Hypeling Privacy Policy
Effective date: November 1, 2026
This Privacy Policy explains what personal data Hypeling collects, why we collect it, who we share it with, how long we keep it, and the rights you have. It applies to hypeling.com, the Hypeling platform, and the campaign services we run for brands during our pilot phase (together, the "Services").
1. Who we are
The Services are operated by Teqqed BV, a company registered in the Netherlands under KvK number 86839195, located at Van Kleffenslaan 5, Unit 5, 8442 CW Heerenveen, the Netherlands ("Hypeling", "we", "us"). Hypeling is the controller of the personal data described in this policy.
Because Hypeling is established in the Netherlands, the EU General Data Protection Regulation ("GDPR") applies to all of our processing, including data about people in the United States. Where US privacy laws also apply, such as California's, we follow them as well.
2. Whose data this covers
- Visitors who browse hypeling.com.
- Brands: people who work for or represent a skincare or beauty brand that uses Hypeling.
- Creators: content creators aged 18 or older, wherever they live, who send proposals to brands through Hypeling.
3. Data we collect
3.1 Data you give us
- Account data: name, email address and login details. For brands, also company name and your role.
- Creator profile: name, social media handles, country and state of residence, confirmation that you are 18 or older, the shipping address brands use to send you products, and anything else you add to your profile.
- Campaign data: briefs and budgets, notes from calls with brands during the pilot, proposals (idea, deliverables, timeline and price), messages, review decisions, links to published posts, and the public view, like and comment counts of those posts.
- Content and review: links to the content creators send for review, brands' requests for changes, and issues brands or creators raise with us.
- Communications: emails and support requests you send us.
3.2 Data from connected social media accounts. See Section 4.
3.3 Payment, identity and tax data. Payments run through Stripe (Stripe Connect). Stripe collects payment details, identity verification details and tax information (for example, a creator's Form W-9) directly from you. We do not store full card or bank account numbers. Stripe shares limited information with us, such as whether verification is complete and the status of payments and payouts.
3.4 Technical data. When you use the Services, our systems record technical data such as your IP address, browser and device type, the pages you request, and the time of each request.
4. Connected social media accounts
Creators can link their social media accounts to Hypeling using each platform's official tools:
- TikTok, by signing in through TikTok Login Kit, which gives us access to the TikTok Display API;
- Instagram (creator and business accounts), by entering your handle. We read your public profile through Meta's Instagram Graph API (Business Discovery), and you confirm the account is yours by adding a short code to your bio;
- YouTube, by entering your channel handle. We read your public channel through the YouTube Data API (YouTube API Services), and you confirm the channel is yours by adding a short code to your channel description.
What we access. For TikTok, only what you approve on TikTok's permission screen. Today that is your profile information (such as your name, handle and profile picture) and your account statistics: follower count, total likes and number of videos. For Instagram and YouTube, only information that is already public: your name, handle, profile picture, bio or channel description (to find the code), follower or subscriber count, and counts such as posts, videos or channel views. You can remove the code once your account is confirmed.
Campaign posts. When a brand books you, you or the brand add links to the posts made for the campaign. We read each post's public numbers when its link is added and then once a day for 60 days, and show them to the brand and to you: views, likes and comments for YouTube videos, and likes and comments for Instagram posts. For TikTok posts we store the link only. If we later read TikTok post numbers, we will ask for that access on TikTok's own permission screen first.
Why we use it. To verify your identity and reach, to match you with suitable campaigns, to show your statistics to brands when they consider your proposals, and to show brands how the posts made for their campaigns performed.
What we never do. We never sell this data. We do not use it for advertising, and we do not post to your accounts.
Disconnecting. You can disconnect an account at any time with the Unlink button on the account linking page (hypeling.com/apply/connect), which deletes the access token (for TikTok) and the data we stored for that account right away. For TikTok, you can also remove Hypeling's access in TikTok's app permission settings. Instagram and YouTube accounts are linked by handle, with no access to remove on the platform. When you disconnect, we stop collecting data from that account and delete the data we stored from it within 30 days, or sooner if the platform's rules require, except campaign performance figures we keep as part of our transaction records (Section 9).
Google and YouTube. Hypeling uses YouTube API Services. By linking a YouTube channel or adding a YouTube post link, you agree to the YouTube Terms of Service. Hypeling's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google's own handling of your data is covered by the Google Privacy Policy.
Data deletion instructions. These instructions are also published at hypeling.com/data-deletion. To delete your Hypeling account and the data we hold about you, including data from connected TikTok, Instagram and YouTube accounts, either:
- to remove a single connected account right away, choose Unlink next to it on the account linking page (hypeling.com/apply/connect); or
- email tim@teqqed.com from the address linked to your account, with the subject line "Data deletion request".
We confirm your request within 5 business days and complete deletion within 30 days, except data we must keep by law, such as payment and tax records (Section 9). Removing Hypeling's access in your TikTok settings stops further access but does not by itself delete data we already hold, so please also use one of the two options above.
5. Why we use data, and our legal bases
| Purpose | Legal basis under the GDPR |
|---|---|
| Create and manage accounts; run the marketplace and the pilot service; share briefs and proposals; collect, hold and release payments | Performance of our contract with you |
| Connect social accounts; verify identity and reach; match creators to campaigns; show statistics to brands; verify posts and views | Performance of our contract with you |
| Handle content reviews, requests for changes and issues brands or creators raise with us | Performance of our contract with you |
| Prevent fraud, fake engagement and abuse; keep the Services secure | Legitimate interests |
| Keep accounting and tax records; respond to lawful requests | Legal obligation |
| Send service emails, such as proposal updates and payment notices | Performance of our contract with you |
| Showcase campaign work, with the brand's permission | Legitimate interests: promoting Hypeling |
For people who work for a brand, our contract is with the company, so we rely on our legitimate interest in providing the Services to it. Where we rely on legitimate interests, we have weighed them against your rights, and you can object (Section 11).
6. Automated steps
We do not use AI services to process your data, and we make no decisions about you by automated means alone that have legal or similarly significant effects. Some campaign steps happen automatically after a set time, as the Brand Terms and Creator Agreement describe: content counts as approved when a brand does not respond within 48 hours, and payment for a post is released 48 hours after it goes live unless the brand flags a problem. Either side can ask Hypeling staff to step in at any time while the payment is held, and that pauses these steps.
7. Who we share data with
7.1 Brands and creators. When a creator sends a proposal, the brand sees the creator's profile, connected-account statistics and proposal, and later the content and post link. When a proposal is accepted, we share the creator's name and shipping address with the brand so it can send the product. Creators see campaign briefs and basic brand information.
7.2 Service providers. These companies process data for us under contract:
| Provider | What they do for us |
|---|---|
| Vercel | Website and application hosting |
| Neon | Database |
| Stripe | Payments, payouts, identity verification and tax information |
| Resend | Email delivery |
Stripe also processes some data as an independent controller, for example to meet its own identity verification and anti-money-laundering duties. Stripe's privacy policy applies to that processing.
7.3 Authorities. When the law requires it, or when needed to protect the rights, safety or property of our users or Hypeling.
7.4 A buyer or successor. If Hypeling is involved in a merger, acquisition or sale of assets, under the protections of this policy.
We do not sell personal data, and we do not share it for cross-context behavioral advertising.
8. International transfers
Hypeling is based in the Netherlands, and several of our service providers are based in the United States. Your data may therefore be stored and processed in both the EU and the US. When personal data is transferred from the EU to the US, we rely on the EU-US Data Privacy Framework where the recipient is certified under it, and otherwise on the European Commission's Standard Contractual Clauses, with additional safeguards where needed. Ask us at tim@teqqed.com for details.
9. How long we keep data
| Data | How long we keep it |
|---|---|
| Account and profile data | While your account is open, then deleted within 30 days of closure |
| Unfinished creator applications (saved step by step from the first step, so you can finish later; we may send one reminder email) | 90 days after your last activity, then deleted |
| Data from connected social accounts | Until you disconnect the account or close your Hypeling account, then deleted within 30 days, or sooner if the platform requires |
| Content links, review notes and issues | With the campaign records below |
| Campaign, payment and transaction records | 7 years, to meet Dutch tax and accounting rules |
| Messages and support requests | 2 years after the last message |
| Server logs | 90 days |
| Contact details and call notes for brands that do not become customers | 12 months after our last contact |
We may keep data longer where we need it to establish, exercise or defend legal claims.
10. Security
We use encryption in transit, access controls, and established providers with their own security programs. If a data breach affects you, we will notify you and the authorities as the law requires.
11. Your rights under the GDPR
Wherever you live, you have the right to:
- access the personal data we hold about you and get a copy;
- correct data that is wrong or incomplete;
- delete your data, unless we must keep it;
- restrict how we use your data in certain cases;
- receive data you gave us in a portable, machine-readable format;
- object to processing based on our legitimate interests;
- withdraw consent at any time, where we rely on consent; and
- complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or the data protection authority where you live.
To use these rights, email tim@teqqed.com. We may ask you to verify your identity. We respond within one month, which the law allows us to extend in some cases.
12. California privacy rights
If you live in California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the right to:
- know what personal information we collect, use and disclose, and get a copy of it;
- delete personal information we hold about you, with some legal exceptions;
- correct inaccurate personal information;
- opt out of the sale or sharing of personal information. We do not sell or share personal information, and have not done so in the past 12 months;
- limit the use of sensitive personal information. We collect account login details and, through Stripe, identity and tax information. We use these only for purposes the law allows without offering this right, such as providing the Services, security and legal compliance; and
- not be discriminated against for using these rights.
Categories collected in the past 12 months: identifiers (name, email address, social handles, IP address); customer records (shipping address, payment status); commercial information (proposals and transactions); internet activity (server logs and connected-account statistics); professional information (creator work history and brand role); and sensitive personal information (account login details, and identity and tax information collected through Stripe). Sections 3 to 7 explain the sources, purposes and recipients, and Section 9 explains retention.
To make a request, email tim@teqqed.com. You can use an authorized agent, and we will verify your identity before acting. If you live in another US state with a similar privacy law, you can make the same requests and we will handle them as that law requires.
13. Cookies
We currently use only essential cookies and similar technologies, which are needed to sign you in, keep your session secure and make the Services work. We do not use analytics or advertising cookies. Stripe may set its own essential cookies on payment forms to prevent fraud. If we add non-essential cookies later, we will update this policy and ask for your consent first.
14. Age limit
The Services are only for people aged 18 or older. We do not knowingly collect personal data from anyone under 18. If we learn that we have, we will delete it.
15. Changes to this policy
We may update this policy. We will post the new version with a new effective date. If a change is material, we will tell you by email or in the Services at least 30 days before it takes effect.
16. Contact
Teqqed BV Van Kleffenslaan 5, Unit 5, 8442 CW Heerenveen, the Netherlands KvK number: 86839195 Email: tim@teqqed.com