Version: 1.1 — Reviewed draft
Last updated: September 11, 2026
Effective date: September 11, 2026
1. Who we are
HYPHEIS Inc. operates Gabrielle and is responsible for the personal information described in this Policy. This Policy covers our website, application, newsletter, marketing communications, and customer support. Gabrielle is the product name; HYPHEIS Inc. is its operator.
2. Information we collect
Depending on how you use Gabrielle, we collect:
- Account and profile information, including name, email, profile image, and any phone number or birth date you provide.
- Professional information, such as your experience, expertise, goals, customers, projects, preferences, writing samples, and onboarding answers, together with summaries and personal-brand suggestions inferred from those materials.
- Materials you upload or create, including photographs, résumés, documents, prompts, Self profiles, generated text, and images.
- Information from sign-in providers and, when you connect supported social accounts, account identifiers, access credentials such as authorization tokens, and content or performance information made available through the permissions you grant.
- Communications, including support requests, feedback, newsletter subscriptions, and marketing preferences.
- Technical and usage information generated when you access the service, such as IP address, browser and device information, page interactions, access events, and error records.
Please upload other people’s information only when you are authorized to do so. Avoid including passwords, financial account credentials, government identification numbers, or unnecessary sensitive information in your prompts and files.
3. How we use information
We use information to operate your account; personalize your experience; analyze materials you provide; generate and edit content and images; provide authorized social features; respond to support requests; understand and improve the service; protect against misuse; and meet legal obligations. The separate restrictions below apply to information obtained through LinkedIn; our general service-improvement and personalization purposes do not override them.
4. AI processing
Gabrielle uses Google’s Gemini API for AI features. Depending on the feature, we send relevant text, professional information, prompts, photographs, reference images, or uploaded documents to Google for processing. Some features send the original file or image, rather than only a summary. Generated results may be saved in your Gabrielle account.
Google processes these requests outside Gabrielle’s own application storage. Under Google’s paid Gemini API terms, inputs and outputs are not used to improve Google products, although limited security, abuse-prevention, and legally required retention may still apply. This protection depends on requests using a project with active billing and on applicable data-sharing settings; it is not a claim that Google retains no data. See the Gemini API terms.
Using information to generate your personalized results is distinct from training a general-purpose AI model. This Policy does not grant blanket permission to use your private uploads for such training. Any material change in our use of that information will be disclosed, with consent obtained where required. The LinkedIn restrictions below also apply to AI processing.
5. Storage and service providers
We use Supabase for application records and Google Firebase services for authentication, hosting, and file storage. We also use providers that support AI processing and communications. Relevant information is disclosed to providers as needed to perform these services. This general provider disclosure does not authorize transfers prohibited by a connected platform’s terms.
We may disclose information when you direct us to, when legally required, to address fraud or security threats, or in connection with a business transfer subject to appropriate protections.
6. Social connections
When you use an available social integration, we process information within the permissions you authorize to provide publishing and performance features. Content you publish is subject to the destination platform’s visibility settings and policies. You can revoke authorization through that platform and contact us to request deletion of information held by Gabrielle.
For LinkedIn integrations, use is limited to authorized profile or Page management and related performance reporting. LinkedIn-derived data must not be repurposed for unrelated profile enrichment, prospecting, advertising audiences, or general-purpose model training. Our general AI-processing disclosure does not authorize sending restricted LinkedIn member information to Gemini. Information you independently provide to Gabrielle is distinct from data obtained through LinkedIn’s APIs.
7. Newsletters, marketing, and support
If you subscribe, we use your email address to send newsletters, product and feature announcements, company news, events, and promotional offers. We record your subscription preferences and obtain consent where required. Signing in through Google or LinkedIn, connecting a social account, or contacting support does not by itself subscribe you to marketing. Subscribing to marketing is optional and is not a condition of receiving customer support.
You can withdraw your marketing subscription using the unsubscribe instructions in our emails or by contacting [email protected]. We honor opt-out requests promptly, no later than 10 business days, or sooner where applicable law requires. You do not need to pay or sign in to opt out. We may keep a limited record of your opt-out to avoid sending further marketing.
We also use your contact information to answer support requests and send necessary service communications, including account, security, and operational notices necessary for your use of the service. Promotional product releases and general company news remain marketing messages, even when sent to existing users. Opting out of marketing does not prevent these necessary messages.
8. Cookies and usage information
We use browser storage and similar technologies needed for sign-in and service operation. Our analytics tools include Google Analytics 4 and Microsoft Clarity on pages where those tools are enabled:
- Google Analytics helps us understand visits, device and browser information, and interactions with the service. See how Google uses information from partner services.
- Microsoft Clarity provides behavioral metrics, heatmaps, and session replays that help us understand navigation and improve usability. Information may include clicks, scrolling, and page interactions. See the Microsoft Privacy Statement.
These providers may collect information through cookies or similar technologies and process it under their applicable terms, including across services where permitted by their settings and applicable law. Where consent is required for optional tracking, it must be obtained before that tracking is enabled.
Browser controls let you manage stored data, although blocking essential storage may affect the service. Google also offers an Analytics opt-out browser add-on. Where applicable law gives you rights to opt out of sale, sharing, or targeted advertising, contact us to exercise those rights. We will not treat a marketing-email opt-out as a substitute for a tracking preference.
9. Retention and deletion
Account records, professional information, and saved assets are retained while needed to provide your account and requested features. Support records are retained as needed to resolve requests and related disputes. Marketing contact information is retained while your subscription is active, with a limited suppression record after you opt out. Security records and any legally required records may have separate retention periods.
Retention is based on purpose, sensitivity, ongoing need, and applicable obligations. Information no longer needed is deleted or, where permitted, made non-identifying. This does not permit retention of LinkedIn data beyond its applicable limits.
You may request account closure or deletion of your personal information by emailing [email protected]. We may need to verify your identity. We process requests under applicable requirements and explain any information that must be retained, such as records needed for legal obligations, security, or resolving disputes. For stored LinkedIn API data covered by a client deletion request, the applicable maximum is 10 calendar days. Shorter field-specific limits still apply, and LinkedIn-directed deletion follows its requirements. These limits are separate from the email-marketing opt-out deadline.
Deleting information from Gabrielle does not automatically delete posts already published to another platform. Where copies remain in backups or provider systems, they remain subject to applicable deletion, security, and legal requirements; this is not an exemption from LinkedIn’s deletion rules.
10. Your rights
Depending on applicable law, you may have rights to access, correct, delete, or obtain a copy of your information; object to or restrict certain processing; or withdraw consent. You may edit information through the available profile controls or contact us to request access or correction. Contact us to exercise other rights. Where permitted, you may use an authorized agent. If we decline a request, we will explain why and how to appeal where applicable. We do not unlawfully discriminate against you for exercising privacy rights. You may also complain to your relevant data protection authority. Withdrawing consent does not invalidate earlier lawful processing.
11. International processing and security
HYPHEIS Inc. is based in the Republic of Korea. Our providers may process information in other countries, where laws may differ. Transfers are subject to applicable legal requirements. Contact us for information about relevant locations and safeguards. This statement does not claim certification under a particular international privacy framework.
We take reasonable measures to protect information, but no online service can guarantee absolute security.
12. Age and policy updates
Gabrielle is intended for adults aged 18 and over. Contact us if you believe a child has provided personal information.
We will update this Policy as our practices change and provide notice of material changes through the website, application, or another appropriate channel.
13. Contact
HYPHEIS Inc.
B103-A142, 21-12 Wiryegwangjang-ro, Sujeong-gu, Seongnam-si, Gyeonggi-do, 13647, Republic of Korea