Privacy policy

1. Who we are and what this covers

HiperFusion LLC provides HiperEmployee. This policy covers our website, communications with us, and HiperFusion-operated services supporting HiperEmployee, including the managed Google Drive connection. Contact info@hiperfusion.com for privacy requests and security@hiperfusion.com for security reports.

Organizations operating HiperEmployee on their own infrastructure control their employee records, assignments, uploaded files, model providers, and retention settings. Their own privacy notices and agreements also apply. This policy does not replace those notices or the privacy policies of services you connect.

2. Information we handle

• Communications and commercial information: contact details, messages, support materials you choose to provide, and information needed to administer orders and licenses.
• Website and service operations: requests, IP addresses, browser information, security events, and essential cookies used by hosting, security, and authentication services.
• Connection information: installation identifiers, registered callback addresses, authorization state, connection handles, and Google authorization tokens. Your employee installation also records the connected Google account email/display name, selected destination, and delivery receipts.

On-premises deployment does not mean every configured operation stays on-premises. Connecting an external model, email service, marketplace, or other tool sends the information needed for that operation to the selected provider.

3. Google Drive: access and purpose

The Drive integration requests the drive.file permission for files created by or explicitly made available to the app. It does not request permission to browse every file in your Drive, and connecting Drive does not grant Gmail access.

The current lead-delivery workflow identifies your Google account, checks accessible folder and file metadata and permissions, creates a dedicated leads folder, and creates or updates the employee’s lead exports as a Google Sheet or CSV. The app uses these permissions to deliver the workflow you select, including scheduled delivery when enabled.

The HiperFusion-hosted connection service exchanges authorization codes with Google and stores encrypted refresh tokens. Your installation receives an opaque connection handle and short-lived Google access tokens. The vendor’s Google client secret and Google refresh tokens are not distributed to customer installations in managed mode. Drive file operations are performed directly between the employee installation and Google; the connection service is not a document-storage service.

4. Use, sharing, and AI processing

We use information to operate requested features, authenticate connections, support customers, administer licenses, and investigate security or reliability issues. Hosting, communications, payment, and security providers may process information as needed to provide those services. Google processes requests made to its APIs under its own policies. We may disclose information when required by law or necessary to protect users and the service.

HiperFusion does not sell Google user data or use it for advertising, credit decisions, or training general-purpose AI models. Access to Google user data by our personnel is limited to your specific permission, necessary security investigations, or legal requirements. HiperEmployee’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

The managed authorization service does not send your Google tokens to a language model. Separately, an employee workflow may send task information to the model or tool providers configured by your organization. Only connect providers and assign data you are authorized to use, and review those providers’ data-handling terms.

5. Storage, retention, and security

Hosted Google refresh tokens are encrypted at rest; connection requests use HTTPS, installation authentication, and short-lived, single-use authorization transactions. No system can guarantee absolute security. Customers are responsible for securing their own installation, accounts, backups, and model/tool configuration.

We retain information for the service, support, security, and recordkeeping purposes described here, subject to applicable legal requirements. Connection records may remain until disconnected, deleted, or expired. Switching accounts or uninstalling the local application does not automatically erase every hosted connection record. Backup copies and required commercial/security records may remain after an active record is removed. Contact us to request deletion and information about the records and retention applicable to your account.

6. Disconnecting, deleting, and your choices

Use Disconnect Google Drive in the employee’s Leads page to disable that managed connection handle. Already-issued Google access tokens may remain valid until they expire. To revoke the app’s Google authorization, remove its access in your Google Account:

https://myaccount.google.com/connections

Disconnecting does not delete exported files from Google Drive or records in your employee installation. You can delete Drive exports in Google Drive and manage local records with your installation administrator. For deletion of HiperFusion-held data, access or correction requests, or questions about applicable privacy rights, email info@hiperfusion.com. We may need to verify your identity and authority before acting.

7. Other information

HiperEmployee is business software, not a service directed to children. Hosted providers may process information in countries different from your own. Contact us before using the service if your organization requires a particular processing location or a separate data-processing agreement.

We will update this page when our practices change. Material changes to Google data use will be disclosed, and additional consent will be requested where required, before using that data for a new purpose.