Privacy Policy

This policy explains how hiublue, LLC ("hiublue", "we", "us") collects, uses and shares personal data through hiublue.com and the hiublue app (the "Service"). The Service is offered to businesses in the United States.

1. Our two roles

• When we decide how data is used, for example your account, billing and visits to our website, we are responsible for it under this policy.
• When our customers use the Service, they put in data about their own contacts, leads, callers, signers and website visitors ("Customer Data"). We process Customer Data on our customer's behalf and on their instructions, as their service provider. If a hiublue customer contacted you, or you used a page they built with hiublue, that customer's privacy policy applies, and you should send your requests to them first. We will help them respond.

2. What we collect

Information you give us:

• Account details: name, email, phone number, company, role, password or Google sign-in details.
• Workspace content: AI worker settings, chats, notes, contacts, pipelines, campaigns, workflows, documents, files, websites and knowledge you add.
• Communications: emails, texts, chat messages, social media messages, calls, voicemails, call and meeting recordings and transcripts sent or received through the Service.
• Voice samples you upload to create a cloned voice, and the voice model made from them.
• Financial and tax details: billing details, bank account and transaction data if you connect a bank, and tax forms (such as W-9) you or your contacts submit.
• Support: what you send us when you ask for help or give feedback.

Information collected automatically:

• Device and usage data: IP address, browser and device type, pages viewed, actions taken, dates and times, and logs used to run and secure the Service.
• Cookies and similar tools (see section 4).
• Email engagement: marketing and outreach emails sent through the Service may include a small image that shows whether the email was opened.
• Signature records: when someone signs a document, we record the time, IP address and device details as proof of signature.

Information from others:

• Connected services: data from accounts you connect, such as email, calendar, files, social media, messaging, video meeting and payment accounts, limited to the permissions you grant.
• Our customers: Customer Data they upload or collect, such as contact lists.
• Service providers: for example our payment provider, which tells us whether a payment went through.

3. How we use data

• To provide the Service and carry out the tasks you give your AI workers.
• To create and manage accounts, bill you and collect payment.
• To keep the Service safe, prevent fraud and abuse, and enforce our Terms.
• To support you and send service messages.
• To understand use of the Service and improve it, using aggregated or de-identified data where we can.
• To market our services to businesses, with an opt-out in every marketing email.
• To meet legal duties and protect our rights.

We do not sell personal data for money, and we do not use Customer Data to train AI models.

4. Cookies and tracking

• In the app, we use only the cookies needed to sign you in, keep your session secure and remember your settings.
• On hiublue.com, we and our partners use analytics and advertising cookies and pixels to understand visits, measure our ads, and show our ads to people who visited our site.
• You can block or delete cookies in your browser, or turn off our analytics and advertising tracking on the Your privacy choices page, linked at the bottom of every page. We also honor Global Privacy Control browser signals automatically. For other opt-out requests, email [email protected].

5. AI processing

• When an AI worker carries out a task, the content it needs is sent to an AI model provider at that moment so the task can be done.
• Some processing runs on systems we control.
• We use business terms or account settings that keep this content out of AI model training wherever the provider offers them, and we bind our providers by contract to protect it.

6. Who we share data with

We share personal data only with:

• Service providers that help us run the Service, under contracts that require them to protect it and use it only for us. Types: AI model providers; cloud hosting and storage; network and security; email delivery; phone, texting and messaging carriers; voice, speech and transcription services; payment and banking services; monitoring and support tools.
• Services you connect or tell us to use, such as sending a message through your email account or posting to your social page.
• Payments and banking: card payments are handled by Stripe, and we never see your full card number. Bank connections use Plaid, which collects and shares your bank data with us under the Plaid End User Privacy Policy.
• Your organization: admins and team members in your workspace can see data based on their role.
• Legal and safety: when the law requires it, or to protect people, our users or the Service.
• Business transfers: as part of a merger, acquisition or sale of assets, with notice to you before your data becomes subject to a different privacy policy.

7. Google user data and the permissions we request

Google integrations are optional and only activate when you explicitly connect them. We request the narrowest scopes each feature needs:

• Gmail (gmail.send, gmail.modify) - so your AI worker can read, search, label, draft, and send email from your connected mailbox at your direction.
• Calendar (calendar.events) - so your worker can read your availability and create, reschedule, or cancel appointments.
• Drive & Docs (drive) - so your worker can find, read, create, and update documents and files you ask it to work with.
• Sheets (spreadsheets.readonly, drive.metadata.readonly) - read-only access so you can import audiences from your spreadsheets.

You can disconnect any integration at any time from Settings → Integrations, or revoke access from your Google Account permissions page.

How we use Google data. We use data obtained through Google APIs solely to provide the features you ask for - reading and sending your mail, managing your calendar, and working with your documents within the Service. We do not use Google user data for advertising, and we do not sell it.

How we share Google user data. We do not sell Google user data, and we never share it for advertising. We disclose it only to the service providers listed below, only so far as each one needs it to deliver a feature you asked for, and only under contracts that bind them to confidentiality, to process the data on our instructions alone, and not to use it for their own purposes or to train generalized AI/ML models.

• Anthropic (AI model provider). When your worker carries out a task, the content it needs is sent to Anthropic at the moment of the request. That content may include email text, calendar entries, and document or spreadsheet contents from your connected Google account.
• OpenAI (alternative AI model provider). The same categories of content, where your workspace is configured to run on our OpenAI-based engine instead of the Anthropic one.
• TypeSafe (AI classification provider). When someone replies to an email campaign sent from your connected Gmail, the first part of the reply and the subject of our email are sent to TypeSafe to sort the reply as interested, a question, not interested or unclear. Nothing else from your Google account is sent to TypeSafe.
• Amazon Web Services. Hosting and databases for the Service, file storage for attachments and media (which can include attachments from your Gmail), and Amazon SES, which transmits the email the Service sends on your behalf.
• Cloudflare. Network delivery and TLS termination. All traffic to the Service passes through Cloudflare in transit.

Some processing never leaves us: we run our own AI models on hardware we own and operate, and we use them for tasks such as naming conversations and building search indexes over your workspace. No third party is involved in that processing.

Beyond the providers above, we disclose Google user data only when the law compels us to, such as a valid legal process, or when we need to in order to protect the safety and security of our users and the Service, and we may transfer it as part of a merger, acquisition, or sale of assets, in which case we will give you notice before it becomes subject to a different privacy policy. We share Google user data with no one else.

8. LinkedIn and Meta data

• We access only the pages and accounts you choose to connect.
• We use their data only to provide the publishing, analytics and messaging features you turn on.
• We do not sell it or use it for our own ad targeting.
• You can disconnect at any time, and you can ask us to delete the data by emailing [email protected].
• Our use follows those platforms' developer policies.

9. Sensitive data

Some data in the Service can be sensitive: voice recordings and cloned voices, bank and tax information, and the content of messages and calls. We use it only to provide the features you turn on, protect it with extra safeguards, and never sell it.

10. How long we keep data

• We keep personal data while your account is active and for as long as needed to provide the Service.
• After your account closes, or when you ask, we delete or de-identify it within a reasonable time.
• We may keep some data longer where needed for legal, tax, accounting, security or dispute reasons.
• Some copies may stay in our backups for longer. We keep them protected and do not use them for anything else.
• Customer Data is kept or deleted on our customer's instructions.

11. Security

We use administrative, technical and physical safeguards, including encryption, access controls and monitoring. Only authorized staff may access personal data, and only to provide support, keep the Service secure or meet the law. No system is completely secure, and we cannot guarantee security.

12. Your choices and rights

• You can update your account details, disconnect connected accounts and delete content in the Service.
• You can ask to access, correct, delete or get a copy of your personal data by emailing [email protected]. We will verify your identity first.
• Depending on your state, you may have more rights, including opting out of targeted advertising (use the Your privacy choices page or email us) and appealing our decision. We will not treat you differently for using your rights. An authorized agent may make a request for you.
• You can unsubscribe from marketing emails using the link in each one.

13. Children

The Service is not meant for anyone under 18. We do not knowingly collect personal data from children. If you believe we have, contact us and we will delete it.

14. Where data is processed

We are based in the United States and process data mainly there. Some service providers may process data in other countries, under safeguards required by contract.

15. Changes

If we make important changes, we will update the date above and tell you in the app or by email.

16. Contact

hiublue, LLC, 415 N Benton Ave, Helena, Montana 59601-5041, United States. [email protected]