Privacy Policy

1. Who is responsible for your data

This policy covers hyperflowlabs.fr and the customer area at dashboard.hyperflowlabs.fr (together, the "Site").

The data controller is NG SCALE, a sole proprietorship registered in France under number 837 584 689, 311 Allée des Escalettes, 13300 Salon-de-Provence, France.

For any question about this policy or your data, write to contact@hyperflowlabs.fr.

Because we are established in France, the EU General Data Protection Regulation (GDPR) applies to our processing. If you live in California or another US state with a comprehensive privacy law, section 8 sets out the additional rights you have.

2. What we collect

We collect the following categories of personal information:

• Identifiers: name, email address, and the billing address you enter at checkout.
• Commercial information: the plan you bought, order history, promo codes used, invoices, and, for businesses, company name and VAT number.
• Payment information: processed directly by Stripe. We never receive or store your full card number. We receive the transaction result and the last digits of the card.
• Internet and device activity: IP address, browser and device type, pages viewed, referring URL, and interactions with the Site.
• Marketing attribution data: the campaign, source, and medium that brought you to the Site, stored in a first-party cookie (hf_ft) for up to 180 days.
• Content you send us: the message, subject, and contact details you submit through the contact form or by email.

We do not knowingly collect information from anyone under 16, and the Site is not directed at children. We do not collect sensitive personal information as defined by California law.

3. Where it comes from

Directly from you (checkout, contact form, your Account), automatically from your browser as you use the Site (cookies and similar technologies), and from our payment processors when they confirm a transaction.

4. Why we use it

5. Cookies and tracking

The Site uses:

• Necessary cookies, for the checkout flow, your language preference (hf_locale), and security. These cannot be switched off.
• Analytics, through Google Analytics 4 and Vercel Analytics, to measure traffic and page performance.
• Advertising, through the Meta (Facebook and Instagram) pixel and the TikTok pixel, to measure the results of our campaigns and to show relevant ads.

You can block or delete cookies through your browser settings. Doing so may affect how parts of the Site work. You can also opt out at the source through each platform: Google Analytics offers a browser opt-out add-on, and Meta and TikTok provide ad preference controls in your account settings on those platforms.

6. Who we share it with

We do not sell your personal information for money. We share it with the following categories of recipients, who act as our processors or, for advertising platforms, as independent or joint controllers:

• Hosting and infrastructure: Vercel Inc. (United States).
• Payments: Stripe, Inc. (United States).
• Transactional email: Postmark (ActiveCampaign, LLC, United States).
• Bot protection: Cloudflare, Inc. (United States), for the contact form.
• Analytics and advertising: Google, Meta Platforms, and TikTok.
• Authorities, where we are legally required to disclose information, or to establish or defend legal claims.

Sharing personal information with advertising platforms for cross-context behavioral advertising counts as "sharing" under California law. See section 8 for how to opt out.

7. International transfers

Several of our providers are located in the United States, so your data may be transferred outside the European Economic Area. Where that happens, the transfer is covered by appropriate safeguards, in particular the European Commission's Standard Contractual Clauses or, where applicable, the provider's certification under the EU-US Data Privacy Framework.

8. Your rights

8.1 If you are in California

Under the California Consumer Privacy Act as amended by the CPRA, you have the right to:

• Know what personal information we have collected, the categories of sources, the purposes, and the categories of third parties we disclose it to;
• Access a copy of the personal information we hold about you;
• Delete your personal information, subject to legal exceptions such as our obligation to keep invoices;
• Correct inaccurate personal information;
• Opt out of the sharing of your personal information for cross-context behavioral advertising;
• Not be discriminated against for exercising any of these rights. We will not deny you the Theme, charge you a different price, or give you a lower level of service.

To opt out of sharing, or to exercise any other right, email contact@hyperflowlabs.fr with the subject line "Privacy request". We will confirm receipt within 10 business days and respond within 45 days, extendable once by a further 45 days where necessary. You may use an authorized agent, in which case we will ask for proof of their authority.

We have not sold personal information for monetary value in the preceding twelve months. We have shared internet and device activity with advertising platforms for cross-context behavioral advertising, as described in sections 5 and 6.

8.2 If you are in the European Economic Area or the United Kingdom

You have the right to access, correct, erase, restrict, and object to the processing of your personal data, the right to data portability, and the right to withdraw your consent at any time where processing is based on consent. You also have the right to lodge a complaint with a supervisory authority, in France the CNIL (www.cnil.fr).

8.3 Other US states

If you live in a state with a comprehensive privacy law, such as Colorado, Connecticut, Virginia, Texas, or Oregon, you have comparable rights to access, correct, delete, and obtain a copy of your personal data, and to opt out of targeted advertising. Use the same contact address above. If we decline your request, you may appeal by replying to our decision, and we will respond within 60 days.

9. How long we keep it

• Account and purchase data: for the duration of our relationship, then archived for the periods required by law.
• Invoices and accounting records: 10 years, as required by French commercial law.
• Prospecting data: up to 3 years from your last contact with us.
• Attribution cookie (hf_ft): 180 days.
• Language preference (hf_locale): 1 year.
• Contact form messages: 3 years from the last exchange.

We may keep data longer where necessary to establish, exercise, or defend legal claims.

10. Security

We apply reasonable technical and organizational measures to protect your data, including encryption in transit, access controls, and the use of established providers for payments and hosting. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Changes to this policy

We may update this policy. The last updated date at the top of the page tells you when. If we make a material change, we will take reasonable steps to inform you.

12. Contact

NG SCALE
311 Allée des Escalettes
13300 Salon-de-Provence, France
contact@hyperflowlabs.fr