Privacy Policy — Hyperloop

Effective: May 1, 2026 · Last updated: May 1, 2026 · Contact: [email protected]

Hyperloop ("we," "us") provides an accounts-receivable / cash-application platform (app.hyperloop.biz) that helps businesses match incoming customer payments to their invoices. This policy explains what we collect, how we use and share it, and your choices.

1. Who this applies to

Hyperloop is a B2B service used by businesses ("customers"). This policy covers data we process about our customers, their authorized users, and the financial data our customers connect to the service.

2. Information we collect

• Account & user data: name, business email, role, and authentication data for users of the platform.
• Financial & accounting data: invoices, customers, and payments our customers sync from their ERP/accounting systems.
• Bank transaction data (via Plaid): when a customer connects their business bank account through Plaid, we receive incoming transaction data and account metadata (account name, type, and last-four "mask") for the purpose of matching payments to invoices. We request read-only access and only the Transactions product; we do not initiate payments or move funds.

3. How we use information

We use the information solely to provide the service: detecting incoming cash, matching payments to open invoices (cash application), collections workflows, reporting, and support. We do not sell personal or financial data, and we do not use it for advertising.

4. Bank data and Plaid

We use Plaid Inc. to securely connect to your financial institution. When you link an account, you interact with Plaid's flow and authorize the connection; your banking credentials are handled by Plaid and are never seen or stored by Hyperloop. Plaid's handling of your data is governed by Plaid's own privacy policy (https://plaid.com/legal/#end-user-privacy-policy). We store only an encrypted access token and the transaction/account data needed for cash application.

5. How we share information

We share data only with sub-processors that help us operate the service, under appropriate contractual protections, limited to what each requires:

• Plaid — bank connectivity and transaction data.
• DigitalOcean — cloud hosting and managed database.
• Anthropic — AI features (e.g., collections drafting), where applicable.

We may also disclose information to comply with law or protect our rights. We do not sell your data.

6. Security

We protect data with encryption in transit (TLS 1.2+) and at rest (encrypted tokens and database), role-based access controls, per-customer data isolation, and access audit logging. See our Information Security Policy for detail.

7. Data retention & deletion

We retain data only as long as needed to provide the service and meet legal/ recordkeeping obligations. Raw bank-transaction payloads are automatically purged after 90 days; connections and associated bank data are deleted when you unlink an account or on request/offboarding. See our Data Retention & Deletion Policy.

8. Your rights & choices

• Disconnect: you can unlink a bank connection at any time in the app, which removes the connection and stops data collection.
• Access & deletion: you may request access to or deletion of your personal data by contacting [email protected]. We honor applicable privacy-law rights (e.g., CCPA/CPRA) and respond within the timeframe required by law.

9. Consent

By connecting a financial account, you consent to the collection, processing, and storage of the associated data as described here and authorize the connection via Plaid.

10. Changes to this policy

We may update this policy; we will revise the "Last updated" date and, for material changes, provide additional notice.

11. Contact

Questions or requests: [email protected], Hyperloop, 42398 Barbary St, Fremont, CA 94539.