Privacy Policy

1. Scope

This Policy applies when ENTROPY BAY, S.L., operating under the commercial brand Hyponema, acts as a controller for website visitors, account users, contact form submitters, billing contacts, and workspace administrators. When Hyponema processes customer personal data on behalf of a workspace, Hyponema acts as a processor or service provider and the Data Processing Addendum applies.

2. Information we collect

• Account data: name, email, company, workspace, role, authentication events, and support messages.
• Workspace configuration: agents, prompts, provider settings, API keys in encrypted form, webhooks, phone settings, and integration settings.
• Conversation data: call metadata, transcripts, messages, audio when recording is enabled, tool calls, memory records, open threads, subject profile fields, and audit history.
• Usage and device data: IP address, browser, pages viewed, referring page, product events, latency, errors, logs, and security events.
• Billing data: wallet credits, usage, invoices, payment status, and payment processor references. Card details are handled by Stripe, not stored by Hyponema.
• Communications data: contact forms, sales messages, support requests, and email delivery events.

3. How we use information

• Provide, secure, operate, troubleshoot, and improve Hyponema.
• Run voice sessions, memory retrieval, session resume, agent controls, evals, observability, billing, compliance workflows, exports, and deletion requests.
• Authenticate users, enforce workspace isolation, prevent abuse, investigate incidents, and protect the service.
• Send service messages, security notices, product updates, invoices, support replies, and account communications.
• Analyze reliability, feature usage, conversion, latency, cost, and product quality.
• Comply with legal obligations and enforce our Terms and Acceptable Use Policy.

4. AI, memory, and provider processing

• Hyponema stores memory records and related evidence so agents can pick up where prior conversations ended.
• Customer-configured speech, model, voice, telephony, and storage providers may receive content when needed to run a session or requested workflow.
• Provider keys are envelope-encrypted before storage and decrypted only when needed to provide the service.
• Hyponema does not sell customer content and does not train a Hyponema foundation model on customer content.
• Third-party AI providers process content according to their own terms and the configuration selected by the workspace.

5. How we share information

• Service providers and subprocessors that host, secure, deliver, analyze, bill, support, or operate Hyponema.
• Customer-selected providers, carriers, tools, and integrations that the workspace connects or instructs Hyponema to use.
• Workspace members according to their roles and permissions.
• Authorities, courts, regulators, or affected parties when required by law or necessary to protect rights, safety, or security.
• Successors in a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate protections.

6. Cookies and analytics

Hyponema uses required cookies and local storage to operate the website and remember preferences. Optional analytics, including product-usage measurement and a small sample of session recordings, are off by default. In the European Economic Area and the United Kingdom we ask for your consent before any optional analytics load, and they stay off until you allow them. Elsewhere, optional analytics may load unless you decline. You can change or withdraw your choice at any time using the "Cookie settings" link in the site footer, or by controlling cookies in your browser. Some features may not work without required cookies or local storage.

7. Retention

• We keep account, workspace, billing, security, and audit records for as long as needed to provide the service, comply with law, resolve disputes, and enforce agreements.
• Conversation records, audio, memory records, traces, and exports are retained according to workspace settings, workspace limits, and product defaults.
• Deleted or forgotten subject data may remain in backups for a limited period before normal backup expiration, unless a signed agreement says otherwise.

8. Your choices and rights

• You may request access, correction, export, deletion, or restriction of personal information where applicable law gives you those rights.
• Workspace administrators can initiate subject export and forget workflows from the product where available.
• You may opt out of marketing email by using the unsubscribe link or contacting us.
• Requests can be sent to [email protected]. We may need to verify your identity or route the request to the relevant workspace customer.

9. International transfers

Hyponema may process information in the United States and other countries where we or our providers operate. Where required, we use appropriate transfer mechanisms such as standard contractual clauses or equivalent safeguards.

10. Children

Hyponema is not directed to children under 13. Customers building products for minors must obtain all required consents, provide appropriate notices, and implement safeguards suitable for that audience.

11. Contact

Privacy questions and rights requests can be sent to [email protected]. General legal questions can be sent to [email protected].