In short
We enhance your image - we never harvest your identity. From the moment a selfie is uploaded to the moment it's deleted, the data exists for one purpose: creating the headshot set you asked for. Photos are never used to train general models, never sold, and deleted on request. The plain-language summaries here orient you; the numbered sections are the policy.
01
Introduction
This Privacy Policy explains how HYPERZ AI B.V. ("HYPERTURE", "we", "us") collects, uses, shares, and safeguards personal data when you use HYPERTURE, our AI photo studio for B2B teams. It applies to our website, the studio application, and related services.
We've written it to be read. Where a topic also appears in our Data Processing Addendum - which governs personal data we process on behalf of a customer - that document gives the detailed terms.
02
Who we are
HYPERTURE is operated by HYPERZ AI B.V., a company registered in the Netherlands. For personal data we determine the purposes and means of processing, we act as the data controller. For personal data we process on behalf of a customer team, we act as a data processor (see section 12).
03
Data we collect
We collect data you provide, data created when you use the service, and a limited amount from our service providers.
You provide
Uploaded photos, brand assets, account details (name, work email, role), team and company name, and any messages you send us.
Collected automatically
Device and connection information (IP address, browser, operating system), and usage details such as which features you access. Used to run, secure, and improve the service.
Generated by the service
The headshots we produce for you and the provenance metadata signed into each image.
04
Photos & biometric data
The photos you upload are facial images. Depending on how they are used, they may constitute biometric or special-category data under the GDPR. We process them only to generate and verify that person's headshot set, on the basis of the consent each person gives at upload and the agreement with your organization.
A person can withdraw consent at any time. Withdrawing consent stops further processing of their photos and, on request, deletes them, without affecting processing that already took place.
05
How we use data
We process personal data to:
- Provide the service - generate, verify, and deliver headshots, and run team management and review flows. (Performance of a contract; consent for facial images.)
- Keep the service secure and prevent abuse. (Legitimate interests.)
- Support you and respond to your requests. (Contract / legitimate interests.)
- Improve the service and understand how it's used in aggregate. (Legitimate interests.)
- Send service and, where permitted, marketing communications. (Consent / legitimate interests.)
- Comply with legal obligations. (Legal obligation.)
06
AI processing of photos
To create a set, your uploads are used to fit a private, per-person model that exists only to generate that individual's headshots. We do not use your photos or your generated images to train general-purpose or shared AI models, and we do not make them available to other customers.
The hard rule
Your photos never enter our general model-training pipeline. They are processed for your headshots, then handled under the retention rules in section 9.
07
Sharing & sub-processors
We do not sell personal data and we do not share it with advertisers or data brokers. We do use a small set of trusted service providers (sub-processors) to run HYPERTURE - for example cloud hosting, GPU compute, email delivery, payments, and product analytics. They process data only on our instructions and under written contracts.
We may also disclose data where required by law, to protect the service or our rights, or as part of a corporate transaction, in which case we'll keep your data subject to protections at least as strong as these.
08
International transfers
We host customer data on infrastructure located in the European Union. Where a sub-processor results in a transfer of personal data outside the European Economic Area, we put appropriate safeguards in place, such as the European Commission's Standard Contractual Clauses, together with supplementary measures where needed.
09
Retention
We keep personal data only as long as needed for the purposes above. Account data is retained for the life of the account. Source photos and the per-person model used to generate a set are deleted within 30 days of generating the headshots, or sooner on request.
- On demand - an administrator or member can request deletion of a member's data at any time.
- Account closure - when an account is closed, we delete or anonymize personal data within a reasonable period, subject to legal retention obligations.
10
Security
We protect personal data with technical and organizational measures including encryption in transit and at rest, role-based access controls, audit logging, and a least-privilege approach to internal access. Our team has experience building security and privacy systems for banks and government entities, and we apply that discipline here.
No system is perfectly secure, but if a personal data breach affects you, we will act and notify in line with our legal obligations.
11
Your rights
Subject to applicable law, you have the right to access, correct, and delete your personal data; to restrict or object to processing; to data portability; and to withdraw consent at any time. You also have the right to lodge a complaint with a supervisory authority - in the Netherlands, the Autoriteit Persoonsgegevens.
Where we process your data on behalf of your organization, we will refer your request to them and assist as their processor. To exercise a right, contact privacy@hyperture.ai.
12
Controller & processor roles
Because HYPERTURE is a team product, your employer or organization is usually the controller of team members' personal data, and HYPERTURE acts as its processor - processing photos and account data on the organization's documented instructions. Our Data Processing Addendum sets out those terms and forms part of the agreement with the customer.
For our own website visitors, billing, and marketing, HYPERTURE is the controller and this policy applies directly.
13
Cookies & analytics
We use essential cookies to run the service and, with your consent where required, analytics to understand how the site and product are used so we can improve them. You can manage non-essential cookies through your browser settings or our cookie controls. We do not use your uploaded photos for advertising.
14
Children
HYPERTURE is a business service intended for people aged 18 and over. We do not knowingly process the personal data of children. If you believe a child's data has been uploaded, contact us and we will delete it.
15
Changes to this policy
We may update this policy from time to time. We'll post the new version here with an updated effective date, and where a change materially affects your rights, we'll give you appropriate notice and, where required, ask for consent.
16
Contact & DPO
For questions about this policy or to exercise your rights, contact our privacy team. You can also reach our Data Protection Officer at the same address.