Privacy Policy

Effective Date: January 1, 2026

HeyHi ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SaaS platform and related services (collectively, the "Service").

Data Collection

We collect information you provide directly to us when you create an account, configure integrations, or communicate with us. This may include your name, email address, organization name, and API tokens for connected services such as GitHub and Jira. We also automatically collect certain technical information when you access the Service, including IP addresses, browser type, operating system, and usage data through server logs.

Data Storage

All data is stored on infrastructure hosted on Amazon Web Services (AWS). Customer secrets and API tokens are encrypted at rest using AWS Key Management Service (KMS) with per-tenant key isolation. Repository code and configuration data are stored in isolated environments. We retain your data for as long as your account is active or as needed to provide you with the Service. You may request deletion of your data at any time by contacting us.

Data Processing

We process your data to operate, maintain, and improve the Service. This includes using API tokens to interact with connected third-party services on your behalf (e.g., creating Jira tickets, opening GitHub Pull Requests), generating implementation plans from your specifications, and executing code in isolated sandbox environments. Processing is limited to the purposes you authorize when configuring the Service.

Third-Party Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data with third-party service providers who perform services on our behalf, such as cloud hosting (AWS), AI model inference (Anthropic), and communication platforms (Slack). These providers are contractually obligated to protect your data and may only use it as necessary to provide services to us. We may also disclose information if required by law or to protect our rights.

User Rights

You have the right to access, correct, update, or delete your personal information at any time. You may export your data by requesting an account export through the Service. You have the right to object to or restrict certain processing activities. To exercise any of these rights, please contact us at privacy@heyhi.ai. We will respond to your request within 30 days. If you are located in the European Economic Area, you have additional rights under the GDPR, including the right to lodge a complaint with a supervisory authority.