Privacy Policy — Hyperloop

Effective: May 1, 2026 · Last updated: May 1, 2026 · Contact: [email protected]

Hyperloop ("we," "us") provides an accounts-receivable / cash-application

platform (app.hyperloop.biz) that helps businesses match incoming customer

payments to their invoices. This policy explains what we collect, how we use and

share it, and your choices.

1. Who this applies to

Hyperloop is a B2B service used by businesses ("customers"). This policy covers

data we process about our customers, their authorized users, and the financial

data our customers connect to the service.

2. Information we collect

• Account & user data: name, business email, role, and authentication data

for users of the platform.

• Financial & accounting data: invoices, customers, and payments our

customers sync from their ERP/accounting systems.

• Bank transaction data (via Plaid): when a customer connects their business

bank account through Plaid, we receive **incoming transaction data and account

metadata** (account name, type, and last-four "mask") for the purpose of

matching payments to invoices. We request read-only access and only the

Transactions product; we do not initiate payments or move funds.

3. How we use information

We use the information solely to provide the service: detecting incoming cash,

matching payments to open invoices (cash application), collections workflows,

reporting, and support. We do not sell personal or financial data, and we do

not use it for advertising.

4. Bank data and Plaid

We use Plaid Inc. to securely connect to your financial institution. When you

link an account, you interact with Plaid's flow and authorize the connection;

your banking credentials are handled by Plaid and are **never seen or stored by

Hyperloop**. Plaid's handling of your data is governed by Plaid's own privacy

policy (https://plaid.com/legal/#end-user-privacy-policy). We store only an

encrypted access token and the transaction/account data needed for cash

application.

5. How we share information

We share data only with sub-processors that help us operate the service, under

appropriate contractual protections, limited to what each requires:

• Plaid — bank connectivity and transaction data.
• DigitalOcean — cloud hosting and managed database.
• Anthropic — AI features (e.g., collections drafting), where applicable.

We may also disclose information to comply with law or protect our rights. We do

not sell your data.

6. Security

We protect data with encryption in transit (TLS 1.2+) and at rest (encrypted

tokens and database), role-based access controls, per-customer data isolation,

and access audit logging. See our Information Security Policy for detail.

7. Data retention & deletion

We retain data only as long as needed to provide the service and meet legal/

recordkeeping obligations. Raw bank-transaction payloads are automatically purged

after 90 days; connections and associated bank data are deleted when you unlink

an account or on request/offboarding. See our Data Retention & Deletion Policy.

8. Your rights & choices

• Disconnect: you can unlink a bank connection at any time in the app, which

removes the connection and stops data collection.

• Access & deletion: you may request access to or deletion of your personal

data by contacting [email protected]. We honor applicable privacy-law

rights (e.g., CCPA/CPRA) and respond within the timeframe required by law.

9. Consent

By connecting a financial account, you consent to the collection, processing, and

storage of the associated data as described here and authorize the connection via

Plaid.

10. Changes to this policy

We may update this policy; we will revise the "Last updated" date and, for

material changes, provide additional notice.

11. Contact

Questions or requests: [email protected], Hyperloop, 42398 Barbary St,

Fremont, CA 94539.