Privacy Notice
Document HK-LEGAL-PRIVACY-20260901-V2.1-REVIEW, updated September 1, 2026 (pending counsel review)
Pylon Film Pty Ltd (ABN 14 698 990 215; ACN 698 990 215) operates HyperKnown and is the primary Australian Privacy Act entity for the marketplace. Contact privacy@hyperknown.ai. The legal notice address is Level 2, 111 Harrington Street, The Rocks NSW 2000, Australia.
Draft -- sensitive onboarding is not open
This notice is pending privacy and counsel approval. Do not submit identity documents, likeness media, or payout information until the approved notice is published and the application confirms onboarding is available.
1. Information We Collect
We collect information you provide directly, including name, email, profile information, consent and licensing records, and identity-verification metadata. Bank-account details are transmitted to our payout provider; HyperKnown stores only the provider identifier, currency, status, and last four digits rather than the full account number. Identity documents are handled by the identity provider rather than stored in HyperKnown's application database. We also collect limited security and service telemetry such as IP address, browser type, pages viewed, and referring URLs. Creator photos, video, and voice recordings are likeness assets and may be sensitive personal information. HyperKnown does not intentionally create a local facial-geometry or voice-print template, although an identity or moderation provider may perform biometric processing under its own disclosed terms where legally permitted and expressly authorised.
2. How We Use Your Information
We use your information to operate and secure the platform; facilitate consented transactions between Creators and Brands; verify identity, authority, age and payout eligibility; prevent fraud and non-consensual likeness use; communicate about accounts and transactions; respond to privacy and safety requests; and comply with legal obligations. Creator likeness images are reviewed by an automated AI moderation check before they can be published (see Section 3). We do not use Creator Materials to train general-purpose AI models or to build reusable digital replicas, voice clones, face models, or biometric templates. Any provider-side biometric processing must be limited to the disclosed verification or safety purpose and an applicable legal basis.
3. Information Sharing
We share your information with: other users as necessary to facilitate transactions (e.g., a Brand may see a Creator's display name and portfolio); service providers acting on our instructions; and as required by law or legal process. Our current service providers include Cloudflare (hosting, storage, and content delivery), Stripe and Stripe Identity (payments, payouts, and identity/age verification — identity documents and any biometric checks are handled by Stripe under its own terms; HyperKnown does not receive or store the raw documents), SignatureAPI (electronic signing of consent and licence documents), Airwallex (international payouts), Resend (transactional email), PostHog (product analytics and error capture), Sentry (server error monitoring), a malware-scanning provider (every uploaded file is screened before release), and AI moderation providers (OpenRouter and Anthropic) — before a likeness image can be published it is automatically transmitted to an AI vision model for a content-safety review; the image is sent without your name or contact details and is not used to train AI models. Google provides sign-in (Google OAuth) and, with your marketing consent, measurement services (Google Analytics and Tag Manager); Meta and X receive the consent-gated advertising measurement described in Section 6. A live subprocessor register will be published before sensitive onboarding opens. If you join through another user's referral link, that referrer can see your display or first name and limited onboarding milestones (signup, identity verification, consent and work-ready status) needed to administer the referral offer. Referrers do not receive your email address, identity documents, payout details, IP address, device data or verification-provider records. We do not sell your personal information to third parties.
4. Data Retention
We retain personal information only while it is needed for the service, security, dispute handling, or a documented legal, tax, accounting, fraud-prevention, or legal-claims obligation. A deletion request begins an audited workflow across application data, object storage, and relevant providers. Data that can be deleted is removed or de-identified; retained records are restricted and recorded with their legal basis and review date. Provider-side identity or biometric data follows the provider's approved retention schedule and applicable law. Signed licence contracts and associated accounting records are retained for seven years under transaction-record retention obligations. Encrypted backups are not selectively rewritten: data removed from live systems may persist in access-restricted backups until those backups are replaced under the backup retention schedule.
5. Your Rights
Depending on your jurisdiction, you may have the right to access personal information, request correction or deletion, object to or restrict processing, receive portable data, and withdraw consent. An authenticated user can submit and track access, correction, erasure, restriction, or withdrawal requests in account Settings; you can also contact privacy@hyperknown.ai. We verify the requester, record the request, and respond within the period required by the law that applies to that request. Withdrawal stops new uses that rely on consent but may not invalidate a completed lawful transaction or erase records that must be retained.
6. Cookies and Tracking
We use essential cookies to operate the platform. Optional cookies and similar technologies — functional preferences, analytics and error capture (PostHog), and marketing/advertising measurement including session replay — run only after you allow them through the consent banner, wherever you are in the world. You can change or withdraw your choice at any time via the banner's Manage preferences, and record a sale/sharing opt-out at the "Do Not Sell/Share" link in our footer. Where you allow marketing cookies, we and our advertising partners (Google, Meta, X) process ad-click and conversion identifiers (such as gclid and Meta's fbp/fbc cookies) and, for Google enhanced conversions, a hashed form of your email address; analytics and measurement include your IP address, which is used for approximate geolocation. Essential cookies cannot be disabled as they are necessary for the platform to function. We honor Global Privacy Control and Do Not Track browser signals, which override any stored consent.
7. International Data Transfers
Your information may be processed in countries other than your own. Before enabling a jurisdiction or provider, HyperKnown must document the relevant transfer mechanism and vendor safeguards. Where required, this may include Standard Contractual Clauses, adequacy decisions, contractual addenda, or another legally recognised mechanism. Contact privacy@hyperknown.ai for the mechanism applicable to a particular transfer.
8. GDPR (European Economic Area)
If you are located in the EEA, our legal bases for processing include: performance of a contract (to provide the Service); legitimate interests (fraud prevention, platform improvement); consent (marketing communications, biometric processing); and legal obligation (tax reporting, law enforcement requests). You may lodge a complaint with your local Data Protection Authority.
9. CCPA (California Residents)
California residents have the right to: know what personal information is collected, used, shared, or sold; delete personal information held by businesses; opt out of the sale or sharing of personal information; and non-discrimination for exercising these rights. We do not sell personal information for money. The consent-gated advertising measurement described in Section 6 may constitute "sharing" for cross-context behavioural advertising under the CPRA; you can opt out at any time via the "Do Not Sell/Share" page linked in our footer, and Global Privacy Control signals are honored automatically. For any other request, contact privacy@hyperknown.ai.
10. Updates to This Policy
We may update this Privacy Policy from time to time. We will identify the effective date and provide the notice required by applicable law before a material change. Where a change needs new consent, continued use alone will not substitute for that consent.
11. Contact Us
For privacy-related questions or requests, contact the Privacy Team at privacy@hyperknown.ai. The data controller is Pylon Film Pty Ltd, Level 2, 111 Harrington Street, The Rocks NSW 2000, Australia (legal notices: legal@hyperknown.ai). This notice remains a pre-launch draft until counsel approval is recorded; the approved version will be published before sensitive onboarding is enabled.
For privacy inquiries, email privacy@hyperknown.ai.