Privacy Policy

Last updated September 2, 2026

PromoHyper (“we”, “us”) is operated by Canberk Sezer. This policy explains what we collect when you use promohyper.com, why we collect it, and who it is shared with. Questions: hello@promohyper.com.

What we collect

  • Account details. Your email address, and — if you sign in with Google — your basic Google profile (name and profile picture). Authentication is handled by Supabase.
  • What you give the service. The product URL you submit, brand details, scripts, and any screenshots, screen recordings or brand guidelines you upload.
  • What the service produces for you. Scripts, voiceovers, music and the finished videos.
  • Purchase records. Order ID, plan, amount and currency. Payments are processed by Polar; we never see or store your card details.
  • Usage. Credit balance, renders and revisions — needed to run your account.
  • Analytics. Cloudflare Web Analytics, which is cookieless and does not track you across other websites.
  • Share link opens. When someone opens a link you shared from your video, we count the open and store a one-way, salted 16-character hash so we can tell a repeat visitor from a new one. That is all: no name, no IP address, no referrer, no country, no identifier of any kind, and the hash cannot be turned back into a person. Hashes are deleted after 30 days, and counting an open does not extend how long we keep your project.
  • One first-party cookie. ph_attr records which channel referred you (for example a search engine or a directory) so we know which marketing works. It contains no name, no identifier and no fingerprint, and it is never shared with anyone.
  • Essential cookies. Your sign-in session, and a two-letter country code used only to decide whether we must ask you for cookie consent. Without these you cannot stay logged in.
  • Advertising cookies — only if you agree. We advertise on Google, and we need to know which ads lead to a purchase. If you accept, Google's tag sets cookies to link your visit to the ad you clicked, and we tell Google the order value when a purchase completes. If you are in the EU, EEA, UK or Switzerland these cookies are not set unless you press Accept, and you can decline with one click — declining costs you nothing and the site works exactly the same.
  • A scrambled version of your email, at purchase — only if you agree. When an order completes, we send Google a one-way cryptographic hash of your email address (SHA-256) so it can tell that the person who clicked an ad is the person who bought — browsers now block the cookies that used to do this. Your address is scrambled inside your own browser before anything is sent: the readable address never leaves this site, and a hash cannot be turned back into an email. Google uses it only to match against its own signed-in users, then discards it. This is not sent at all if you declined cookies. We never send your name, what you typed, or anything you uploaded.

How we use it

To create and run your account, to produce the video you asked for, to take payment and track your credits, to answer your emails, to keep the service secure and prevent abuse, and to understand which marketing channels bring people here. We do not sell your data, and we do not use your content to train AI models.

We may also show videos made on the free tier, and the brand visuals in them, as examples of our work — as described in our Terms, and as stated on the screen where a free render is started. Videos you paid for are not shown publicly unless you ask. We rely on our legitimate interest in showing what the service can do, and you can object at any time by emailing us — we will remove it within 7 days.

Google user data

When you sign in with Google we request only your email address and basic profile. We use it for one purpose: to create and identify your PromoHyper account. We do not use Google user data for advertising, we do not sell it, and we do not share it with anyone beyond the service providers listed below. You can disconnect PromoHyper at any time from your Google account permissions page.

Who processes data on our behalf

We rely on specialist providers to run the service. Each receives only what it needs to do its job, and none of them may use your data for their own purposes:

  • Authentication and database providers — to create your account and store it
  • Hosting and rendering infrastructure — to run the site and produce your video
  • Content delivery, security and analytics providers — to keep the site fast and safe
  • Payment processing — handled by Polar, which acts as merchant of record for your purchase
  • Advertising measurement — Google, and only if you accepted advertising cookies: it receives that a purchase happened, its value, and a one-way hash of your email address for matching — never your readable address, your name or your content
  • AI providers for language, voice synthesis, image and video generation — to write your script, record the voiceover and design the frames
  • Stock media providers — to find licensed photos and footage when your video needs them
  • Email delivery providers — only if you join our mailing list

If you would like the current list of the specific companies behind these categories, email us and we will send it to you.

Some of these operate outside your country, including in the United States. We share your data with them only to deliver the service you requested. We never sell your data. The single exception to “only to deliver the service” is advertising measurement: if you accepted advertising cookies, Google is told that a purchase happened, what it was worth, and a one-way hash of your email so it can match the sale to the ad you clicked. That is the whole of it — no name, no readable address, no content.

How long we keep it

  • Projects and generated media: deleted automatically 30 days after your last activity on them. Download anything you want to keep.
  • Two exceptions: a video you allowed us to show as an example is kept for as long as it stays in our gallery, and a video embedded on another site is kept for as long as it is being watched there — the 30-day clock restarts on every view, so a live embed does not expire. Ask us and we will delete yours.
  • Account data: kept while your account exists.
  • Purchase records: kept as long as tax and accounting law requires.

Your rights

You can ask us to show you the data we hold, correct it, delete it, or send you a copy. If you are in the EU or UK these are your GDPR rights; if you are in Türkiye they are your KVKK rights. Email hello@promohyper.com and a real person will answer, usually within a day. Deleting your account removes your projects and profile; purchase records are kept where law requires it.

Security

Traffic is encrypted in transit. Passwords are never handled by us — sign-in goes through Supabase or Google. Payment card details never touch our servers.

Children

PromoHyper is a business tool and is not intended for anyone under 16.

Changes

If this policy changes we will update the date at the top. Significant changes will be announced by email to registered users.

Contact

Canberk Sezer · hello@promohyper.com