Last Updated: August 5, 2026

At Hepopa!, we attach the highest value to your privacy and data security within the robust ecosystem we build between agencies, brands, and content creators (UGC creators). Safeguarding all personal and corporate information you share while utilizing our services is not merely a legal obligation for us, but a foundational principle.

This Privacy Policy has been prepared to transparently explain how your personal data is collected, processed, stored, and protected when you visit Hepopa! or benefit from our services.

1. What Data Do We Collect?

To deliver Hepopa! services flawlessly, we process the following data:

• Account and Profile Information: First name, last name, email address, phone number, and agency or company details provided during registration or communication.

• Content Creator (UGC) Data: Sample videos, demographic information, interests, social media profiles, and necessary payment details provided by content creators joining our network.

• Campaign and Content Data: Briefs shared with us by agencies and brands, approved/revised videos, client workspaces, and performance data.

• Technical and Usage Data: Device information used to access our site, IP addresses, browser types, session durations, and interaction logs.

2. How Do We Use Your Data?

We use the collected data solely to execute our operations and perfect your agency experience through the following processes:

• Operational Service Delivery: Matching agencies with UGC creators aligned with specific briefs, and managing video delivery and revision workflows.

• Multi-Client Management: Securely isolating workspaces created for agencies' respective clients and providing white-label reporting.

• System Security and Enhancement: Ensuring technical security, identifying issues, and optimizing overall operational performance.

• Communication and Support: Keeping you informed regarding approval processes, campaign updates, technical support inquiries, or new service announcements.

3. Sharing Data with Third Parties

Your data is never sold, rented, or transferred to third parties for commercial gain. Data sharing occurs strictly under the following mandatory conditions:

• Service Providers: Infrastructure partners such as cloud hosting providers, email deployment services, and payment processors (strictly to the extent necessary to deliver the service).

• Legal Obligations: Fulfilling legal demands originating from authorized public institutions, regulatory bodies, and judicial authorities.

4. Data Security and Retention

We employ industry-standard SSL/TLS encryption protocols, secure server infrastructures, and role-restricted access control mechanisms to safeguard your data against unauthorized access, loss, or misuse. Your data is retained securely within our systems throughout the active service period and in accordance with statutory retention periods.

5. Your Rights and Control

Under the KVKK (Law on Protection of Personal Data) and relevant international data protection frameworks, you hold the right to:

• Learn what personal data concerning you is processed,

• Request the correction of incomplete or inaccurate data,

• Request the deletion or anonymization of your data from our systems,

• Modify or revoke your communication preferences at any time by contacting us.

6. Contact Us

Should you have any questions, requests, or feedback regarding our Privacy Policy or the processing of your personal data, please feel free to contact us at any time!