This Privacy Policy explains how Hypher Inc. ("Hypher," "we," "us") handles information in connection with the Hypher local referral network. It covers two groups: member businesses that hold accounts, and customers who scan cards and redeem offers.
The short version: customers use Hypher anonymously by default and may optionally create a free account (email only) to save offers and unlock member deals; businesses provide the information shown on their public pages; and we never sell personal information.
1. Customer accounts are optional
Customers use Hypher anonymously by default — no sign-up is required to browse, get a code, or redeem. To make one-time codes and basic rate limits work, we store a random device identifier in your browser’s local storage (not a name or contact detail) and associate it with the referral codes issued or redeemed on that device.
You may optionally create a free account by entering your email after a redemption. Accounts use a passwordless magic link (no password stored). Creating an account lets us save your offers, deliver codes and returning-customer promotions by email, and unlock member-only deals. When you first sign in, recent activity from the same device may be linked to your account. You can unsubscribe from emails or delete your account at any time.
2. Information we collect from customers
- A random device identifier generated in your browser (for rate limiting and abuse prevention).
- Referral activity: which code was issued, from which business to which business, and whether and when it was redeemed.
- Standard technical logs (e.g. IP address, timestamps, user agent) kept transiently for security and reliability.
- Optional, only if you grant it: approximate device location to help center the public map. Denying location does not break the map.
- Only if you create an account: your email address (used for magic-link sign-in and to send your offers / returning-customer promotions).
3. Customer email and marketing
We email customers only if they have opted in by creating an account, and only about their offers, saved codes, and participating businesses’ promotions. Every such email includes an unsubscribe link, and unsubscribing stops marketing email without deleting your account. We do not sell customer email addresses or share them with businesses.
4. Automatic deletion of device identifiers
Device identifiers attached to referral records are automatically removed 90 days after the referral is issued. The referral record itself may be retained in de-identified form for network analytics, but it is no longer linked to a device after 90 days.
5. Information we collect from businesses
- Account details: business name, owner email, and authentication credentials.
- Profile and offer content you provide: description, category, address, hours, phone, website, logo/images, review link, and the offers you publish.
- Business location coordinates, used for distance and map features.
- A "typical spend" amount you optionally provide, used only to estimate program value.
- Billing information, processed by our payment processor when billing is active (Hypher does not store full card numbers).
6. How we use information
- To operate the referral network: issue and redeem codes, rank partners, and power public pages, directory, map, and hubs.
- To prevent abuse and enforce rate limits.
- To show businesses their own performance, including estimated revenue (an estimate, not measured sales — Hypher does not connect to any point-of-sale).
- To send business-facing emails you have not opted out of (e.g. weekly reports, offer reminders).
- To maintain quality and safety of the network.
7. What is public
A business’s profile, offers, category, address, and location are shown on public, search-engine-indexable pages (business page, directory, map, city and category hubs). Do not put anything in these fields that you do not want publicly visible.
8. What businesses can and cannot see
Businesses see aggregate counts and estimated figures about referrals they sent and received. Businesses never receive customer identities, device identifiers, or any personal information about the customers who scanned or redeemed — only counts and estimates.
9. Service providers we share with
We share information with vendors that operate the service under contract, limited to what they need:
- Supabase — database, authentication, and storage.
- Vercel — application hosting.
- Resend — transactional and business-facing email delivery.
- Stripe — payment processing, when billing is active.
- Anthropic — AI drafting of business-supplied profile/offer copy (business content only; no customer data).
- Map tiles are self-hosted; map usage is not shared with a third-party maps provider. OpenStreetMap attribution applies.
10. We do not sell personal information
We do not sell or rent personal information, and we do not use customer data for third-party advertising.
11. Cookies and local storage
We use browser local storage for the anonymous device identifier and essential cookies to keep business accounts signed in. We do not use third-party advertising or cross-site tracking cookies.
12. Business data rights
Members can export the data Hypher holds about their business — profile, offers, and referral history — from account settings at any time. That export excludes customer identifiers. To correct or delete your business data, use the profile editor or contact hello@hypher.ai; some records may be retained as required for legal, security, or accounting purposes.
13. Data retention
We keep account and business content for as long as your account is active and as needed thereafter for legitimate business or legal purposes. Device identifiers on referrals are deleted at 90 days as described above.
14. Security
We use industry-standard measures, including row-level access controls, to protect information. No system is perfectly secure; we cannot guarantee absolute security.
15. Children
Hypher is intended for businesses and adult customers. It is not directed to children under 13, and we do not knowingly collect their personal information.
16. Your regional rights
Depending on where you live, you may have rights to access, correct, delete, or port personal information, or to object to certain processing — for example under the California Consumer Privacy Act (CCPA) or the EU/UK General Data Protection Regulation (GDPR). To exercise any right, contact hello@hypher.ai, and we will respond as required by applicable law. We do not sell personal information or discriminate against you for exercising these rights.
17. Changes to this policy
We may update this policy. Material changes will be communicated by email or in-product notice, and the "last updated" date above will change.
18. Contact
Hypher Inc., hello@hypher.ai.