Hiype, LLC

Privacy Policy

Last Updated: September 9, 2026
Website: https://www.hiype.io
Privacy questions and requests: legal@hiype.io

Hiype, LLC (“Hiype,” “we,” “us,” or “our”) operates an online coaching marketplace at https://www.hiype.io. This Privacy Policy describes how we collect, use, disclose, and retain personal information when you visit our website, create an account, apply as a Coach, book or attend a session, or otherwise use our website and marketplace (the “Platform”). This Policy applies to Clients, Coaches, applicants, and visitors in the United States, the United Kingdom, Canada, and participating European Union and European Economic Area (EU/EEA) countries.

The Terms of Service explain how this Policy relates to your agreement with Hiype.

1. Who Is Responsible

Hiype, LLC is the organization responsible for the personal information used to operate the Platform. Privacy questions and requests may be sent to legal@hiype.io.

Coaches receive limited Client information to provide coaching and may have independent obligations under privacy or professional law. The Hiype Coach Marketplace Agreement (“Coach Agreement”) restricts their use, retention, and disclosure of that information.

2. Information We Collect

Depending on how a person uses the Platform, Hiype collects:

Account and profile information, such as name, email address, profile photo, location, professional background, and other information a User chooses to provide
Coach information, including coaching specialties, experience, rates, availability, and other information included in a Coach profile
Booking and transaction information, including sessions booked, payment status, and related transaction details
Communications and content, including messages, files, reviews, ratings, and other information Users submit through the Platform
Technical and usage information, such as IP address, device information, browser type, log data, and information about how Users interact with the Platform
Information from third-party services, such as information received when a User connects a calendar or other supported service
Other information a User provides to us or that we collect as described in this Privacy Policy

Hiype uses cookies and similar local storage only as needed to operate the Platform, including to keep you signed in, protect the site, remember essential preferences, and complete bookings and payments. Hiype does not use cookies or similar technologies for analytics, advertising, or cross-site tracking, and does not use a cookie-consent banner.

3. Sources

Hiype receives personal information from:

Users: Information people provide when they create an account, apply, complete intake, book or attend a session, send a message, connect Google, contact support, make a privacy choice, or submit a report about another User.
The Platform: Information generated automatically when you use the site, including security logs, cookies, and local storage.
Service providers: Information from the companies that help Hiype operate authentication, payments, video, transcription, AI recaps, scheduling, email, hosting, and infrastructure.

4. How and Why We Use Information

Hiype uses personal information to:

Create and secure accounts and provide profiles, bookings, packages, messaging, sessions, and support;
Review Coach applications and operate a safe, reliable marketplace;
Share submitted intake and booking information with the selected Coach;
Process Client payments, Coach payouts, refunds, disputes, fraud review, and legally required tax or reporting matters;
Record, transcribe, and create an AI recap only when both participants consent;
Send transactional and legal communications;
Investigate safety, misconduct, no-show, payment, support, and legal issues;
Prevent fraud, abuse, security threats, and circumvention;
Maintain, troubleshoot, protect, and improve the Platform;
Create irreversibly anonymized and aggregated insights to operate, improve, and market the Platform;
Comply with law and establish, exercise, or defend legal claims; and
Send optional marketing only where Hiype has a valid legal basis and an operable opt-out method.

For users in the United Kingdom and the EU/EEA, Hiype relies, as applicable, on performance of a contract or requested pre-contract steps, legal obligations, consent, and legitimate interests in service delivery, marketplace integrity, support, security, fraud prevention, product improvement, and legal claims. Where Hiype relies on legitimate interests, it considers necessity, impact, reasonable expectations, and safeguards. Consent may be withdrawn as described below.

5. Optional Recording, Transcription, and AI Recaps

Hiype does not record a session unless both the Client and Coach separately provide affirmative consent. If either person does not consent, Hiype does not record, transcribe, or create an AI recap.

You may change your standing recording preference at any time. That change applies to later sessions. During a recorded session, the session interface shows a recording indicator and a control to stop the live recording. Stopping ends further capture; it does not delete materials already created or change your stored preference. You may also request deletion where a legal right applies; lawful exceptions may require limited retention.

When both people consent, video, transcription, and AI providers process session media and text to create a structured recap. Hiype instructs those providers not to use session content to train their models. They may still retain limited data as required for security, abuse monitoring, or their terms. Hiype does not use raw, identifiable, or merely pseudonymized session recordings, transcripts, or recaps to train Hiype or third-party models, or to market to or about a person.

Participants receive a structured recap. Hiype does not provide the raw transcript as a user-facing record. AI recaps may contain errors, omissions, or incorrect speaker attribution and are not official, verbatim, or legal records.

Authorized Hiype personnel may access identifiable session content only for documented support, safety, dispute, security, or legal purposes. Raw transcript access is controlled and logged. Hiype may derive irreversibly anonymized and aggregated insights from consented recaps and related session outputs to operate, improve, and market the Platform. Those insights will not identify a person.

6. How We Disclose Information

Hiype discloses personal information:

Between Clients and Coaches: Public Coach profiles and availability to Clients; booking details, submitted intake, pairwise messages, and relevant recaps to the selected Coach and Client;
To service providers: For authentication, hosting, storage, payments, payouts, video, transcription, AI recaps, email, scheduling, security, deployment, and support;
For legal and safety reasons: Where reasonably necessary to comply with law, protect safety, investigate fraud or abuse, enforce agreements, or establish or defend legal claims; and
In a corporate transaction: In connection with a financing, merger, acquisition, reorganization, bankruptcy, or asset sale, subject to appropriate confidentiality and applicable law.

Where lawful and practicable, Hiype will narrow a legal request and provide notice before disclosure.

Hiype does not sell personal information for money, share it for cross-context behavioral advertising, or use it for targeted advertising based on activity across unrelated services.

7. Service Providers

Hiype uses service providers to operate the Platform. They include providers of:

Hosting, authentication, database, and storage (Supabase and Vercel);
Payments, payouts, verification, and fraud prevention (Stripe);
Video rooms and optional recording (Daily);
Consented transcription and structured recaps (Deepgram and OpenAI);
Email delivery (Resend);
Optional Sign-In, Coach Calendar, and hosted fonts (Google);
Coach-applicant interview scheduling (Cal.com); and
Operations, collaboration, and deployment tools (including Slack and GitHub Actions).

Providers, subprocessors, regions, and retention practices may change. Contact legal@hiype.io for a current list.

8. Retention and Deletion

Hiype retains personal information only as long as reasonably necessary for the purposes in this Policy, including providing user access, completing transactions, maintaining safety and security, preventing fraud, handling disputes and chargebacks, and meeting legal, tax, accounting, and claims obligations.

Information	Hiype Retention
Raw session recordings	Deleted 7 days after the session
Message attachments	Deleted 30 days after upload
Identifiable transcripts and AI recaps	24 months for user access and service delivery, then deleted
Anonymized, aggregated insights	May be retained to operate, improve, and market the Platform; Hiype does not retain raw or pseudonymized session content for this purpose and does not use pseudonymized data for model training
Account and profile information	While the account is active, then as needed for the exceptions below
Shared message text	May remain visible to the other participant as “Deleted User” after account deletion
Applications, bookings, payments, refunds, tax, fraud, consent, logs, and disputes	For the applicable operational, legal, accounting, security, or claims period
Google Calendar tokens and imported availability	Deleted when Calendar is disconnected or access is revoked; limited booking and sync records may remain

Deletion from active systems may not immediately remove information from backups, legal holds, another participant’s records, or a provider where retention is legally required or technically unavoidable. Hiype limits retained information to the relevant purpose and requests deletion from providers where the provider supports it.

9. Google API Information

Hiype’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Google Sign-In is separate from the optional Coach Calendar connection. For Calendar, Hiype accesses selected calendar settings and availability needed to prevent conflicts and creates, updates, or deletes Hiype booking events on the Coach’s selected calendar. Hiype does not retrieve or store titles, descriptions, locations, attendees, or conference links from a Coach’s existing events. Hiype-created events include booking details, including Client-identifying information and a session link, which may be visible to anyone with access to that calendar.

Hiype does not use Google user data for advertising, retargeting, data-broker sales, lending decisions, unrelated databases, or training generalized AI or machine-learning models. Sensitive authorization tokens are stored in a restricted secret store and are not returned to the browser.

A Coach may disconnect Calendar through Hiype or revoke access through Google. Disconnecting removes stored authorization tokens and future imported availability. Events already created in Google Calendar may remain unless Hiype successfully deletes them in connection with a booking change or the Coach deletes them.

10. Privacy Rights and Choices

You may:

Request access, correction, deletion, restriction, portability, or another available right by emailing legal@hiype.io and identifying your account;
Change a standing recording preference in account settings and stop a live recording as described in Section 5;
Disconnect Google Calendar in Hiype settings or by revoking access in your Google Account; and
Promotional email preferences can be set in your Account settings.

Rights vary by location and are subject to identity verification, authority, exceptions, and applicable law. Hiype may withhold another person’s information and retain information where law permits or requires.

UK users may have rights to access, correct, erase, restrict, port, or object to processing; withdraw consent without affecting prior lawful processing; and complain to the Information Commissioner’s Office at https://ico.org.uk. Applicable response periods and lawful extensions apply.

Users in the EU/EEA may have rights to access, rectify, erase, restrict, or port personal information, to object to certain processing, and to withdraw consent without affecting prior lawful processing. They may complain to their local supervisory authority. A list of EU authorities is at https://www.edpb.europa.eu/about-edpb/about-edpb/members_en. Applicable response periods and lawful extensions apply.

Canadian users may request access to and correction of personal information and withdraw consent, subject to legal or contractual restrictions. They may complain to the Office of the Privacy Commissioner of Canada or an applicable provincial regulator. Mandatory provincial and territorial rights remain available.

California residents may have rights to know, access, delete, correct, limit certain uses of sensitive personal information, use an authorized agent, and receive equal treatment, subject to applicable exceptions. Hiype does not sell personal information or share it for cross-context behavioral advertising. You may contact legal@hiype.io to ask us to reconsider a denied request.

Optional marketing is separate from service communications. Hiype sends promotional email only when it has a valid legal basis and an opt-out method.

11. Account Deletion and Privacy Operations

Hiype does not currently provide self-service account deletion. Email legal@hiype.io to request access, correction, deletion, or account deletion.

After identity verification, Hiype will search its systems and export or delete eligible Hiype-held account, profile, session, and attachment data. Hiype retains payment, tax, fraud, security, consent, and dispute records where law permits or requires. Shared message text may remain visible to the other participant under “Deleted User.” Hiype requests deletion of provider copies where the provider supports it. Backups and some operational copies may remain for a limited period.

12. International Processing

Hiype is based in the United States. If you use the Platform from the United Kingdom, the EU/EEA, or Canada, your information may be transferred to, stored in, and processed in the United States and other countries where our providers operate. Privacy and government-access rules in those countries may differ from those in your country.

Where required by applicable data protection law, Hiype uses legally recognized mechanisms and appropriate safeguards for international transfers of personal information, which may include Standard Contractual Clauses, the UK International Data Transfer Addendum or International Data Transfer Agreement, or an applicable adequacy mechanism.

13. Security and Incidents

Hiype uses safeguards designed to protect personal information, including encrypted network connections, access controls, restricted token and recording storage, logging for sensitive transcript access, rate limits, and data minimization. No system is completely secure. Users should protect credentials and report suspected unauthorized use.

If Hiype confirms an incident involving personal information, it will investigate, mitigate, document, and provide notices required by applicable law.

14. Automated Processing

Hiype may leverage AI to summarize session content. AI does not make decisions that produce legal or similarly significant effects. Marketplace eligibility, safety, and dispute decisions may use system-generated information but require human administrative action.

15. Children

The Platform is for adults 18 or older. If Hiype learns that a minor provided personal information, it will investigate and take appropriate action, subject to safety, legal, and preservation obligations. Contact legal@hiype.io if you have a concern.

16. Changes

Hiype may update this Policy to reflect changes in services, providers, practices, or law. Hiype will identify the effective date and give at least 14 days’ notice of a material change by email or Platform notice, or longer if applicable UK, EU/EEA, or Canadian law requires. Continued use is not treated as consent where law requires a separate affirmative choice.

17. Contact and Complaints

Hiype, LLC

legal@hiype.io

https://www.hiype.io

Unresolved concerns may be submitted to the applicable regulator, including the UK Information Commissioner’s Office, an EU/EEA supervisory authority, the Office of the Privacy Commissioner of Canada, an applicable provincial regulator, or an applicable U.S. authority.