Last updated: July 06, 2026
This Privacy Notice for hey-buddy.io ("we", "us", or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you visit our website at hey-buddy.io or any website of ours that links to this Privacy Notice, or engage with us in other related ways, including any marketing or events.
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at support@hey-buddy.io.
In short: we collect personal information that you provide to us.
We collect personal information that you voluntarily provide when you register for the Services, express interest in our products, or otherwise contact us. The personal information we collect may include:
Sensitive information. We do not process sensitive information (such as racial or ethnic origin, religious beliefs, or health data).
All personal information you provide to us must be true, complete, and accurate, and you must notify us of any changes to such information.
In short: some information — such as your IP address and browser/device characteristics — is collected automatically when you visit our Services.
This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, and information about how and when you use our Services. This is used to maintain the security and operation of our Services and for internal analytics.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail and Calendar data is used only to power the features described above and is never used for advertising.
In short: we process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.
We do not sell your data.
In short: we only process your personal information when we have a valid legal reason to do so — such as your consent, to comply with law, to provide services under our agreement with you, or to pursue our legitimate business interests.
If you are located in the EU or UK:
The GDPR and UK GDPR require us to explain the valid legal bases we rely on, which may include consent, performance of a contract, legitimate interests, legal obligations, and vital interests. You can withdraw consent at any time by contacting us.
If you are located in Canada:
We may process your information with your express or implied consent, which you may withdraw at any time, or in certain exceptional cases permitted by law (e.g. fraud detection and prevention, or to comply with a subpoena or court order).
In short: we may share information in specific situations described in this section and with the third-party service providers listed below.
We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months, and we will not do so in the future.
In short: we offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies.
We provide these AI features (such as drafting outreach emails and optionally learning your writing style) through a third-party AI service provider, Anthropic. Your input, output, and relevant personal information are shared with and processed by Anthropic to enable these features. Voice/writing-style modeling only runs if you explicitly opt in, and is limited to your own sent emails.
In short: if you choose to register or log in using Google, we may have access to certain information about you.
Our Services offer sign-in via Google. Where you choose to do this, we receive certain profile information from Google (typically your name, email address, and profile picture). We use this information only for the purposes described in this Privacy Notice. We do not control, and are not responsible for, other uses of your personal information by Google — review their privacy notice to understand their own practices.
In short: we keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice, unless otherwise required by law.
We retain your data for as long as your account is active. No purpose in this notice requires us to keep your personal information longer than the period of time in which you have an account with us. When we have no ongoing legitimate business need to process your information, we will delete or anonymize it, or, if that isn't possible (e.g. backup archives), securely isolate it from further processing until deletion is possible.
In short: we aim to protect your personal information through a system of organizational and technical security measures.
Every database query we run that touches your data is explicitly scoped to your account at the application layer. OAuth tokens for connected accounts (such as Gmail and Calendar) are managed by our authentication provider, Clerk, and are never stored in our own database. However, despite our safeguards, no electronic transmission or storage technology can be guaranteed 100% secure, and we cannot promise that unauthorized third parties will never defeat our security. Transmission of personal information to and from our Services is at your own risk.
In short: we do not knowingly collect data from or market to children under 18 years of age.
By using the Services, you represent that you are at least 18, or that you are the parent or guardian of a minor and consent to their use of the Services. If we learn that we have collected personal information from a user under 18, we will deactivate the account and take reasonable steps to promptly delete such data. Contact us at support@hey-buddy.io if you become aware of any such data.
In short: depending on your state of residence in the US or region (such as the EEA, UK, Switzerland, or Canada), you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time.
In some regions, you have the right to (i) request access to and a copy of your personal information, (ii) request rectification or erasure, (iii) restrict processing, (iv) request data portability, and (v) not be subject to solely automated decision-making that produces legal or similarly significant effects — if this ever applies, we will explain the main factors and offer a simple way to request human review.
How to contact us:
If you are located in the UK and are unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint. If you are in the EEA or UK more broadly, you may complain to your Member State data protection authority. If you are in Switzerland, you may contact the Federal Data Protection and Information Commissioner.
Withdrawing your consent: if we are relying on your consent to process your information, you have the right to withdraw it at any time by contacting us using the details above.
Account information: you can review or change your account information by logging in to your account settings. Upon a request to terminate your account, we will deactivate or delete your account and information from our active databases, though we may retain some information to prevent fraud, troubleshoot problems, or comply with legal requirements.
Most browsers include a Do-Not-Track ("DNT") feature. Because there is not yet a uniform technology standard for recognizing DNT signals, we do not currently respond to them. If a standard is adopted that we must follow, we will update this Privacy Notice.
In short: if you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you, correct inaccuracies, get a copy of, or delete your personal information.
These rights include the right to know whether we are processing your data, the right to access it, the right to correct inaccuracies, the right to request deletion, the right to obtain a copy of data you previously shared with us, the right to non-discrimination for exercising your rights, and the right to opt out of processing used for targeted advertising, the sale of personal data, or certain profiling. Some states grant additional rights — see the categories table below for what we actually collect.
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Name, email address, IP address, account name | Yes |
| B. California Customer Records categories | Name, contact information | Yes |
| C. Protected classification characteristics | Gender, age, race and ethnicity | No |
| D. Commercial information | Transaction and payment information (via Stripe) | No — processed directly by Stripe, not us |
| E. Biometric information | Fingerprints and voiceprints | No |
| F. Internet or network activity | Browsing/usage data, interactions with our Services | Yes |
| G. Geolocation data | Approximate device location | Limited (IP-based only) |
| H. Audio, electronic, or similar information | Images, audio, video recordings | No |
| I. Professional or employment information | Job title, employer (about your contacts, as you enter them) | Yes |
| J. Education information | Student records | No |
| K. Inferences | Relationship-health scoring derived from your interaction data | Yes |
To exercise these rights, contact us via a data subject access request, by visiting hey-buddy.io/contact, or via the contact details at the bottom of this page. We will need to verify your identity before acting on your request. Under certain state laws, you may designate an authorized agent to make a request on your behalf, subject to proof of authorization.
Appeals. If we decline to act on your request, you may appeal by emailing support@hey-buddy.io. We will inform you in writing of our decision. If your appeal is denied, you may submit a complaint to your state attorney general.
California "Shine the Light" law. California residents may request, once a year and free of charge, information about any personal information we disclosed to third parties for direct marketing purposes in the preceding calendar year. We have not made any such disclosures.
In short: yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Notice from time to time. The updated version will be indicated by a revised "Last updated" date at the top of this page. If we make material changes, we may notify you by prominently posting a notice or sending a direct notification.
If you have questions or comments about this notice, email us at support@hey-buddy.io.
Based on the laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, details about how we've processed it, correct inaccuracies, or delete it. To make such a request, please submit a data subject access request.
This Privacy Policy was created using Termly's Privacy Policy Generator.