Privacy Policy

1. Introduction

HeyBreez AI, Inc. ("the Company," "we," "us," or "our") operates getheybreez.com and the HeyBreez voice-agent platform (together, the "Service"). HeyBreez provides AI-powered voice agents that handle inbound phone calls on behalf of small and mid-size businesses, including sales qualification, customer support, and appointment scheduling. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to information collected through the Service and through direct communications with us.

We are based at 78 SW 7th Street, Suite 500, Miami, FL 33130 and can be reached at [email protected].

2. Information We Collect

2.1 Information You Provide

We collect information you submit directly, including:

• Contact details (name, email address, phone number) when you fill out a form, request a demo, start a free trial, or contact us;
• Business information you choose to share (company name, industry, employee count, CRM or calendar system in use);
• The content of messages you send us.

2.2 Information Collected Automatically

When you visit getheybreez.com, we automatically collect limited technical information:

• IP address and approximate location (city and region level);
• Browser type, operating system, device class;
• Pages visited, referring URLs, and time on page;
• Cookie and similar identifiers (see Section 5).

2.3 Call and Voice-Agent Data

Our core service processes phone calls made to business subscribers' lines. This means we also handle:

• Call recordings: audio recordings of conversations between callers and the HeyBreez voice agent operating on a subscriber's business phone number;
• Call transcripts: text generated from audio recordings via speech-to-text processing, used to produce call summaries and action-item lists delivered to the subscriber;
• Caller-provided data: names, callback numbers, appointment preferences, and other personal information that callers voluntarily share with the voice agent during a call;
• Agent configuration data: call scripts, routing rules, transfer numbers, and voice settings that business subscribers input when configuring their agents;
• CRM integration data: contact and lead records synced to or from HubSpot or Salesforce when a subscriber enables these integrations (Growth and Scale plans);
• Calendar integration data: availability windows, booking confirmations, and appointment records synced via Google Calendar or Microsoft Outlook integrations (Growth and Scale plans);
• Call analytics: call volume, duration, resolution rate, and agent performance metrics aggregated at the account level.

Call recordings and transcripts are processed solely to generate call summaries, deliver action items to the subscribing business, and support CRM or calendar integrations where enabled. We do not use call content to train AI models without explicit written consent from the business subscriber.

When processing calls on a subscriber's behalf, the Company acts as a service provider to that subscriber. The subscribing business is responsible for ensuring callers are appropriately informed about the use of an automated voice agent and any applicable call recording disclosures required by federal or state law.

2.4 We Do Not Knowingly Collect Children's Data

getheybreez.com is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact [email protected] and we will delete it.

3. How We Use Information

We use the information we collect to:

• Operate the voice-agent service: process inbound calls in real time, generate call summaries and transcripts, and deliver them to the subscribing business;
• Sync call outcomes to connected CRM systems and book or update calendar appointments when integrations are active;
• Respond to inquiries and provide requested information;
• Operate, maintain, and improve the Service;
• Send service updates and, where required, marketing communications (with your consent where applicable law requires it);
• Detect, investigate, and prevent fraud or abuse;
• Comply with legal obligations.

We do not sell personal information for monetary value. Where applicable state law treats certain advertising arrangements as a "sale" or "share," see your state's section below.

4. Sharing of Information

We share personal information only with:

• Service providers acting on our behalf under contractual confidentiality terms, including hosting infrastructure, telephony API providers, email delivery, and analytics vendors;
• CRM and calendar platform vendors (HubSpot, Salesforce, Google, Microsoft) when a subscriber has enabled the corresponding integration, strictly as necessary to perform the sync;
• Authorities, when required by law or to protect rights, safety, or property;
• A successor entity in the event of a merger, acquisition, or asset sale, subject to this Policy.

We do not sell personal information to third parties.

5. Cookies and Tracking

We use cookies and similar technologies to operate the site, remember preferences, and measure usage. For details and choices, see our Cookie Policy.

6. Data Retention

We retain different categories of data according to their purpose:

• Call recordings: automatically deleted 30 days after the call date. Subscribers on Growth and Scale plans may download recordings before that window closes;
• Call transcripts and summaries: retained 90 days from the call date, then purged from active storage;
• CRM and calendar integration tokens: retained while the integration is active; revoked and deleted when a subscriber removes the integration;
• Account and billing data: retained while the subscription is active, then for 60 days after cancellation to support any billing disputes or record requests;
• Marketing contact records: inactive contacts are purged after 24 months;
• Server access logs: retained 90 days, then aggregated.

We retain personal information only as long as needed for the purposes described and to comply with legal or accounting obligations.

7. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including TLS encryption in transit, encrypted storage for call audio, restricted-access databases, least-privilege access controls, and rate limiting on voice-API endpoints. No system is perfectly secure; we cannot guarantee absolute security.

8. Your General Rights

Depending on your jurisdiction, you may have rights including access, correction, deletion, and the ability to limit certain processing. To make a request, email [email protected]. We will respond within the timeframe required by applicable law.

9. Florida Residents (FDBR)

The Florida Digital Bill of Rights ("FDBR") gives Florida consumers the rights described below. The FDBR's main controller-obligation chapters apply primarily to large operators; we extend the consumer-rights provisions to all Florida visitors as a matter of policy.

9.1 Your FDBR Rights

• Right to Confirm and Access personal data we process about you.
• Right to Correct inaccuracies.
• Right to Delete personal data we have collected from or about you.
• Right to Data Portability where technically feasible.
• Right to Opt Out of sale of personal data, targeted advertising, and significant-effect profiling. We do not engage in any of these.

9.2 Sensitive Data Consent

We do not knowingly process sensitive data within the meaning of the FDBR. If we ever begin to process such data, we will obtain consent first.

9.3 How to Exercise

Email [email protected]. We respond within 45 days; one 45-day extension is available with notice.

9.4 Appeal

You may appeal a denial by replying to our response. The Florida Department of Legal Affairs receives unresolved complaints.

9.5 California Visitors

If you are a California resident visiting from another state, you may also exercise the rights granted under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), including the right to know, the right to delete, the right to correct, and the right to opt out of sale or sharing. We do not sell personal information and do not "share" personal information for cross-context behavioral advertising.

To submit a CCPA or CPRA request, email [email protected] with the subject line "California Privacy Request."

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date and, where appropriate, a notice on the Service.

11. Contact

Questions, requests, or complaints can be sent to: