Privacy policy
HyperFlow respects your privacy. We collect as little as possible and we never sell your data. This page explains what we collect when you visit www.gethyperflow.io or sign up for the private beta.
What we collect
Waitlist signups: your email address, plus a hashed (SHA-256 + secret salt) version of your IP address and a truncated user-agent string. The hashed IP and UA serve as proof of consent only and cannot be reversed.
Cookies & analytics: only if you explicitly opt in. By default everything analytics-related stays off — see our cookie policy for the full list.
Server logs: standard request logs (IP, path, response code) kept by our hosting provider for security and rate limiting. Not used for analytics, not retained beyond a few weeks.
Why we collect it
Email: to send you the waitlist confirmation and, when a slot opens, the download link. Legal basis: your explicit consent. You can withdraw at any time via the unsubscribe link in any email.
Hashed IP + user-agent: GDPR requires us to keep proof of consent. We keep the minimum we need (one-way hashes) and nothing else.
Where it's stored
Subscriber records: Supabase (PostgreSQL, EU region). Email delivery: Resend. Hosting: Vercel. All providers are GDPR-compliant. We do not transfer personal data outside the EU/UK/Switzerland.
How long we keep it
Until you unsubscribe. Unsubscribe is one click and lives in every email. After unsubscribe we mark your row as unsubscribed and keep the email itself for that suppression purpose only — it stops us from accidentally re-adding you. Server logs roll over every few weeks.
Your rights under GDPR
You can: access your data, correct it, delete it, restrict processing, object to processing, port it to another service, and withdraw consent at any time. You can also lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
To exercise any of these rights, email hello@gethyperflow.io. We respond within 30 days, usually within a week.
What we never collect
We do not collect or process your real name, your phone number, your physical address, your screen contents, your keystrokes, your clipboard, or any data from inside the HyperFlow desktop app. The app itself runs entirely on your Mac — only stripped window titles ever leave, and only when you've configured the app to do so.
Changes to this policy
If we change this policy in any material way, we will re-prompt you for consent. Minor wording fixes are tracked in our public git history; the timestamp at the top of this page reflects the current version.
Contact
HyperFlow · Amsterdam · the Netherlands · hello@gethyperflow.io