Privacy policy

hypecruise is a tool for teams to plan, review, schedule and publish posts to Facebook Pages, Instagram professional accounts, LinkedIn profiles and pages, X, and YouTube channels, currently in early access. hypecruise is a product of Xaventra (Private) Limited (“Xaventra”, “we”, “us”), which is responsible for your information under this policy. If you have any questions about this policy, email us at [email protected].

Account information. When you request early access or contact us, we receive your email address and anything you include in your message. When you have an account we store your first and last name, email address and a securely hashed password, along with the organizations and workspaces you belong to and your role in them. When you invite a teammate, we store their email address to send the invitation.

Content you create. We store what you add to hypecruise so we can publish it for you: posts, drafts, per-network versions, follow-up comments, schedules, ideas, media files (images and videos), approval decisions, feedback, each workspace’s time zone and the brand guidelines you save for a workspace.

People reviewing a shared post. If someone in your workspace shares a post with a review link, anyone who opens it can leave comments. We store the name they enter and what they write.

Connected social accounts. When you connect a social account, we receive and store:

• The account’s ID, name, username and profile picture, so you can recognize it in the app. We fetch the profile picture again from time to time so it stays current.
• Access and refresh tokens issued by the network, their expiry dates and the permissions you granted.
• Publishing results, such as the ID of each published post or comment and any error the network returned.

We never see or store the password for your social accounts. Sign-in happens on the network’s own website.

Mockup channels. If you create a mockup channel to try hypecruise without connecting a real account, we store the name, username, bio and images you enter for it. Mockup channels never connect to a social network.

Technical information. Like most online services, our servers record basic request logs (such as IP address, browser type and the time of the request) to keep the service secure and reliable.

We use the information above to:

• Provide the service: publish your posts and comments at the times you choose, run your approval workflow, and show you their status.
• Keep your connections working, for example by refreshing access tokens before they expire, and tell you when an account needs to be reconnected.
• Write or rewrite captions and hashtags when you ask us to.
• Send emails the service depends on, such as invitations, password resets, approval requests and reminders.
• Respond to early access requests and support questions, and send important notices about your account.
• Protect the service, prevent abuse and fix problems.
• Meet our legal obligations.

We do not sell your personal information, and we do not use your content or social account data for advertising.

hypecruise uses the official APIs of Meta (Facebook and Instagram), LinkedIn, X and YouTube (Google). We only ask for the permissions needed for the features you use:

• Facebook Pages: list the Pages you manage and their names and pictures, publish posts, photos and videos to the Pages you connect, and add comments to the posts we publish for you.
• Instagram: read your professional account’s basic profile, publish photos, videos and carousels, and add comments to the posts we publish for you.
• LinkedIn: read your basic profile or the pages you administer, and publish posts and comments to them.
• X: read your basic profile, upload media, and publish posts and replies.
• YouTube: read your channel’s name and picture, upload the videos you choose as Shorts, set their title, visibility, audience and thumbnail, and add the first comment you write.

We don’t read your messages, your followers, or what other people post or comment on your accounts.

Data we receive from these platforms is:

• Used only to provide the features you use in hypecruise.
• Never sold, rented or shared with data brokers or advertising networks.
• Never used to build profiles of people or for surveillance.
• Never sent to AI providers or used to train AI models.
• Handled in line with the Meta Platform Terms, the LinkedIn API Terms of Use and the X Developer Agreement and Policy.

YouTube and Google data. hypecruise’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. We use YouTube data only to provide the Shorts features you use, never for advertising, and we don’t let people read it except where needed for security, to comply with the law, or with your consent. Our AI features never receive YouTube data. Your use of YouTube is also governed by the YouTube Terms of Service and Google’s Privacy Policy.

You can remove hypecruise’s access at any time by disconnecting an account in hypecruise, or from the network itself: in Facebook under Settings & privacy → Settings → Business integrations, in Instagram under Settings → Website permissions → Apps and websites, in LinkedIn under Settings → Data privacy → Permitted services, and in X under Settings and privacy → Security and account access → Apps and sessions → Connected apps, and for YouTube at myaccount.google.com/permissions.

When you choose Generate with AI, Rewrite with AI or Generate hashtags, we send your instructions, the draft you’re working on, attached images, the target networks’ posting limits and the workspace’s brand guidelines to our AI provider, Google Gemini, to write the text. Nothing is sent unless you ask for it.

We don’t send your social account tokens, account IDs or data received from social networks. We don’t use your content to train AI models. AI suggestions only go into your post if you accept them, and you can edit them before anything is published.

We share information only in these cases:

• With the networks you publish to. When you schedule a post, we send its text, media and comments to the network at the time you choose. Once published, that content is governed by the network’s own privacy policy.
• With service providers. We use trusted providers for hosting and databases, file storage (Cloudflare), email delivery and AI text generation (Google Gemini). They process data only on our instructions to provide their service to us.
• Within your organization. Members of a workspace can see its posts, media, ideas, approvals and connected accounts. Organization admins also manage the organization’s workspaces and who belongs to them.
• With people you share a post with. Anyone with a post’s review link can see that post and its review comments until the link is turned off.
• For legal reasons. If required by law, or to protect the rights, safety and property of our users, the public or Xaventra.
• Business transfers. If Xaventra or hypecruise is involved in a merger or acquisition, in which case this policy will continue to apply to your data.

This website does not use advertising or analytics cookies. The hypecruise app uses an essential cookie to keep you signed in. It also uses your browser’s local storage to remember preferences such as your theme, the organization you last opened and which channels you’ve hidden from the calendar. These stay on your device.

We keep your information for as long as your account is active. When you disconnect a social account, we revoke hypecruise’s access with that network where it allows, and delete its access tokens straight away. We keep the account’s name and picture so your existing posts still show where they went, until you delete them or your account.

When you ask us to delete your account, we delete your personal information, connected account data, posts and media within 30 days, except where we must keep limited records to meet legal obligations. Server logs are kept for a limited period and then deleted.

You can ask us to delete your hypecruise account and all associated data, including data we received from Facebook, Instagram, LinkedIn, X or YouTube, at any time:

1. Email [email protected] from the address linked to your account with the subject “Delete my data”.
2. We’ll confirm your request and delete your data within 30 days.
3. We’ll email you once deletion is complete.

To delete only the data from one social account, disconnect it in hypecruise or remove hypecruise’s access from that network’s settings (see Data from social networks), then let us know and we’ll remove what we stored about it.

We protect your information with encryption in transit (HTTPS), hashed passwords, and access controls that limit who can reach production systems. Social account tokens are only used by our servers and are never sent to your browser. No online service can be perfectly secure, but we work hard to protect your data and will notify you if a breach affects it.

Xaventra and our service providers may process your information in countries other than the one you live in. Wherever it’s processed, we protect it as this policy describes.

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict how we use it. To exercise any of these rights, email [email protected]. We’ll respond within 30 days and won’t treat you differently for making a request.

hypecruise is a business tool and isn’t intended for anyone under 16. We don’t knowingly collect information from children. If you believe a child has given us personal information, contact us and we’ll delete it.

We may update this policy as hypecruise grows. When we make significant changes, we’ll update the date at the top of this page and let account holders know by email.

Questions, requests or concerns about your privacy? Email us at [email protected] and a real person at Xaventra (Private) Limited will get back to you.