Hyperdoc Privacy Policy

This Privacy Policy explains how Hyperdoc ("Hyperdoc", "we", "our", "us") collects, uses, stores, shares, and protects personal information when you use the Hyperdoc Microsoft 365 add-in and related services (the "Service").

This policy applies to the Hyperdoc Service itself and not only to a marketing website.

1. Data controller and scope

Hyperdoc is the controller of personal information processed through the Service, except where we act as a processor/service provider on behalf of a customer organization.

2. Categories of personal information we process

• Account and identity data: email address, user ID, tenant or workspace identifiers, and authentication metadata.
• Customer content: prompts, selected document text, and files or links you submit for processing in Hyperdoc.
• Technical and usage data: IP address, device/browser details, session identifiers, timestamps, feature usage events, and diagnostic logs.
• Support data: information you provide in support requests, including screenshots or other troubleshooting details.

3. Sources of personal information

• Directly from you when you use Hyperdoc or contact support.
• From your organization or identity provider during sign-in and access control.
• From automated systems that generate operational and security logs.

4. How we use personal information

• Provide and operate the Hyperdoc Service and requested features.
• Authenticate users and enforce access controls.
• Generate AI-assisted outputs based on your inputs.
• Monitor reliability, prevent abuse, investigate security incidents, and debug issues.
• Respond to support requests and communicate service-related notices.
• Comply with legal obligations and enforce applicable terms.

5. Legal bases for processing (where applicable)

Depending on your location, we process personal information under one or more legal bases:

• Performance of a contract to provide the Service.
• Legitimate interests, such as service security and improvement.
• Consent, where required by applicable law.
• Compliance with legal obligations.

6. Sharing and disclosure

We may share personal information with:

• Service providers: vendors supporting hosting, storage, authentication, monitoring, analytics, communications, and support operations.
• Subprocessors for AI processing: providers used to generate or process AI responses when required to deliver requested functionality.
• Customer organization administrators: where the account is managed by an organization and disclosure is required for administration or security.
• Legal or corporate events: where required by law, court order, or lawful request, or in connection with a merger, acquisition, or asset transfer.

We do not sell personal information for monetary consideration.

7. International data transfers

Hyperdoc and its providers may process information in countries other than your own. Where required, we apply transfer mechanisms and safeguards designed to protect personal information in cross-border processing.

8. Data retention

We retain personal information for as long as necessary for the purposes described in this policy, including to provide the Service, maintain security and records, resolve disputes, and satisfy legal obligations. Retention periods vary based on data type, sensitivity, and legal requirements.

9. Security measures

We use administrative, technical, and organizational safeguards intended to protect personal information, including access controls, encryption in transit, logging, and security monitoring. No method of transmission or storage is completely secure.

10. Cookies and similar technologies

Hyperdoc may use cookies or similar technologies that are necessary for authentication, session management, security, and product analytics. Where required by law, we obtain consent before using non-essential technologies.

11. Your privacy rights

Depending on your location and applicable law, you may have rights to request access, correction, deletion, portability, restriction, or objection to processing. You may also have rights related to automated decision-making and withdrawal of consent.

We will not discriminate against you for exercising applicable privacy rights. To submit a request, contact us using the details below. We may need to verify your identity before fulfilling a request.

12. Children's privacy

Hyperdoc is not directed to children under 16 and we do not knowingly collect personal information from children under 16. If you believe a child has provided personal information, contact us so we can take appropriate action.

13. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date and, where required, provide additional notice.

14. Contact information

For privacy inquiries, requests, or complaints about Hyperdoc:

Email: support@hyperdoc.tech

If applicable law provides the right to lodge a complaint with a supervisory authority, you may do so in the jurisdiction where you live or work.