Privacy Policy

Welcome to Hypp, a technology enabled Creator Media Exchange owned and operated by Editorji Technologies Private Limited, a company incorporated under the Companies Act, 2013 and having its registered office at 01st Floor, Khasra No. 360, M.G. Road, Sultanpur, New Delhi – 110030, India ("Hypp", "we", "our" or "us"). Hypp enables Brands, Creators and Agencies to connect, collaborate, manage and participate in creator-led marketing campaigns through a unified digital platform.

At Hypp, we are committed to protecting your privacy and handling your Personal Data responsibly and transparently. This Privacy Policy explains how we collect, use, store, share, disclose and otherwise process your Personal Data when you access or use our platform and related products, features and services (collectively, the "Platform").

This Privacy Policy applies to all individuals who access, browse, register, communicate with us or otherwise use the Platform, including Brands, Creators, Agencies and other Users.

Please read this Privacy Policy carefully before using the Platform. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. Where your consent is required under Applicable Laws for the processing of your Personal Data, such consent will be obtained through the Platform or other appropriate mechanisms made available by us. This Privacy Policy should be read together with our Terms of Use and our Cookie Policy, which govern your use of the Platform.

By accessing or using the Platform, creating an Account or otherwise providing your information to us, you acknowledge that you have read and understood this Privacy Policy and, to the extent permitted or required under Applicable Laws, consent to the collection, use, storage, disclosure and other processing of your information as described in this Privacy Policy. If you do not agree with this Privacy Policy, you should discontinue your use of the Platform.

For the purposes of this Privacy Policy, unless the context otherwise requires:

• "Applicable Laws" means all applicable laws, rules, regulations, governmental orders and legally binding requirements relating to privacy, data protection, information security and cybersecurity, including the Digital Personal Data Protection Act, 2023, any other applicable laws in the jurisdictions where the Platform is made available and any amendments or successor legislation thereto.
• "Personal Data" means any data about an individual who is identifiable by or in relation to such data and shall include any information recognised as personal data under Applicable Laws.
• "Processing" means any operation or set of operations performed on Personal Data, whether by automated means or otherwise, including its collection, recording, organisation, storage, use, analysis, retrieval, consultation, disclosure, sharing, transfer, transmission, alignment, restriction, deletion, anonymisation or destruction.
• "User", "you" or "your" means any individual or entity that accesses or uses the Platform, including Brands, Creators, Agencies and other authorised users.

Unless otherwise defined in this Privacy Policy, capitalised terms shall have the meanings assigned to them in the Terms of Use.

The information we collect depends on how you interact with the Platform, the features you use and the information you choose to provide. We may collect information from the following sources:

Information You Provide

When you create an Account, participate in Campaigns, communicate with us or otherwise use the Platform, we may collect:

• (a) Account Information, including information required to create, access and manage your Account;
• (b) Profile Information, including profile details, professional information, social media information and any other information you choose to include in your profile;
• (c) Business Information, including information required to establish, verify or administer or facilitate commercial engagements for a Brand or Agency account;
• (d) Verification Information, including information or documents required to verify your identity, eligibility, authority or compliance with Applicable Laws;
• (e) Payment Information, including payment method details, bank account information, billing information, transaction details, payout information, tax-related information and other information reasonably required to facilitate payment processing, Creator payouts, refunds, chargebacks, tax compliance or other financial services made available through the Platform;
• (f) Campaign Information, including Campaign Briefs, campaign submissions, pricing information, deliverables, communications and other information relating to Campaigns;
• (g) Communications, including enquiries, customer support requests, feedback, survey responses and any other information you voluntarily share with us; and
• (h) Any Other Information that you voluntarily choose to submit or otherwise make available through the Platform.

Information Collected Automatically

When you access or use the Platform, we may automatically collect certain information, including:

• (a) device, browser and operating system information;
• (b) IP address and approximate location derived from such IP address;
• (c) log files, diagnostic information and system activity;
• (d) information relating to your interaction with the Platform, including pages visited, features accessed, session activity and usage patterns; and
• (e) information collected through cookies and similar technologies, as described in our Cookie Policy.

Information Received from Third Parties

We may receive information relating to you from third parties, including:

• (a) third-party authentication providers where you choose to sign in using supported authentication services;
• (b) authorised payment gateways, banking partners and other payment service providers in connection with payment processing, verification, settlement, refunds, chargebacks or payout services, where applicable;
• (c) publicly available sources, including publicly accessible social media profiles and other publicly available information relevant to Campaign facilitation;
• (d) Brands, Agencies, Creators or other Users where reasonably necessary to facilitate Campaigns or provide Platform services; and
• (e) service providers, business partners or other third parties who assist us in operating, maintaining, securing or improving the Platform.

You are responsible for ensuring that the information you provide to us is accurate, complete and kept up to date. Where your information changes, you should promptly update your Account or notify us so that we may maintain accurate records.

Where you provide information relating to another individual, you represent that you are duly authorised to provide such information and that such disclosure complies with Applicable Laws.

We use the information we collect only for lawful purposes connected with the operation of the Platform and in accordance with Applicable Laws. Depending on how you interact with the Platform, we may use your information to:

• (a) create, verify, administer and manage your Account and provide you with access to the Platform;
• (b) authenticate your identity and maintain the security and integrity of the Platform;
• (c) facilitate Campaigns and commercial engagements, including enabling Brands, Creators and Agencies to create, participate in, administer, manage and optimise Campaigns through the Platform;
• (d) facilitate communications and collaborations between Users in connection with Campaigns;
• (e) verify your eligibility, authority or compliance with applicable Platform requirements;
• (f) facilitate payment processing, payment verification, Creator payouts, refunds, reversals, chargebacks, tax compliance and other payment-related services, where such functionality is available;
• (g) communicate with you regarding your Account, Campaigns, Platform updates, customer support requests, security notifications and other service-related matters;
• (h) respond to your enquiries, feedback, complaints and requests;
• (i) monitor, analyse, maintain, troubleshoot, improve and optimise the functionality, performance, security and user experience of the Platform;
• (j) detect, investigate and prevent fraud, unauthorised access, abuse, security incidents and other unlawful or prohibited activities;
• (k) comply with Applicable Laws, regulatory requirements, legal processes or lawful requests from governmental authorities;
• (l) establish, exercise or defend legal claims, enforce our Terms of Use, Privacy Policy, Cookie Policy or other Platform policies;
• (m) generate aggregated or anonymised information for analytics, research, reporting, product development and other legitimate business purposes, provided that such information does not identify you;
• (n) provide, support, evaluate and improve AI Features, including processing prompts, inputs, outputs and related interactions submitted by Users in accordance with this Privacy Policy; and
• (o) conduct account verification, fraud prevention, risk assessment, payment reconciliation, dispute resolution and compliance checks in connection with the Platform and its services;
• (p) conduct internal audits, business planning, quality assurance and operational reporting;
• (q) develop, test and evaluate new products, services and Platform features;
• (r) carry out any other purpose for which the information was collected, or any purpose that is compatible with such purpose or otherwise permitted or required under Applicable Laws.

Where required under Applicable Laws, we will seek your consent before using your information for a purpose that is materially different from the purpose for which it was originally collected.

We do not sell your Personal Data. We may share your information only where it is necessary to operate the Platform, facilitate Campaigns, comply with Applicable Laws or otherwise as described in this Privacy Policy.

We may share your information with:

• Other Users, where reasonably necessary to facilitate Campaigns, commercial engagements or other Platform services. For example, information may be shared between Brands, Creators and Agencies participating in the same Campaign or commercial engagement.
• (b) Service Providers, including third-party vendors who assist us in operating, hosting, maintaining, securing, supporting or improving the Platform. Such service providers are authorised to process information only on our behalf and for the purposes for which it is disclosed.
• (c) Payment Service Providers, including authorised payment gateways, banking partners and other payment service providers, where payment functionality is available, for the purpose of facilitating payment processing, verification, settlement, Creator payouts, refunds, reversals, chargebacks, fraud prevention and compliance with Applicable Laws.
• (d) Artificial Intelligence Service Providers, where you choose to use AI Features made available through the Platform. Information, prompts, inputs and outputs submitted through such AI Features may be processed by authorised third-party AI service providers solely for the purpose of generating responses, improving the functionality of the AI Features and supporting the operation of the Platform, in accordance with this Privacy Policy and Applicable Laws.
• (e) Professional Advisors, including auditors, accountants, legal advisors and other consultants engaged by us in connection with our business operations, subject to appropriate confidentiality obligations.
• (f) Government Authorities and Law Enforcement Agencies, where disclosure is required to comply with Applicable Laws, court orders, regulatory requirements or lawful requests from competent authorities, or where necessary to establish, exercise or defend legal rights.
• (g) Business Transfers, where we are involved in a merger, acquisition, restructuring, financing, sale of assets or other corporate transaction. In such circumstances, your information may be disclosed or transferred as part of the transaction, subject to applicable confidentiality and legal obligations.
• (h) With Your Consent, where you have expressly authorised us to share your information for a specific purpose.
• (i) Group Companies and Affiliates, including our parent company, subsidiaries, affiliates or other entities within our corporate group, where reasonably necessary for internal administration, Platform operations, customer support, legal compliance, fraud prevention, business management or other legitimate business purposes, subject to appropriate confidentiality obligations.

Where reasonably practicable, we require third parties receiving your information to process it only for the purposes for which it was disclosed, implement appropriate technical and organisational security measures, and comply with Applicable Laws and their contractual obligations.

Third-Party Services

The Platform may contain links to or integrate with third-party websites, applications or services that are not owned or controlled by Hypp. This Privacy Policy does not apply to such third-party services. We encourage you to review their respective privacy policies before providing any information to them.

Hypp may make available artificial intelligence powered features ("AI Features") to assist Users in creating, refining or editing Campaign Briefs and other content made available through the Platform.

Where you choose to use the AI Features, we may process the information, prompts, instructions, inputs and outputs submitted by you for the following purposes:

• (a) generating AI assisted responses and content requested by you;
• (b) operating, maintaining, monitoring and improving the AI Features and the Platform;
• (c) detecting, preventing and investigating misuse, abuse, security incidents or unlawful activities involving the AI Features;
• (d) complying with Applicable Laws and responding to lawful requests from competent authorities; and
• (e) improving the quality, reliability, performance and safety of the AI Features.

The AI Features may be supported by authorised third-party artificial intelligence service providers. By using the AI Features, you acknowledge that the information submitted through such features may be processed by such service providers in accordance with this Privacy Policy and Applicable Laws.

Users should avoid submitting confidential, sensitive or third-party personal information through AI features unless necessary for the intended purpose and authorised under applicable laws. Users remain responsible for reviewing and verifying all AI generated content before using, publishing or relying upon it. AI generated content may contain inaccuracies or may not be suitable for every Campaign or purpose.

Where reasonably practicable, we may aggregate, anonymise or deidentify information processed through the AI Features for analytics, research, security, product development and service improvement purposes.

We use cookies and similar technologies to operate, secure and improve the Platform, personalise your experience, remember your preferences and understand how the Platform is used.

The use of cookies and similar technologies is governed by our Cookie Policy, which forms part of this Privacy Policy.

Where required by Applicable Laws, we will provide you with appropriate cookie notices, consent mechanisms and preference management options. You may also manage certain cookie preferences through your browser or device settings, although disabling certain cookies may affect the functionality or performance of the Platform.

Data Retention

We retain your information only for as long as reasonably necessary, taking into account the nature of the information, the sensitivity of the information and our legal obligations, to fulfil the purposes described in this Privacy Policy, provide the Platform and its services, facilitate payments and commercial engagements, comply with Applicable Laws, resolve disputes, prevent fraud, enforce our agreements and protect our legal rights.

The period for which we retain information may vary depending on the nature of the information, the purpose for which it was collected, applicable legal or regulatory requirements and our legitimate business needs.

We may also retain anonymised or aggregated information indefinitely for analytics, security, research and legitimate business purposes.

Where information is no longer required for the purposes for which it was collected, we will take reasonable steps to securely delete, anonymise or otherwise dispose of such information in accordance with Applicable Laws.

Please note that we may retain certain information even after your Account is closed or deleted where required to comply with Applicable Laws, complete or record payment transactions, satisfy accounting or tax obligations, resolve disputes, prevent fraud, enforce our agreements, maintain business records or protect our legal rights.

Cross-Border Data Transfers

Your personal data is primarily stored and processed within India. We do not transfer personal data to any country or territory outside India that has been restricted under applicable laws. In the event that cross-border transfer becomes necessary for specific services, we shall:

• (a) Ensure that such transfer complies with the provisions of all applicable laws;
• (b) Transfer data only to countries or territories that have not been restricted;
• (c) Ensure that adequate safeguards are in place to protect your data in the recipient country;
• (d) Obtain your explicit consent where required.

Payment-related data is stored exclusively within India in compliance with RBI data localization directives.

Your Rights

Depending on your location and the Applicable Laws, you may have some or all of the following rights in relation to your information:

Right to Access

You may request access to the information we hold about you and, where required under Applicable Laws, obtain information regarding how your information is being processed.

Right to Correction

You may request that we correct, update or complete any inaccurate or incomplete information that we hold about you.

Right to Deletion

You may request that we delete or erase your information, subject to Applicable Laws and our legal, regulatory, accounting, tax, payment processing or contractual obligations to retain certain information.

Right to Withdraw Consent

Where our processing of your information is based on your consent, you may withdraw such consent at any time. Withdrawal of consent shall not affect the lawfulness of any processing carried out before such withdrawal.

Right to Information

Where required under Applicable Laws, you may request information regarding the processing of your information.

Right to Update Preferences

You may update certain privacy preferences, communication preferences or Account information directly through the Platform, where such functionality is made available.

Right to Nominate

Where permitted under Applicable Laws, you may nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.

Right to Grievance Redressal

If you have any concerns regarding the processing of your information, you may contact our Grievance Officer or raise a complaint using the contact details provided in this Privacy Policy.

Additional Rights

Depending on your location and the Applicable Laws, you may also have additional rights, including the right to object to certain processing activities, request restriction of processing, request data portability or lodge a complaint with the relevant supervisory or regulatory authority. Where functionality is available, you may access, review and update certain Account information directly through your account settings without contacting us.

Exercising Your Rights

You may exercise any of the above rights or submit a privacy related request by contacting us using the details provided in this Privacy Policy.

To protect your information and prevent fraud or unauthorised access, we may request additional information to verify your identity before processing your request.

Where permitted or required under Applicable Laws, we may decline or limit a request where we are unable to verify your identity, the request is manifestly unfounded or excessive, compliance with the request would adversely affect the rights of another person, or where we are required or permitted to retain or continue processing the relevant information for legal, regulatory, tax, accounting, payment processing, fraud prevention or other legitimate purposes under Applicable Laws.

We will respond to your request within the timeframes prescribed under Applicable Laws.

We implement reasonable and appropriate technical, organisational and administrative measures designed to protect your information against unauthorised access, use, disclosure, alteration, loss or destruction.

Such measures may include access controls, authentication mechanisms, encryption, monitoring, secure infrastructure, periodic reviews and other safeguards appropriate to the nature of the information processed and the risks involved.

While we strive to protect your information, no method of electronic transmission, storage or processing is completely secure. Our security measures are periodically reviewed and updated. Accordingly, we cannot guarantee the absolute security of your information.

You are responsible for maintaining the confidentiality of your Account credentials and for promptly notifying us of any actual or suspected unauthorised access to your Account or any security incident affecting your use of the Platform.

The Platform is intended solely for individuals who are eighteen (18) years of age or older. We do not knowingly collect or process information from individuals under the age of 18. If we become aware that we have collected information relating to an individual below the age of 18 in violation of Applicable Laws or our policies, we may take appropriate steps to delete such information and suspend or terminate the associated Account, subject to Applicable Laws.

We may update or modify this Privacy Policy from time to time to reflect changes in the Platform, our business practices, technology, Applicable Laws or regulatory requirements.

Where required under Applicable Laws, or where any changes materially affect how we collect, use, share or otherwise process your information, we will provide appropriate prior notice through the Platform or other reasonable means and obtain your consent before such changes become effective, where such consent is required under Applicable Laws.

The "Last Updated" date at the beginning of this Privacy Policy indicates when this Privacy Policy was most recently revised. We encourage you to review this Privacy Policy periodically to stay informed about how we process and protect your information.

We may combine information collected from different sources, including information you provide directly, information collected automatically through your use of the Platform and information received from third parties, in order to provide, secure, improve and personalise the Platform, facilitate campaigns, prevent fraud and comply with Applicable laws.

If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your information, or if you wish to exercise any of your rights under Applicable Laws, you may contact us using the details below:

Editorji Technologies Private Limited Registered Office: 01st Floor, Khasra No. 360, M.G. Road, Sultanpur, New Delhi – 110030, India Email: hypphelp@hook.online

For the purposes of the Digital Personal Data Protection Act, 2023 and other Applicable Laws, Editorji has designated a Grievance Officer to address grievances and requests relating to the processing of information.

Grievance Officer Email: grievance@hook.online Address: 01st Floor, Plot-B, Khasra No. 360, M.G Road, Sultanpur, New Delhi 110030

We will endeavour to acknowledge and respond to grievances and requests within the timelines prescribed under Applicable Laws.