insights and analytics about interactions with our content.
5. Third-Party Services
| Service | Purpose | Data Processed |
|---|---|---|
| Amazon Web Services (AWS) | Website hosting & infrastructure | Usage data, IP address |
| Cloudflare | CDN, DDoS protection, DNS | IP address, usage data |
| Meta Platforms | Advertising, WhatsApp messaging | See Section 4 |
| Cloud GPU providers | AI content generation | Generation prompts, parameters |
Each third-party provider processes data under their own privacy policies and our data processing agreements.
6. Cookies & Tracking Technologies
6.1 Types of Cookies
| Category | Purpose | Consent Required |
|---|---|---|
| Essential | Authentication, security, core functionality | No |
| Analytics | Understanding usage patterns | Yes |
| Marketing | Meta Pixel, ad targeting, conversion tracking | Yes |
6.2 Managing Cookies
A cookie consent banner allows you to accept or reject non-essential cookies on your first visit. You can change your preferences at any time through the cookie settings link in our footer, or configure your browser to block cookies (which may affect functionality).
7. International Data Transfers
Your data may be transferred to countries outside the European Economic Area (EEA), in particular the United States. We ensure appropriate safeguards, including:
- EU-U.S. Data Privacy Framework certification of the recipient
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Binding Corporate Rules where applicable
8. Data Retention
- Account data: Duration of your account + 30 days after deletion
- Generated content: Until you delete it or close your account
- Usage & analytics data: Up to 26 months
- WhatsApp messages: Up to 12 months after last interaction
- Payment records: 10 years (German tax law, §147 AO)
9. Your Rights Under GDPR
You have the following rights:
- Right of access (Art. 15) — request a copy of your personal data
- Right to rectification (Art. 16) — correct inaccurate data
- Right to erasure (Art. 17) — request deletion of your data
- Right to restriction (Art. 18) — restrict processing
- Right to data portability (Art. 20) — receive data in machine-readable format
- Right to object (Art. 21) — object to processing based on legitimate interest
- Right to withdraw consent (Art. 7(3)) — withdraw at any time
To exercise any of these rights, contact us at admin@hyperreel.ai. We will respond within one month.
You also have the right to lodge a complaint with your supervisory authority:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20, 70173 Stuttgart
www.baden-wuerttemberg.datenschutz.de
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS/SSL), secure password hashing, access controls, and regular security reviews.
11. Children’s Privacy
Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at admin@hyperreel.ai.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date. For material changes, we may also notify you by email.
13. Contact
HyperReel UG (haftungsbeschränkt)
Roonstrasse 23a
76137 Karlsruhe, Germany
Email: admin@hyperreel.ai
Phone: +49 155 67250680
Responsible person (Verantwortlicher gem. Art. 4 Nr. 7 DSGVO):
M. Bopp