Privacy Policy

• Account data. When you or your organization create a HeyBuddy account: email address, name, role in the organization, and, if your team links Slack, your Slack user ID.
• Product usage. How you use the dashboard: pages viewed, features used, and configuration actions. We use Mixpanel to analyze this so we can improve the product.
• Technical and log data. IP address, browser type, and diagnostic information generated when the product runs, including error reports collected through Sentry, which we configure to scrub personal data.
• Billing data. Payments are processed by Stripe. We receive billing contact details and subscription status. We do not store card numbers.
• Communications. Emails you send us, including through the forms on our website (which open your own email client, so we receive only what you choose to send).
• Cookies. We use strictly necessary cookies only: authentication session cookies and short-lived security cookies that protect sign-in and integration connections. We do not use advertising cookies, and our marketing site does not run third-party analytics or tracking pixels.

• to provide, operate, secure, and support the Service;
• to improve the product and understand how it is used;
• to communicate with you: transactional emails such as invitations, notifications, and account messages (sent through Resend), and responses to your inquiries;
• to bill for the Service and maintain our records;
• to comply with law and enforce our agreements.

We do not sell personal data, we do not share it for cross-context behavioral advertising, and we do not use your data to train AI models.

Where European or UK data protection law applies, we rely on: performance of a contract (providing the Service to your organization and you); our legitimate interests (securing and improving the Service, communicating with business contacts), balanced against your rights; consent, where we ask for it; and legal obligations.

We share personal data only with service providers who process it for us under contract, listed at joinheybuddy.ai/subprocessors, and with professional advisers where needed. We may disclose data if required by law, or as part of a merger, acquisition, or sale of assets, in which case this policy continues to apply until you are told otherwise.

HeyBuddy is based in the United States and our systems are hosted there. If you use our website or dashboard from the UK, EEA, or Switzerland, your personal data is transferred to the United States. Where required, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

We keep account data for as long as your organization's account is active and delete or de-identify it within 60 days after the account closes, except where we must keep it longer for legal, billing, or security reasons. Product usage analytics are retained per our analytics provider's retention settings. Email correspondence is kept as long as needed for the purpose it was sent.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to restrict or object to certain processing, and to withdraw consent where processing is based on consent. If you are in the UK or EEA, you may also lodge a complaint with your supervisory authority. If you are a California resident, you have the rights to know, delete, and correct, and the right not to be discriminated against for exercising them; we do not sell or share personal information as defined by the CCPA.

To exercise any right, email andrew@joinheybuddy.ai. We will verify your request and respond within the time required by law.

Our customers connect their existing tools (such as product analytics, CRM, and support systems) to HeyBuddy, and their products may send us usage events or messages. In those cases the data we process, such as names, email addresses, identifiers, product usage events, and messages, is controlled by our customer. We process it only to provide the Service to them, under our Data Processing Terms.

If you want to access or delete data a company holds about you, contact that company directly; they can instruct us to act, and we support per-individual erasure. If you contact us first, we will point you to the right controller where we can.

We protect personal data with technical and organizational measures including per-tenant database isolation, encryption in transit and at rest, and least-privilege access controls. See joinheybuddy.ai/security for details.

HeyBuddy is a business product. It is not directed to children, and we do not knowingly collect personal data from anyone under 16.

We will post any changes here and update the date at the top. For material changes we will also notify account holders by email or through the Service.

HeyBuddy LLC
[REGISTERED ADDRESS]
andrew@joinheybuddy.ai