Privacy Policy

Effective date: April 1, 2026

Hepto ("we", "us", "our") operates the hepto.ai platform. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

1. Information We Collect

We collect the following types of information:

• Account information: your name, email address, company name, and website URL when you sign up or join our waitlist.
• Shopify store data: product catalog data (titles, descriptions, images, prices) accessed through the Shopify API with your authorization to generate creatives.
• Usage data: information about how you interact with our platform, including pages visited, features used, and creatives generated.
• Performance data: engagement metrics from social media platforms (views, clicks, conversions) used to optimize your creatives.

2. How We Use Your Information

We use your information to:

• Generate AI-powered creatives from your product catalog.
• Publish and schedule content to your connected social media channels.
• Analyze performance data to improve creative recommendations.
• Communicate with you about your account, updates, and support.
• Improve and develop our platform.

3. Third-Party Services

We use the following third-party services to operate our platform:

• OpenAI: for AI-powered text, image, and video generation. Product data is sent to OpenAI's API for creative generation.
• Social media platforms: Instagram, Facebook, TikTok, Pinterest, YouTube, and Snapchat for publishing content and retrieving performance metrics.
• Shopify: for accessing your product catalog data.
• Cloudflare: for hosting and content delivery.

Each third-party service has its own privacy policy governing the use of your data.

4. Data Retention

We retain your account information for as long as your account is active. Product data and generated creatives are retained for the duration of your subscription. You may request deletion of your data at any time by contacting us. Upon account deletion, we remove your data within 30 days, except where retention is required by law.

5. Your Rights

Under applicable data protection laws (including GDPR), you have the right to:

• Access, correct, or delete your personal data.
• Object to or restrict processing of your data.
• Request data portability.
• Withdraw consent at any time.

To exercise these rights, contact us at hello@hepto.ai.

6. Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on our website and updating the effective date.

8. Contact

If you have questions about this Privacy Policy, contact us at hello@hepto.ai.