What happens to your data, in plain words.
Where your data is, how we keep it safe, how long we keep it, and what to do when you see something wrong. The full details are in the privacy statement and the terms.
Your data.
- Stored in EuropeYour project database runs in Frankfurt. Sites, files and the data of your apps are stored in the European Union.
- Where it leaves EuropeThe language model, telephony and card payments also use suppliers in the United States, and sites and apps are served from close to each visitor. Only as far as needed, and under the safeguards the GDPR requires.
- AI that stays in EuropeCalls, chats and agents on a language model that runs in Europe. On request for Enterprise, not yet available to everyone.Limited availability
- Yours, not oursFor the calls, texts and chats in your project, you decide and we process on your behalf.
- Not used for trainingWe don't use the calls and chats in your project to train AI models.
- Yours to takeIf you leave, your site and your data go with you.
Agreements.
For the data in your project we are your processor, under article 13 of the terms. The data processing agreement is available from hello@hypamoon.com.
Customers in the United States are also covered by the U.S. data processing addendum: we act as your service provider, never sell or share the data and only use it to run the service. People in the United States can read what we do with their own data in the privacy statement.
Security.
- Encrypted connectionsEvery connection, everywhere.
- One project, its own dataWhich data a project may see is decided on the server, never by what a browser or app sends.
- Secrets as a hashKeys, codes and tokens are stored only as a hash. Your chat holds one key; the keys of the services underneath never pass through it.
- Checked before it goes liveSites, links and code are checked for misuse before they are published.
- Caps on everything you pay forCalls, texts and other usage stop at the cap you set.
- A person decidesA person at Hypamoon reviews any decision that blocks an account, and you can ask us to reconsider.
- Found a vulnerability?Tell us at security@hypamoon.com. Our security page says what is in scope and what we promise.→
Report misuse.
See a site, number or message on Hypamoon that looks like phishing, fraud or spam? Report it and we'll look into it. Every free site carries a report link in its badge, and abuse@hypamoon.com takes everything else. How we handle reports says what we do and how fast.
We keep the email and IP address of whoever reports only as a keyed hash, for 30 days, so we can spot repeated reports without knowing who sent them.
Uptime.
We aim for 99.9% uptime on every plan. On Business it is in writing, in the SLA, with support within 4 business hours. Something not working? Our support page says how to reach us and what to include.
Live status, uptime over the last 90 days and every incident are on status.hypamoon.com. It checks every part of Hypamoon once a minute.
How long we keep it.
A daily job deletes data automatically on this schedule. The full list is in the privacy statement.
- Call transcripts and summaries
12 months - Call recordings, only if you switch them on
90 days - Texts and chats
12 months - Events from the phone network
60 days - Invoices and what is on them
7 years, as the law requires
Everything else: as long as you're a customer.Privacy statement →
Questions about your data?
Email hello@hypamoon.com. We reply within a month, usually much sooner.