← Back to HeyPartner

Privacy Policy

Last updated December 9, 2025

This Privacy Policy describes how HeyPartner ("we," "our," or "us") collects, uses, and protects your personal information. We are committed to complying with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Information We Collect

Account Information:

• Email address
• Display name (optional)
• Password (encrypted)
• Account creation date

Project and Response Data:

• Project titles and descriptions
• Your responses to questions
• Generated syntheses
• Project metadata (creation date, status, etc.)

Payment Information:

• Payment processing is handled by Stripe
• We store only your Stripe customer ID and subscription status
• We do not store credit card information

Technical Information:

• IP address
• Browser type
• Device type
• Usage patterns (anonymized)

2. How We Use Your Information

We use your information to:

• Provide and improve the Service
• Generate questions and syntheses tailored to your projects
• Send you email notifications about your projects
• Process payments and manage subscriptions
• Respond to your support requests
• Analyze usage patterns to improve the Service (anonymized data only)
• Comply with legal obligations

We do not:

• Sell your personal information
• Share your responses or syntheses with third parties
• Use your data to train AI models that benefit other users
• Send marketing emails without your consent

3. Third-Party Services

We use the following third-party services:

Stripe (Payment Processing):

• Processes subscription payments
• Subject to Stripe's Privacy Policy

OpenRouter (AI Processing):

• Generates questions and syntheses
• Your data is processed but not stored by OpenRouter
• Subject to OpenRouter's Privacy Policy

Resend (Email Delivery):

• Delivers notification emails
• Subject to Resend's Privacy Policy

Cloudflare (Hosting & CDN):

• Hosts the application and database
• Subject to Cloudflare's Privacy Policy

4. Data Storage and Security

Your data is stored securely using:

• Encrypted connections (HTTPS)
• Password hashing (bcrypt)
• Secure database access controls
• Regular security updates

Data is stored in Cloudflare's global network. While we implement reasonable security measures, no system is completely secure.

5. Your Rights (PIPEDA Compliance)

Under Canadian privacy law, you have the right to:

Access: Request a copy of your personal information

Correction: Request corrections to inaccurate information

Deletion: Request deletion of your account and data

Portability: Request your data in a portable format

Withdraw Consent: Opt out of non-essential data processing

To exercise these rights, contact us at hey@heypartner.me. We will respond within 30 days.

6. Data Retention

We retain your data:

• Active accounts: For as long as your account is active
• Deleted accounts: 30 days after deletion (for recovery purposes)
• Payment records: 7 years (for tax compliance)

7. Cookies and Tracking

We use essential cookies for:

• Authentication (session management)
• Security (CSRF protection)

We do not use tracking cookies or third-party analytics.

8. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect information from children. If we discover we have collected information from a child, we will delete it immediately.

9. International Users

If you access the Service from outside Canada, your data may be transferred to and processed in Canada. By using the Service, you consent to this transfer.

10. Data Breach Notification

In the event of a data breach that may affect your personal information:

• Notification Timeline: We will notify affected users within 72 hours of discovering a breach
• What We'll Tell You: The nature of the breach, types of data affected, and steps you should take
• Regulatory Notification: We will notify relevant authorities as required by law (PIPEDA, GDPR if applicable)
• Remediation: We will take immediate steps to contain and remediate any security incident

If you discover a security vulnerability, please report it to security@heypartner.me.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact & Complaints

For privacy questions or concerns, contact us at:

Email: hey@heypartner.me

If you believe we have not complied with Canadian privacy law, you may file a complaint with the Office of the Privacy Commissioner of Canada:

• Website: www.priv.gc.ca
• Phone: 1-800-282-1376

13. Consent

By creating an account and using HeyPartner, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. You may withdraw consent at any time by deleting your account.

14. AI Disclosure

HeyPartner uses artificial intelligence to generate questions and syntheses. Specifically:

• AI Provider: Questions and syntheses are generated using Claude (Anthropic) via OpenRouter
• Your Data: Your project descriptions and responses are sent to the AI to generate personalized content
• No Training: Your data is NOT used to train AI models
• Human Review: AI-generated content is not reviewed by humans unless you contact support

All AI-generated content is labeled in the interface.