Privacy policy
Effective date: 21 October 2026
Hybrid Formula is operated by Viral Conversion Limited, at 2301 Bayfield Building, 99 Hennessy Road, Wan Chai, Hong Kong. This policy explains how we handle personal information when you purchase the course, sign in or use the members area at hybridformula.com. You can contact us about privacy at support@hybridformula.com.
Information we collect
When you buy the course, Stripe processes your checkout and payment information. We receive the checkout email address, purchase and product identifiers, and payment, refund or dispute status needed to confirm course access. Our course application does not store your full card number or card security code.
When you sign in using an emailed code, we use your email address to send the code and verify your identity. We maintain an account identifier and authentication records so you can access the course.
If you choose Google sign-in, we receive your Google account identifier, verified email address and basic profile information, which can include your name and profile picture. We request only the openid, email and profile permissions. This does not give us access to your Gmail messages, Google Drive files, contacts or calendar. Google sign-in is optional; you can use an emailed code instead.
Our hosting, authentication and email providers also process technical information needed to operate and protect the service. This can include IP addresses, browser and request information, sign-in events, and email delivery records. We use a derived email identifier and request counts to limit repeated login attempts.
If you contact us, we receive the information you choose to include in your message.
How we use information
We use this information to verify your identity, match your verified email to an eligible course purchase, provide course access, send sign-in emails, respond to support requests and protect the service against misuse. Payment, refund and dispute records also help us administer purchases and resolve payment issues.
We use information received through Google sign-in for authentication, account linking, course access and related support and security. We do not use that Google information for advertising or AI model training, and we do not sell it.
Service providers and sharing
We use Stripe for hosted checkout and payment processing, Supabase for authentication and course data, Resend for sign-in email delivery, and Vercel for website hosting. We use Google Workspace for support email, and Google processes your sign-in when you choose that option. These providers receive information needed for their roles. Their handling of information is also described in their privacy notices:
We may also disclose information when required by law or when reasonably necessary to investigate fraud, protect people or establish, exercise or defend legal claims. We do not sell your personal information.
Cookies and similar storage
The members area uses session cookies to keep you signed in and support authentication. Blocking or deleting these cookies can prevent login or end your session. The course service described here does not use advertising pixels or third-party marketing analytics.
Storage, security and retention
The course database and sign-in email sending region are configured in the United States. Our providers may also process information in other countries. We do not promise that all processing occurs only in the United States.
We restrict course access to authenticated eligible members and restrict administrative access. We use access controls and encrypted network connections to help protect information. No method of transmission or storage is completely secure.
We keep personal information only for as long as reasonably necessary for the purposes described in this policy. Account information and purchase-to-access records are retained while needed to provide your course access. Payment, refund and dispute records may be retained longer to meet legal and accounting requirements or resolve disputes. Support correspondence, authentication and security logs, and email delivery records are retained as needed to handle support issues, operate the service and investigate misuse.
When information is no longer needed, we delete it or remove information that identifies you, subject to applicable legal requirements. Deletion from active systems may not immediately remove copies held in backups, which remain subject to the relevant provider's retention and recovery processes. You can request deletion using the contact details below; deletion is not an automatic result of signing out or disconnecting Google.
Your choices and requests
You can choose email-code login instead of Google sign-in. You can also remove Hybrid Formula's Google connection through your Google Account settings. Removing that connection does not itself delete your Hybrid Formula account or purchase records.
Contact support@hybridformula.com to request access to, correction of or deletion of your personal information, including information received through Google sign-in. Requests are handled through our support team. We may need to verify your identity before acting. We will respond in accordance with applicable law and explain any lawful reason that prevents us from fulfilling a request.
Some information may need to be retained for legal, accounting, security or dispute-resolution purposes. Deleting account or identity information can prevent us from providing course access; we will explain the effect when handling your request. Depending on where you live and the laws that apply, you may have additional privacy rights, including the right to raise a concern with the relevant privacy regulator. In Hong Kong, you can contact the Office of the Privacy Commissioner for Personal Data.
Age eligibility
Hybrid Formula is intended only for people aged 18 and over. People under 18 must not purchase the course or create or use a member account. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided personal information to us, contact support@hybridformula.com so we can investigate and take appropriate steps to remove that information, subject to legal retention requirements.
Policy changes
We will post updates to this policy on our website and revise its effective date. Where required by law, we will provide additional notice or obtain consent before making a material change. If we propose to use information received through Google sign-in for a new purpose, we will explain that change and obtain any required consent before doing so.
Contact us
For privacy questions or requests, email support@hybridformula.com or write to:
Viral Conversion Limited, 2301 Bayfield Building, 99 Hennessy Road, Wan Chai, Hong Kong