Privacy Policy

3.1Information you give us.

3.2Information from accounts you connect. If you choose to connect a LinkedIn account to HeyIntro:

3.3Information collected automatically.

3.4Information from other sources.

6.1To other users.

6.2To service providers. We use service providers that process information on our behalf, including providers of cloud hosting and content delivery; database, authentication and file storage; LinkedIn automation; AI models and routing; payment processing; and logo and website icon lookups. We also send identifiers such as names, company names or profile links to licensed data providers to match and retrieve professional information. Service providers may use the information only to provide services to us, except where they act as independent controllers under their own terms, such as Stripe for fraud prevention.

6.3Our personnel. Authorized HeyInvest personnel can access account information, usage and activity records to provide support, secure the Services, manage billing and enforce our Terms.

6.4Legal, safety and enforcement. We may disclose information if we believe in good faith that it is necessary to comply with law, legal process or a governmental or regulatory request; to protect the rights, property or safety of HeyInvest, our users, Listed Individuals or the public; to investigate fraud, spam, security incidents or abuse; or to enforce our agreements.

6.5Business transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy or sale of assets, information may be transferred as part of that transaction, subject to commitments at least as protective as this Policy.

6.6With your permission and in de-identified form. We disclose information when you direct or permit us to, and we may disclose aggregated or de-identified information that cannot reasonably be used to identify you.

7.1What we access. When you connect a Gmail mailbox, you grant permission to send email and to read email. We use these permissions only to:

7.2What we store. Your mailbox address and name; your permission tokens, encrypted with AES-256-GCM and kept in a separate table; for each email sent, the recipient, subject, the first 200 characters of the body and Gmail identifiers; and for each reply, the sender, subject, Gmail’s snippet (up to 300 characters) and the time it arrived.

7.3What we never do. We do not use Google user data for advertising, sell it, or use it to develop, improve or train generalized AI or machine learning models. We do not transfer it to others except as necessary to provide the features you use, for security, to comply with law, or as part of a merger or acquisition. People at HeyInvest do not read it unless you ask us to for specific messages, it is necessary for security purposes such as investigating abuse, it is required by law, or it has been aggregated and anonymized for internal operations. Within your Workspace, owners and admins can see reply excerpts for campaigns sent by members, as described in Section 6.1.

7.4Disconnecting. You can disconnect a mailbox at any time in HeyInvest, which revokes our access at Google and deletes the tokens, or remove HeyInvest’s access from your Google Account’s security settings.

9.1What we hold. Your name; current and past titles, firms and positions; education; city, region and country; links to professional profiles such as LinkedIn, Crunchbase and X, and follower counts; profile photo and firm logo; investment focus such as sectors, stages, geographies and check size; investment history and portfolio companies; an estimated net worth range with a confidence indicator, where available; your business email address and, where our sources provide them, a personal email address and telephone numbers; email verification status; and the sources of each record and when it was last seen.

9.2Where it comes from. Public regulatory filings, firm and fund websites, news and publicly available professional profiles; licensed commercial data providers; public profile information retrieved while carrying out our users’ instructions; information our users provide; and information you provide to us.

9.3Why we use it. We compile this information so that founders, fund managers and other capital raisers can find investors whose focus matches their raise and contact them in a professional capacity. In the EEA, the UK and Switzerland, we rely on our legitimate interests in supporting professional networking and the flow of capital, in a context where investors commonly publicize their investment focus to attract relevant opportunities. To protect your interests, we limit the data to professional information, withhold contact details until a subscriber unlocks them, require subscribers to use the data only to raise capital for their own businesses and to honor opt-outs, and give you simple ways to object and opt out. You can contact us for more information about how we balance these interests with your rights.

9.4Who sees it. Signed-in subscribers can see your profile information. Your contact details are revealed only when a subscriber’s Workspace spends credits to unlock them, after which that Workspace can see and use them under our Terms. Our Terms require subscribers to use investor information only to raise capital for their own businesses, to comply with anti-spam and privacy laws, and to honor opt-out and deletion requests we pass on.

9.5Your choices.

9.6How long we keep it. We keep your profile while it remains relevant to professional investing and you have not asked us to remove it. We keep suppression records for as long as needed to honor your request.

14.1Your rights. Depending on where you live, you may have the right to:

14.2How to make a request. Use our privacy request form or email privacy@heyinvest.ai. Users can also update much of their information in the app’s settings.

14.3Verification. To protect you, we verify requests to know, access, correct or delete by matching the information you give us with our records, and we may ask you to confirm the request from your email address or to provide more information. We do not require verification for opt-out or do-not-contact requests, but we may decline a request that we reasonably believe is fraudulent.

14.4Authorized agents. An authorized agent may make a request for you with your signed, written permission. We may still ask you to verify your identity or to confirm the agent’s permission directly with us.

14.5Timing. We respond within 45 days under US state privacy laws, extendable by a further 45 days with notice, and within one month under the GDPR and UK GDPR, extendable by two months where necessary. We process opt-out requests within 15 business days.

14.6Appeals. If we decline your request, you may appeal by replying to our decision or by emailing privacy@heyinvest.ai with “Appeal” in the subject line. We will respond within the time the law requires. If we deny your appeal, you may contact the attorney general of your state.

15.1Sale and sharing. Making professional profile and contact information about Listed Individuals available to our subscribers may be considered a “sale” of personal information under California law. We do not sell or share the personal information of our users, and we do not “share” personal information for cross-context behavioral advertising. We do not knowingly sell or share the personal information of anyone under 16. To opt out, use our Do Not Sell or Share My Personal Information form.

15.2Sensitive personal information. We use sensitive personal information only to provide the Services you request, to secure them and for other purposes permitted by California law, and not to infer characteristics about you. We therefore do not offer a right to limit its use.

15.3Business purposes, retention and rights. We collect and use personal information for the purposes in Section 4, keep it as described in Section 11, and you can exercise the rights in Section 14. We do not offer financial incentives in exchange for personal information.