Legal
Privacy Policy
What we collect, what we deliberately do not, and how long we keep it.
Draft — pending legal review
This document describes how the product actually works today, written as a starting point. It has not been reviewed by counsel and is not yet a binding agreement.
Last updated 8 October 2026
1. The short version
HypoText is infrastructure, not an advertising business. We do not sell personal data, we do not build cross-site profiles of your visitors, and we do not use your content to train models.
2. Information you give us
- Account details — name, work email, company, and the domains you connect.
- Billing details — handled by our payment processor. We store a record of the transaction, not your card.
- Correspondence — what you send us by email or during support.
3. Information the service generates
- Crawler request logs — which bot requested which URL, when, and what payload size was served. This is how usage is measured.
- Referrer signals — for Persona, the AI platform a visitor arrived from. This is read from the referrer at request time and used to pick a page variant.
- AI answer records — for Discovery, the answers public AI assistants return to category questions, and which sources they cite.
4. What we deliberately do not collect
Persona classifies the referrer, not the person. It does not set an identifying cookie, does not fingerprint the device, and does not follow a visitor across sites. Two visitors arriving from the same AI platform are treated identically, because nothing distinguishes them to us.
5. How we use it
- to operate, secure and support the service;
- to measure usage and bill accurately;
- to produce your reports and alerts;
- to meet legal and accounting obligations.
We do not use your content, your logs or your reports to train machine learning models, our own or anyone else’s.
6. Sharing
We share data only with processors needed to run the service — hosting and edge infrastructure, error monitoring, payment processing, and email delivery — each under contract and only for that purpose. We will disclose data if legally required, and will tell you where we are permitted to.
7. International transfers
The edge network is global by design, so content is served from the region closest to the requester. Where personal data moves between regions we rely on recognised safeguards such as standard contractual clauses.
8. Retention
- Crawler request logs: 90 days, then aggregated.
- Discovery answer records: for the life of the account, so trends remain visible.
- Account and billing records: as long as required for tax and accounting.
On termination we delete or return account data within 30 days, except where we must retain it by law.
9. Your rights
Depending on where you are, you may have the right to access, correct, export or delete your personal data, or to object to certain processing. Write to hello@hypotext.dev and we will respond within the period the applicable law allows.
10. Security
Data is encrypted in transit and at rest. Access is limited to staff who need it, and we review that access periodically. If a breach affects your data we will notify you without undue delay.
11. Changes and contact
We will post updates here and give notice of material changes. Questions go to hello@hypotext.dev.