Privacy Policy

1 Introduction

Welcome to Hyperion.ai, operated by Sumyati Astro Tech LLP ("we", "us", "our", or "the Company"). We are committed to protecting your privacy and ensuring that your personal information is handled responsibly, transparently, and in compliance with applicable data-protection laws.

This Privacy Policy explains how we collect, use, and safeguard personal information when you visit our website https://www.hyperion.co.in/ ("Site") or submit an enquiry or demo-request form.

Privacy requirements vary by location and context. This notice describes website and enquiry-form processing; it is not a statement that a product deployment is certified or approved under a particular insurance or data-protection regime.

2 Information We Collect

2.1 Information You Provide Directly

When you submit a contact or demo-request form, we collect the information you enter:

• Email address
• Company
• Product or enquiry type
• Optional message, including any details you choose to provide
• Illustrative P&L estimate, if you choose to include it using the estimator

You may provide your name, market or workflow details in your message or in follow-up correspondence. The form does not request policyholder information. Do not provide personal, sensitive or confidential data relating to policyholders or other individuals.

2.2 Information Collected via Third-Party Analytics and Advertising

If you allow optional tracking, the Site may load analytics or advertising measurement tags from the providers below. Their own privacy notices also apply:

• ProductLense - website analytics, if you allow analytics.
• Google Analytics via Google Tag Manager - website analytics, if you allow analytics.
• Google Ads - advertising measurement, if you allow advertising measurement.
• LinkedIn Insight - advertising measurement, if you allow advertising measurement.

Separately, video thumbnails may load from YouTube on pages with videos. The YouTube player is embedded only after you select a video to play.

See Google's Privacy Policy and LinkedIn's Privacy Policy. ProductLense information is available from the provider.

2.3 Information Collected Automatically

When you visit the Site, our server and security systems may process technical request information to deliver and protect the service. If you allow analytics, ProductLense and Google Analytics may also collect usage information such as:

• IP address and approximate geographic location (country/city level)
• Browser type, version, and operating system
• Pages viewed, time spent, and navigation paths
• Referring URL
• Device type and screen resolution
• Events such as page views and product interactions
• Time-zone information

Analytics and advertising tags are not loaded until you opt in to the corresponding category. You can change your choice at any time using Cookie settings.

3 How We Use Your Information

We use the information we collect for the following purposes only:

• To respond to your enquiries and schedule product demonstrations
• To send you information about our products, services, and updates (with your consent where required by applicable law)
• To measure advertising campaign performance, only if you allow advertising measurement
• To understand website usage, only if you allow analytics
• To comply with legal obligations applicable in the jurisdictions in which we operate
• To detect and address security incidents

4 Sharing of Information

We do not sell your personal information. We may share it only in the following limited circumstances:

4.1 Service Providers & Marketing Partners

Information may be processed by providers needed to operate the Site, store and respond to enquiries, or provide optional analytics and advertising measurement, including:

• Cloud database and hosting providers, to store form submissions and serve the Site
• Email providers, to deliver enquiry notifications
• ProductLense, if you opt in to analytics
• Google Analytics via Google Tag Manager, if you opt in to analytics
• Google Ads and LinkedIn Insight, if you opt in to advertising measurement
• YouTube, when a page requests a video thumbnail or you choose to play an embedded video

Provider processing is subject to the applicable provider terms and privacy notices. Contact us with questions about a specific provider or transfer.

4.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to a successor entity subject to equivalent privacy protections.

4.3 Legal Requirements

We may disclose your information when required by law, court order, or governmental authority, or when necessary to protect our rights, property, or the safety of others.

5 Cookies & Tracking Technologies

The Site stores your privacy choices in your browser's local storage. Optional analytics and advertising tags are not loaded unless you choose to allow them. Essential storage remembers that choice.

5.1 Essential Cookies

The Site uses local storage to remember your analytics and advertising preferences. The contact form does not require an analytics or advertising cookie to function.

5.2 Analytics Cookies

If you allow analytics, ProductLense and Google Analytics may receive page views and interaction data, together with technical information such as approximate location, browser, device and time zone. Google Analytics may use cookies or other identifiers. See Section 6 for details.

5.3 Conversion Tracking Cookies

If you allow advertising measurement, Google Ads and LinkedIn Insight tags may process information about visits and conversions. These providers may use their own storage or identifiers. See Google's Privacy Policy and LinkedIn's Privacy Policy.

Video thumbnails may be requested from YouTube when a page containing them is displayed or as you scroll to them. When you choose to play a video, your browser also connects to YouTube's privacy-enhanced embed domain. YouTube may receive technical request information.

5.4 Managing Cookies

You can accept all optional categories, reject them, or choose analytics and advertising separately in the banner. Reopen Cookie settings in the Site footer to change your choice. Clearing local storage in your browser also clears the saved preference; a new choice will then be requested. We may also request an updated choice when optional tracking providers change. If browser storage is unavailable, we cannot save your choice; check your browser settings or clear this site's data and reload.

6 Analytics & Conversion Tracking

6.1 ProductLense analytics

If you allow analytics, ProductLense receives website events such as page views, product-section views, video interactions and form events, along with technical and approximate location information. Analytics is used to understand Site usage and improve its content. See the provider's privacy information for its processing details.

6.2 Google Analytics

If you allow analytics, Google Tag Manager loads Google Analytics to measure Site visits and interactions. Google may process information such as pages viewed, referring pages, device and browser details, and approximate location. See Google's Privacy Policy for details.

6.3 Google Ads Conversion Tracking

If you allow advertising measurement, the Google Ads tag may measure campaign interactions and form conversions. We do not intentionally send the form's name, email or message fields through this tag. For more information, see Google's Privacy Policy and Google Ad Settings.

6.4 LinkedIn Insight

If you allow advertising measurement, the LinkedIn Insight tag may measure visits and conversions. LinkedIn's collection and processing is described in LinkedIn's Privacy Policy and you can manage ad preferences through LinkedIn Privacy Settings.

7 Data Retention

We retain your personal information for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required by law:

• Enquiry data is kept while it is needed to respond and for related business record-keeping. The Site's contact database does not currently enforce an automatic deletion period; contact us to request access or deletion.
• Your saved analytics and advertising preferences remain in your browser until you change or clear them.
• Optional analytics and advertising data are subject to each provider's retention settings and policies.

You may request deletion of your personal data at any time by contacting us at contact@hyperion.co.in.

8 Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS/HTTPS), access controls, and regular security reviews.

No method of transmission over the Internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. In the event of a data breach that materially affects your rights, we will notify you and relevant supervisory authorities as required by applicable law.

9 Children's Privacy

Our Site and services are directed exclusively to business professionals and adults. We do not knowingly collect personal information from anyone under the age of 13 (or under 16 in the EU / UK). If you believe we have inadvertently collected information from a minor, please contact us immediately at contact@hyperion.co.in and we will promptly delete it.

10 EU / EEA Rights (GDPR)

If you are located in the European Union or European Economic Area, the General Data Protection Regulation (GDPR) grants you the following rights:

• Right of Access - request a copy of the personal data we hold about you
• Right to Rectification - request correction of inaccurate or incomplete data
• Right to Erasure - request deletion of your personal data
• Right to Restriction of Processing - request that we limit how we use your data
• Right to Data Portability - receive your data in a structured, machine-readable format
• Right to Object - object to processing based on legitimate interests
• Right to Withdraw Consent - where processing is based on consent, withdraw it at any time without penalty

To exercise any of these rights, contact us at contact@hyperion.co.in. We will respond within 30 days. You also have the right to lodge a complaint with your local data-protection supervisory authority.

11 United Kingdom Rights (UK GDPR)

If you are located in the United Kingdom, the UK GDPR (as retained in UK law by the European Union (Withdrawal) Act 2018) grants you equivalent rights to those listed in Section 10 above. The UK supervisory authority is the Information Commissioner's Office (ICO).

To contact the ICO: ico.org.uk/concerns or call 0303 123 1113.

To exercise your rights, contact us at contact@hyperion.co.in.

12 California Rights (CCPA / CalOPPA)

CCPA - California Consumer Privacy Act

If you are a California resident, the CCPA grants you the following rights:

• Right to Know - request details about the personal information we collect and use
• Right to Delete - request deletion of your personal information (subject to certain exceptions)
• Right to Opt-Out of Sale - we do not sell your personal information
• Right to Non-Discrimination - we will not discriminate against you for exercising your CCPA rights
• Right to Correct - request correction of inaccurate personal information

Categories of Personal Information Collected (Past 12 Months)

• Identifiers and contact information (work email and company, plus any name provided in a message or follow-up)
• Commercial information (product/enquiry interest, any estimate you include, and market or workflow details provided in a message or follow-up)
• Internet or electronic network activity, if you opt in to analytics or advertising measurement

The Site does not request payment or biometric data. Do not submit sensitive or policyholder information through the contact form.

To submit a verifiable consumer request, contact us at contact@hyperion.co.in. We will respond within 45 days (extendable by a further 45 days where reasonably necessary).

CalOPPA - California Online Privacy Protection Act

• Users may visit our Site anonymously.
• This Privacy Policy is linked from our homepage footer.
• We will note material changes by updating the last-updated date on this page.
• You may request correction or deletion of your personal information by emailing contact@hyperion.co.in.

Do Not Track Signals

You can manage optional analytics and advertising measurement through Cookie settings on this Site. Browser privacy controls may also affect third-party storage and requests.

13 India Rights (DPDPA / IT Act)

As a company incorporated in India (Sumyati Astro Tech LLP, registered in Bengaluru, Karnataka), we comply with the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDPA).

Under these laws, you have the right to:

• Access, correct, and update your personal data we hold
• Withdraw consent for processing of your personal data
• Request erasure of your personal data (subject to legal retention requirements)
• Nominate a representative to exercise rights on your behalf

To exercise these rights, contact us at contact@hyperion.co.in. We will update this Policy as further rules under the DPDPA are notified by the Government of India.

14 Southeast Asia

We serve users across Southeast Asia and are committed to complying with applicable regional data-protection laws, including:

• Singapore - Personal Data Protection Act (PDPA) 2012
• Thailand - Personal Data Protection Act B.E. 2562 (PDPA 2019)
• Malaysia - Personal Data Protection Act 2010
• Philippines - Data Privacy Act 2012 (Republic Act No. 10173)
• Indonesia - Personal Data Protection Law (UU PDP) 2022

Under these laws you have rights broadly consistent with those described in Section 10, including rights to access, correct, and request deletion of your personal data. To exercise any of these rights, please contact us at contact@hyperion.co.in.

15 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the last-updated date on this page. We encourage you to review this Policy periodically. Optional tracking choices remain controlled through Cookie settings.

16 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: