Privacy Policy

1. Introduction

HyperClaw ("HyperClaw", "we", "us", or "our") provides a platform for GPU orchestration, AI inference, and related developer tools. This Privacy Policy describes how we collect, use, and protect your information when you use our platform and related services (the "Services").

2. Information We Collect

2.1 Account Information

When you create an account, we collect the following depending on your authentication method:

• Email authentication: Your email address
• Wallet authentication: Your public wallet address

Authentication is handled by Privy, a third-party identity provider. We do not store passwords or private keys.

2.2 Payment Information

We do not directly process or store payment card details. Payments are handled by:

• Stripe: For credit and debit card transactions. Stripe is PCI-DSS Level 1 certified. We receive transaction confirmations and billing addresses, not card numbers.
• Blockchain networks: For cryptocurrency payments. Transactions occur on-chain via your wallet. We receive transaction hashes for payment verification.

2.3 API Usage Data

When you use our API, we collect operational metadata:

• Request timestamps
• Token counts (input and output)
• Model identifiers
• Response latency
• Error codes (when applicable)

This metadata is used for billing, rate limiting, and service monitoring. It does not include the content of your prompts or model responses.

2.4 Technical Information

We collect standard technical data for security and operations:

• IP addresses (for rate limiting and fraud prevention)
• API key identifiers (not the keys themselves)
• Request headers required for API operation

2.5 Communications

If you contact us for support or feedback, we retain those communications to provide assistance and improve our Services.

3. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Services
• Process transactions and calculate billing
• Enforce rate limits and usage quotas
• Detect, prevent, and respond to fraud or abuse
• Send transactional communications (receipts, alerts, service updates)
• Respond to support requests
• Comply with legal obligations

4. Data Retention

4.1 Prompt and Completion Data

We do not store the content of your API requests or responses. Prompts and completions are processed in real-time and are not persisted after the request completes. We do not retain logs of what you send to or receive from the models.

We do not use your data for model training. Your prompts, completions, and any data you transmit through our API are never used to train, fine-tune, or improve AI models.

4.2 Other Data

• Usage metadata: Retained for the duration of your account plus any period required for billing reconciliation and legal compliance.
• Account information: Retained until you delete your account.
• Payment records: Retained as required by tax and financial regulations (typically 7 years).
• Security logs: IP addresses and access patterns retained for up to 90 days for fraud prevention.

5. Information Sharing

We do not sell your personal information. We share information only in the following circumstances:

5.1 Service Providers

We use third-party services to operate the platform:

• Privy — Identity and authentication. Handles login credentials and wallet connections.
• Stripe — Payment processing for card transactions.
• Cloud infrastructure providers — For hosting and data storage. Data is encrypted at rest.

These providers are contractually bound to use your information only to provide services to us and to maintain appropriate security.

5.2 Legal Requirements

We may disclose information if required by law, subpoena, or other legal process, or if we believe disclosure is necessary to:

• Comply with applicable law or legal process
• Protect the rights, property, or safety of HyperClaw, our users, or others
• Detect, prevent, or address fraud, security, or technical issues

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

6. Cookies and Browser Storage

We use minimal browser storage to operate the Services:

• Authentication tokens: Stored in localStorage to maintain your logged-in session.
• Essential cookies: Used by Privy and Stripe for authentication and payment flows.

We do not use advertising cookies, tracking pixels, or third-party analytics services on the HyperClaw platform.

7. Data Security

We implement technical and organizational measures to protect your information:

• All data transmitted to and from our API is encrypted using TLS 1.2+
• Data at rest is encrypted using AES-256
• API keys are hashed; we cannot retrieve your original key
• Access to production systems is restricted and logged
• Infrastructure is hosted in SOC 2 compliant data centers

While we strive to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your account and associated data
• Portability: Request your data in a machine-readable format
• Restriction: Request that we limit processing of your information

To exercise these rights, contact us at support@hypercli.com. We will respond within 30 days. We may need to verify your identity before processing certain requests.

9. International Data Transfers

Our Services are operated from the United States. If you access the Services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our infrastructure or service providers are located. By using the Services, you consent to such transfers.

For users in the European Economic Area, we rely on Standard Contractual Clauses or other lawful transfer mechanisms where required.

10. Age Requirements

The Services are intended for users who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a user under 18, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. If we make material changes, we will notify you by email (if you have provided one) or by posting a prominent notice on the platform prior to the change becoming effective.

We encourage you to review this policy periodically. The "Last Updated" date at the top indicates when the policy was last revised.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: