Privacy Policy

Hyperspace Enterprises (“Hyperspace,” “we,” “us,” or “our”) is a professional services firm that helps startup founders launch, grow, and scale their businesses, with a focus on back-office operations including compliance, accounting, and human resources.

This Privacy Policy applies to our website at hyperspace-enterprises.com and our client portal at portal.hyperspace-enterprises.com (the “Command Center”). It explains how we collect, use, and protect information about you when you interact with our services.

We collect information in the following ways:

Account and identity information. When you or your organization accesses the Command Center portal, we collect your name, email address, and role within your organization, provided through our authentication provider.

Business and compliance information. As part of our services, we maintain records related to your business's compliance status, filings, and operational milestones. This information is provided by you or your authorized team members.

Financial data. Where you authorize us to connect to your accounting software (see Section 3), we receive and store summarized financial information about your business. We do not collect personal financial information such as personal bank account numbers, credit card numbers, or personal tax identification numbers.

Usage data. We collect standard web server logs including IP addresses, browser type, pages visited, and timestamps when you access our website or portal. This information is used for security monitoring and service improvement.

The Command Center integrates with Xero (xero.com), a cloud-based accounting platform, to allow authorized Hyperspace staff to monitor your business's financial health on your behalf.

What we access from Xero

With your explicit authorization, we request read-only access to the following data through the Xero API:

• Profit and loss reports (monthly summaries)
• Bank summary reports (cash position)
• Organization name and connected entity details

How authorization works. Access to your Xero account is established through the Xero OAuth 2.0 protocol. You (or an authorized account holder) must actively grant permission — we cannot access your Xero data without this step. Authorization can be revoked at any time through your Xero account settings under Connected Apps, or by contacting us directly.

What we store. We store monthly snapshots of your profit and loss figures and cash balance, derived from your Xero data. We do not store raw transaction-level records or complete ledger data. Your Xero access credentials (OAuth tokens) are stored in encrypted form using industry-standard secrets management and are never stored in plaintext.

Purpose. This financial data is used exclusively to provide you and your Hyperspace team with a consolidated view of your business's financial health within the Command Center. It is not used for advertising, profiling, or shared with third parties beyond those described in Section 5.

Revoking access. You can revoke Hyperspace's access to your Xero account at any time by visiting Xero's Connected Apps settings and removing the Hyperspace Enterprises connection. Upon revocation, we will cease pulling new data. Retained snapshots remain subject to our data retention policy (Section 7).

We use the data we collect to:

• Deliver and maintain the Command Center portal and related services
• Monitor your business's compliance status and financial health on your behalf
• Communicate with you about your account, service changes, or required actions
• Improve and troubleshoot our platform
• Fulfill our legal and contractual obligations
• Detect and prevent unauthorized access or fraud

We do not sell your personal data. We do not use your data to train artificial intelligence models.

We share data only with the following categories of parties, and only as necessary:

Service providers.

We use trusted cloud infrastructure providers (database, authentication, and application hosting) to operate our services — your data is stored and processed in the United States. We also work with:

• Xero — as described in Section 3, financial data is retrieved from Xero on your behalf through their API.

Our team. Authorized Hyperspace Enterprises staff access your data as part of delivering services to you under our client agreement.

Legal requirements. We may disclose data if required by law, regulation, or valid legal process, or to protect the rights and safety of Hyperspace, our clients, or the public.

We do not share your data with advertisers, data brokers, or unrelated third parties.

We take reasonable technical and organizational measures to protect your data against unauthorized access, loss, or misuse. These include:

• Encryption of data in transit using TLS
• Encryption of sensitive credentials (including OAuth tokens) at rest using secrets management infrastructure
• Role-based access controls limiting which team members can access client data
• Authentication requirements for all portal access

No method of transmission or storage is completely secure. If you believe your account or data has been compromised, please contact us immediately at the address in Section 11.

We retain your data for as long as we maintain an active service relationship with you or your organization, plus a reasonable period afterward to fulfill legal and contractual obligations.

Financial snapshots derived from Xero are retained for the duration of your engagement with Hyperspace and up to seven years thereafter, consistent with standard accounting record-keeping requirements.

Upon termination of our relationship, you may request deletion of your data (subject to any applicable legal retention requirements) by contacting us at the address in Section 11.

Depending on where you are located, you may have certain rights regarding your personal data, including:

• Access — the right to request a copy of the personal data we hold about you
• Correction — the right to request correction of inaccurate or incomplete data
• Deletion — the right to request deletion of your data, subject to legal retention requirements
• Restriction — the right to request that we limit how we use your data
• Portability — the right to receive your data in a structured, machine-readable format
• Objection — the right to object to certain types of processing

Residents of California have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to opt out of the sale of personal information (we do not sell personal information).

To exercise any of these rights, please contact us using the details in Section 11. We will respond within 30 days.

Our website and portal use cookies and similar technologies for the following purposes:

• Essential cookies — required for authentication and secure session management. These cannot be disabled without preventing you from using the portal.
• Security cookies — short-lived tokens used to protect against cross-site request forgery during authentication flows (including Xero OAuth).

We do not use advertising or tracking cookies. We do not place third-party advertising cookies.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. If changes are material, we will notify active clients by email at least 14 days before the changes take effect.

Your continued use of our services after changes take effect constitutes acceptance of the updated policy.

If you have questions, requests, or concerns about this Privacy Policy or how we handle your data, please contact us:

Hyperspace Enterprises
Privacy inquiries: hello@hyperspace-enterprises.com
Website: hyperspace-enterprises.com