Privacy Policy

Last updated: 12/05/2026

At BLAUMAR MEDIA LABS, S.L. (“HyperFake”), we respect your privacy and process your personal data in accordance with Regulation (EU) 2016/679 (“GDPR”), applicable national law and, where relevant, the regulations governing information society services and electronic communications.

1. Who is responsible for the processing of your data

The data controller is:

BLAUMAR MEDIA LABS, S.L.

VAT: ESB24941486

Address: Calle Colón 40, Piso 1, Puerta 1. 46004. Valencia. Spain.

Contact email: hello@hyperfake.studio

Legal and privacy contact: legal@hyperfake.studio

2. What this policy applies to

This policy applies to the HyperFake website, the SaaS platform, the back office linked to the provision of the service, contact forms, the sign-up process, brand onboarding, project creation and management, payments and our communications with you.

3. What data we process

We may process the following categories of data:

a) Account and contact data

First name, last name, email address, phone number, company, job title, country, language, login credentials and account preferences.

b) Billing and payment data

Billing address, VAT, information necessary for collections, invoices and payment history. Full card details are not stored directly by HyperFake when payment is processed through external payment providers.

c) Usage and device data

IP address, session identifiers, logs, browser, operating system, language, usage events, access date and time, technical incidents and security metrics.

d) Project data and content uploaded by the client

Brand assets, logos, brand manuals, documents, briefs, visual references, texts, audio, video, comments, feedback, change requests and materials necessary for the provision of the service.

e) Data obtained during brand onboarding

If you use the brand analysis or web scraping function on a URL provided by you, we may collect and process publicly available information from that site in order to generate an editable brand profile or “Brand DNA”, according to the product workflow.

f) Communications

Messages sent to support, forms, tickets, emails, validation responses and review comments.

4. Purposes and legal bases

We process your data for the following purposes:

a) Creating and managing your account

Legal basis: performance of the contract or the implementation of pre-contractual measures.

b) Providing the HyperFake service

Includes onboarding, brand analysis, brief generation, budgeting, validations, production, reviews, delivery and operational support.

Legal basis: performance of the contract.

c) Managing payments, invoicing and fraud prevention

Legal basis: performance of the contract and compliance with legal obligations.

d) Communicating with you about your account, projects or incidents

Legal basis: performance of the contract and legitimate interest.

e) Maintaining platform security

Includes logs, access controls, abuse detection, rate limiting and technical protection.

Legal basis: legitimate interest and, where appropriate, compliance with legal obligations.

f) Complying with legal obligations

Legal basis: compliance with a legal obligation.

g) Sending marketing communications

Only where there is a valid legal basis, usually your consent or, where permitted by law, legitimate interest in relation to existing customers for communications about similar services.

h) Non-essential cookies and similar technologies

Legal basis: consent. According to the AEPD cookie guidance, the option to reject must be offered at the same time, at the same level and with the same visibility as the option to accept.

5. Use of providers, models and third-party services

HyperFake may rely on technological and operational providers necessary for the provision of the service, including infrastructure, hosting, authentication, storage, payments, monitoring, communications and AI-assisted processing or generation systems.

The specific selection of those providers may vary at any time for technical, operational, security or business reasons.

Where such third parties access or process personal data on behalf of HyperFake, the contractual and organisational measures required by applicable law will be adopted. If processing involves international data transfers, the legally required safeguards will be applied.

6. International transfers

Your data may be processed outside the European Economic Area where necessary for the provision of the service or for the use of certain providers. In such cases, we will adopt the safeguards required by applicable law, including adequacy decisions or standard contractual clauses, as appropriate.

7. Data retention

We will retain your data only for as long as necessary for the purposes for which it was collected and, afterwards, for the periods required by applicable law.

As a general rule:

account data: while the account remains active and for the applicable legal retention periods thereafter;
contractual and project data: during the contractual relationship and for the period necessary to deal with claims;
billing data: for the applicable tax and accounting retention periods;
security logs: for as long as reasonably necessary for security, auditing and abuse prevention;
data processed on the basis of consent: until you withdraw that consent.

8. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, as well as withdraw your consent at any time where processing is based on it. You also have the right to lodge a complaint with the competent supervisory authority, in Spain the Spanish Data Protection Agency (AEPD).

To exercise your rights, write to us at: legal@hyperfake.studio

9. Security

We apply reasonable technical and organisational measures to protect personal data against loss, unauthorised access, alteration or improper disclosure. However, no system is completely invulnerable and we cannot guarantee absolute security.

10. Minors

HyperFake is not directed at minors. We do not knowingly collect personal data from minors without a sufficient legal basis.

11. Cookies

You can find detailed information in our Cookie Policy.

12. Changes to this policy

We may update this policy when our services, our providers or our legal obligations change. We will publish the current version with its date of update.