Legal
Last Updated: May 2026
1. Introduction
Welcome to Heyy ("we," "our," or "us"). We operate tryheyy.com and the Heyy platform — a WhatsApp CRM with AI assistants, broadcaster, and chatbot tools built for Indian SMBs.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. By using Heyy, you consent to the data practices described here.
Google User Data (OAuth)
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- Data Accessed: Name, Email, and Profile Picture — strictly for authentication.
- Data Usage: Solely to create your account, manage your login session, and display your profile.
- Data Sharing: We DO NOT share your Google User Data with third-party tools, AI models, or advertisers.
- Data Storage: Encrypted (AES-256) on secure cloud infrastructure (AWS/Google Cloud).
- Deletion: Email support@tryheyy.com or delete your account to permanently remove all Google data.
2. Information We Collect
A. Personal Information
Name, email address, and profile image (via Google OAuth or direct signup).
B. Business & WhatsApp Data
Business name, industry, WhatsApp number(s), lead data you import or capture via chatbots, conversation history from connected WhatsApp accounts, and campaign data from the Broadcaster.
C. Usage & Technical Data
IP address, browser type, operating system, access times, pages viewed, and feature usage within the platform.
D. WhatsApp API Data
Messages sent and received via your connected WhatsApp Business number, contact lists, and conversation metadata required to operate the CRM, chatbot, and broadcaster features.
3. How We Use Your Information
- Service Delivery: To operate Heyy, authenticate users, manage WhatsApp connections, and run your CRM, chatbot, and broadcaster.
- AI Assistants: Your conversation data is processed by our AI models (GPT-4, Gemini) to generate Lead Briefs, draft replies, summarise calls, and build campaigns. AI processing is done on your behalf; your data is not used to train third-party models.
- Communication: To send administrative information, billing notifications, and support responses.
- Analytics & Improvement: To analyse platform usage, improve features, and fix bugs.
- Billing: Payment data is processed by Razorpay. We do not store full card details. GST invoices are generated automatically.
4. WhatsApp & Meta Compliance
Heyy operates through the official WhatsApp Business API as a Meta Business Partner. By connecting your WhatsApp number, you agree to WhatsApp's Business Policy and Commerce Policy.
- All broadcast messages use Meta-approved templates. We do not send non-compliant bulk messages.
- WhatsApp conversation fees are charged directly by Meta to your Meta Business account — Heyy never marks these up.
- You are responsible for obtaining consent from your leads and customers before messaging them.
5. AI & Automated Processing
Heyy uses AI models from OpenAI (GPT-4) and Google (Gemini) to power AI assistants. These models process your conversation data to generate outputs (briefs, drafts, summaries, campaigns).
- AI-generated outputs are always reviewed and approved by your team before sending. No message is sent fully autonomously.
- We do not use your data to train AI models. Data shared with AI providers is governed by their respective data processing agreements.
- AI processing is performed on encrypted data in transit and at rest.
6. Data Sharing
We DO NOT sell your data. We share data only as follows:
- Service Providers: AWS (hosting), Google Cloud (infrastructure), OpenAI/Google (AI processing), Razorpay (payments) — each bound by data processing agreements.
- Meta/WhatsApp: Messages and contact data are processed via Meta's API infrastructure.
- Legal Requirements: When required by Indian law or court order.
7. Data Retention & Deletion
- Message history is retained per your plan: 30 days (Free), 90 days (Starter), 365 days (Growth), unlimited (Pro).
- Account data is retained while your account is active and for 90 days after cancellation.
- You can export all your data (leads, conversations, campaigns) at any time with one click.
- To request complete account deletion, email support@tryheyy.com. Deletion is completed within 30 days.
8. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and associated data
- Export your data in a portable format
- Opt out of marketing communications
- Withdraw consent for data processing
To exercise any right, contact support@tryheyy.com.
9. Security
We use AES-256 encryption at rest, TLS 1.2+ in transit, regular security audits, and role-based access controls. No system is 100% secure; in the event of a breach, we will notify affected users within 72 hours as required by applicable law.
10. Updates to This Policy
We may update this policy from time to time. Material changes will be notified via email and an in-app notice at least 7 days before they take effect. Continued use of Heyy after the effective date constitutes acceptance.
Questions? Contact us at support@tryheyy.com or write to: Heyy Technologies Pvt. Ltd., India.