This Privacy Policy explains how Hypena LLC (“Hypena”, “we”, “our”) collects, uses and shares personal information when you visit hypena.com, use the Hypena platform, or otherwise interact with us. It also describes your rights under the Law of the Republic of Armenia on the Protection of Personal Data (Law No. HO-49-N).
1. Information We Collect
1.1 Information you provide
- Account data (name, email, phone, password hash, preferred locale).
- Profile data (business information for Production Partners; delivery addresses for buyers).
- Order content (artwork files, order specifications, messages exchanged with a Production Partner).
- Payment data (we never store full card numbers; details below).
1.2 Information collected automatically
- Log data (IP address, user agent, request paths and timestamps).
- Device data (operating system, browser, screen resolution).
- Cookies and similar technologies (see the Cookie Policy).
1.3 Information from third parties
- Business verification providers, where you register as a Production Partner.
- Fraud-prevention services of our acquiring bank, when a payment is assessed.
- Authentication providers, if you sign in via a social-login method (when supported).
2. How We Use Your Information
- To create and operate your account, process orders and provide customer support.
- To collect payments on behalf of Production Partners, remit them, prevent fraud and resolve complaints.
- To send transactional messages (order updates, account notices, security alerts).
- To improve and secure the Platform (performance monitoring, abuse detection).
- To comply with legal obligations (tax reporting, lawful requests).
- To send marketing communications, where you have opted in (you can opt out at any time).
3. Legal Bases for Processing
We process personal data on the bases recognised by the RA Law on the Protection of Personal Data: your consent (for non-essential cookies and marketing email), the necessity of the processing to perform our contract with you (to operate your account, process and pay for orders), and compliance with a legal requirement (tax, anti-fraud and other statutory obligations).
4. How We Share Your Information
4.1 With other users
When you place an order, we share the order details (including your name, delivery address, contact details and uploaded artwork) with the Production Partner that produces it, so it can fulfil the order and issue the fiscal receipt. Production Partners agree to handle this information confidentially under the Production Partner Agreement.
4.2 With service providers
We share information with processors that act on our instructions, including:
- Our acquiring bank (IDBank) to process card payments and refunds.
- Delivery partners (e.g. Yandex Delivery) to dispatch and track shipments.
- Cloud infrastructure (object storage, databases, observability) to operate the Platform.
- Email / messaging services (e.g. Resend, Telegram) to send transactional notifications.
- Security providers to detect abuse and scan uploaded files.
4.3 For legal reasons
We may disclose information if compelled by a binding legal request, to protect the safety or rights of a person, or to enforce our terms.
4.4 In a corporate transaction
If Hypena is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction; we will notify you of any change in ownership or material change in use of your information.
5. Where Your Data Is Stored
Personal data is processed in the Republic of Armenia. Where a service provider processes data outside Armenia (for example, an email delivery service), we do so under a contract that provides the protections required by the RA Law on the Protection of Personal Data.
6. Data Retention
We retain personal information for as long as we have an account relationship with you and for a reasonable period thereafter to satisfy legal, tax, accounting, and dispute-resolution requirements. Specific retention periods are detailed in our internal retention schedule and are available on request.
7. Your Rights
Under the RA Law on the Protection of Personal Data you have the right to:
- Access and obtain a copy of your personal information.
- Correct inaccurate or incomplete information.
- Delete your information (subject to legal retention obligations).
- Restrict or object to certain processing.
- Withdraw consent at any time (without affecting prior lawful processing).
- Lodge a complaint with the Personal Data Protection Agency of the RA Ministry of Justice.
To exercise these rights, email [email protected]. We respond within the timeframes set by the RA Law on the Protection of Personal Data.
8. Children
The Platform is not directed at children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact [email protected] so we can delete it.
9. Security
We use industry-standard administrative, technical, and physical safeguards to protect your personal information, including encryption in transit and at rest, virus scanning on uploaded files, role-based access controls, and audit logging. No system can be guaranteed 100% secure, but we work continuously to reduce risk.
10. Changes to This Policy
We will update this Privacy Policy from time to time. Material changes will be announced in-app or by email at least 14 days before they take effect.
11. Contact
Data-protection enquiries: [email protected]. Our operating address and full contact details are set out under “Company & contact details” at the foot of this page.