Hippo Privacy Policy

01Information we collect

Depending on the features you use, we collect:

• Account information: name, email address, login identifiers, and account preferences. If you use a third-party sign-in provider, we receive the account information that provider makes available within your permissions.
• Information you provide: uploaded documents, messages, prompts, feedback, and support requests. Documents may contain financial, insurance, legal, education, health, or household information, including information about other people.
• Connected-account information: records and associated metadata you authorize us to access through supported integrations. The connection screen explains the requested permissions.
• Service activity and technical information: IP address, browser and device information, timestamps, feature activity, diagnostic logs, and information needed to authenticate users, prevent abuse, and operate the Service.
• Payment information, if paid features are offered: payment status and transaction details supplied by our payment processor.

02How we use information

We use information to provide requested document processing and assistance; manage accounts and connections; generate responses, drafts, and reminders; provide support; communicate service changes; process authorized payments; protect the Service; diagnose technical issues; and comply with law.

We may use technical performance information and voluntary feedback to improve the Service. Uses of private documents and conversations for AI training or evaluation are addressed separately below.

We do not sell your data to third-party advertisers or provide your private documents, prompts, or AI responses to advertisers for advertising purposes.

03AI processing and human access

Hippo uses Anthropic and OpenAI as its AI providers to process content and generate responses. Information relevant to your request may be transmitted to AI service providers as part of providing the Service. Authorized Hippo personnel and providers may access information when needed for support, troubleshooting, security, or delivering requested assistance, subject to appropriate access restrictions.

Hippo uses content you submit, including your documents and prompts, and the outputs Hippo generates, to evaluate the quality of Hippo's outputs.

04When we disclose information

We disclose information only for the purposes described in this Policy, including:

• Service providers: providers of hosting, storage, authentication, AI processing, support, communications, security, and, where applicable, payments and analytics. They receive information needed for their functions, subject to applicable agreements and restrictions.
• At your direction: people, connected services, or organizations you choose or authorize us to share information with. We obtain authorization before taking external actions on your behalf within the approved scope.
• Legal and safety needs: when reasonably necessary to comply with law or valid legal process, protect rights and safety, or investigate fraud and abuse.
• Business changes: in connection with a merger, acquisition, financing, reorganization, or asset transfer, subject to applicable law and appropriate confidentiality protections. A recipient remains subject to applicable privacy commitments; any proposed new use requires appropriate notice and any legally required consent.

05Cookies and similar technologies

Hippo uses cookies or similar technologies needed for sign-in, sessions, security, and preferences. We also use analytics cookies to track how the Service is used and to measure site performance.

You can manage cookies through your browser. Blocking essential cookies may prevent parts of Hippo from working. Where required, we obtain consent before using nonessential technologies.

06Sensitive information and records about other people

Upload only the information necessary for your task and only records you have authority to share. Depending on your documents, Hippo may process health information, financial details, or other sensitive information. Where applicable law requires separate consent for sensitive-data processing, we obtain that consent before processing; acceptance of the Terms alone is not a substitute.

Hippo is intended for adults, not for children to create accounts. Adults may provide a dependent's records when legally authorized and where the relevant feature supports that use. Do not submit a child's records unless you have that authority.

07Retention and deletion

We retain personal information for as long as reasonably necessary to provide the Service, fulfill the purposes described here, and meet legal, security, and recordkeeping requirements. Retention depends on the type of information, account status, legal requirements, and operational needs.

You may request account closure and deletion at hello@itshippo.com. We will delete or de-identify information subject to applicable exceptions, such as legally required records and information needed to address fraud or disputes. Backup copies may remain temporarily until overwritten under our backup schedule and are restricted from ordinary use.

08Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information. No system is completely secure.

09Your choices and privacy rights

You may update account information, disconnect integrations, and request access, correction, or deletion by contacting hello@itshippo.com. Disconnecting an integration stops future access through that connection but does not automatically delete previously imported data.

Depending on where you live and applicable law, you may have rights to obtain a copy of your information; correct or delete it; withdraw consent; restrict certain processing; or opt out of legally defined sale, sharing, targeted advertising, or certain profiling. Where applicable, you may submit requests through an authorized agent. We will verify requests appropriately and respond within the period required by law. We will not discriminate against you for exercising applicable privacy rights.

If we deny a request and you have an appeal right, email hello@itshippo.com with 'Privacy appeal' and your original request details. We will review the appeal and explain the outcome and any available complaint process within applicable legal deadlines. You may also complain to your relevant privacy regulator or state attorney general.

Marketing messages, if offered, will include an unsubscribe method. Essential account and service messages may still be sent.

10Children's privacy

The Service is not directed to children under 18, and children may not create accounts. If we learn that a child created an account and provided personal information directly without appropriate authorization, we will take appropriate steps to remove that information and close the account. Contact hello@itshippo.com with concerns. Authorized adult uploads of dependent records are described in Section 6 and are subject to applicable law.

11Processing locations and third-party services

Third-party websites and services you use have their own privacy policies. This Policy describes Hippo's practices; it does not govern independent third-party services.

12Changes to this Policy

We will post changes with an updated effective date. For material changes, we will provide appropriate notice through email or the Service and obtain consent when required. We will not use previously collected information in a materially inconsistent way without an appropriate legal basis and any required consent.

13Contact