Public beta

Last Updated: February 16, 2026

Hype Manager ("we," "us," or "our") operates the Hype Manager platform, a content management and social media sharing service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

By using Hype Manager, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the platform.

1. Information We Collect

1.1 Personal Information You Provide

When you register for an account or use our services, we may collect the following personal information:

  • Account Information: Your name, email address, and password (hashed and securely stored).
  • Profile Information: Avatar image and display preferences you choose to provide.
  • Project Data: Project names, descriptions, context settings, content templates, and AI-generated content you create within the platform.
  • API Keys: Third-party API keys you provide (e.g., DeepSeek API key) for enhanced AI content generation capabilities.

1.2 Information from Third-Party Authentication

When you choose to authenticate using third-party services, we collect information provided by those services:

  • Google OAuth: Your Google account email address, display name, profile picture URL, and Google account identifier.
  • LinkedIn OAuth: Your LinkedIn profile information, display name, email address, profile picture, and OAuth access tokens necessary for publishing content to your LinkedIn account.
  • Facebook OAuth: Your Facebook user ID, display name, email address, and Page access tokens necessary for publishing content to your Facebook Pages.

1.3 Usage and Technical Data

We automatically collect certain information when you use our platform:

  • Session Data: Session identifiers, login timestamps, and authentication status.
  • Usage Information: Features used, content generated, social media posts shared, and interaction patterns within the platform.
  • Device Information: Browser type, operating system, and device identifiers transmitted through standard HTTP requests.
  • Log Data: Server logs including IP addresses, access times, and pages visited.

1.4 Cookies and Session Management

We use cookies and similar technologies to maintain your session and provide a seamless experience:

  • Session Cookies: Essential cookies that maintain your authenticated session while you use the platform. These cookies are required for the platform to function properly.
  • Local Storage: We use browser local storage to cache session data for improved performance and session persistence.

We do not use tracking cookies or third-party advertising cookies.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: To provide, maintain, and improve the Hype Manager platform, including account management, project management, and content generation features.
  • AI Content Generation: To process your project context, templates, and instructions through AI services (OpenAI, DeepSeek) to generate content on your behalf.
  • Social Media Sharing: To publish content you create to your connected social media accounts (LinkedIn, Facebook) using the OAuth tokens you have authorized.
  • Communication: To send you service-related communications including account verification emails, password reset emails, and important service updates via SendGrid.
  • Authentication: To verify your identity and maintain secure access to your account.
  • Analytics: To understand how users interact with our platform and to improve our services. Analytics may be processed through Google Analytics, Mixpanel, or Segment as configured by the platform administrator.
  • Security: To detect, prevent, and address technical issues, fraud, and unauthorized access.

3. Third-Party Services

We integrate with and share data with the following third-party services to provide our platform functionality:

3.1 AI Content Generation Services

  • OpenAI: We send your project context, content templates, and generation instructions to OpenAI's API to generate text and image content. OpenAI processes this data according to their Privacy Policy and API Data Usage Policies.
  • DeepSeek: If you provide a DeepSeek API key, we may send content generation requests to DeepSeek's API as an alternative AI provider. DeepSeek processes this data according to their privacy policy.

3.2 Social Media Platforms

  • LinkedIn API: We use LinkedIn's API to publish content to your LinkedIn profile or company pages. Data shared includes post text, images, and your LinkedIn access tokens. LinkedIn processes this data according to their Privacy Policy.
  • Facebook API: We use Facebook's Graph API to publish content to your Facebook Pages. Data shared includes post text, images, and your Page access tokens. Facebook (Meta) processes this data according to their Privacy Policy.

3.3 Authentication Providers

  • Google OAuth: We use Google's OAuth 2.0 service for authentication. Google processes authentication data according to their Privacy Policy.

3.4 Infrastructure and Communication Services

  • Neon DB (PostgreSQL): Our primary database is hosted on Neon, a managed PostgreSQL service. All user data, project data, and content are stored in this database. Neon processes data according to their Privacy Policy.
  • SendGrid: We use SendGrid (Twilio) to send transactional emails including account verification, password reset, and contact form responses. SendGrid processes email data according to their Privacy Policy.
  • Replit: Our application may be hosted on Replit's infrastructure. Replit processes data according to their Privacy Policy.

4. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal data:

  • Passwords are hashed using industry-standard algorithms before storage.
  • Database connections use encrypted (SSL/TLS) connections.
  • OAuth tokens are stored securely in our database and are only used for their intended purpose (publishing content to your social media accounts).
  • Session data is encrypted and managed through secure server-side session storage.
  • Access to production systems and databases is restricted to authorized personnel only.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. Specifically:

  • Account Data: Retained for the duration of your active account. Upon account deletion, personal data is removed within 30 days.
  • Project and Content Data: Retained for the duration of your active account. You may delete individual projects and content at any time through the platform.
  • OAuth Tokens: Retained until you disconnect the associated social media account or delete your Hype Manager account. Tokens may also expire according to the issuing platform's policies.
  • Session Data: Session records expire automatically after the configured session timeout period.
  • Server Logs: Retained for up to 90 days for security and debugging purposes.

6. Your Rights (GDPR and Applicable Data Protection Laws)

If you are a resident of the European Economic Area (EEA), the United Kingdom, or another jurisdiction with applicable data protection laws, you have the following rights regarding your personal data:

  • Right of Access: You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
  • Right to Erasure (Right to be Forgotten): You have the right to request deletion of your personal data, subject to certain legal exceptions. See our Data Deletion Policy for details.
  • Right to Restrict Processing: You have the right to request that we limit the processing of your personal data under certain circumstances.
  • Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to Object: You have the right to object to the processing of your personal data for certain purposes.
  • Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time.

To exercise any of these rights, please contact us at support@hypemanager.com. We will respond to your request within 30 days.

7. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

  • Contract Performance: Processing necessary to provide you with the Hype Manager service as described in our Terms of Service.
  • Consent: Processing based on your explicit consent, such as connecting third-party social media accounts or subscribing to communications.
  • Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services, ensuring security, and preventing fraud.
  • Legal Obligation: Processing necessary to comply with applicable laws and regulations.

8. International Data Transfers

Your personal data may be transferred to and processed in countries outside your jurisdiction, including the United States, where our third-party service providers operate. When such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or reliance on service providers' compliance frameworks.

9. Children's Privacy

Hype Manager is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For data protection inquiries specifically related to GDPR, please include "GDPR Request" in your email subject line so we can prioritize your request accordingly.