Privacy Policy

Last updated: July 24, 2026

1. What this policy covers

This policy explains what Heeo Inc. does with data about you, the Heeo user — the person who creates an account and makes content. When you publish content to your own channels (for example YouTube), your audience’s data is governed by those platforms’ privacy policies, not this one.

2. Information we collect

  • Account information: your name, email, and (for email signups) a password stored as a one-way hash.
  • Google sign-in: if you sign in with Google, we receive your name, email, and profile picture.
  • Channel connections: if you connect a YouTube channel, connection metadata (channel name, ID) — tokens are held by our integration provider, not in Heeo’s database (Section 5).
  • Content you create: prompts, chat with the studio, and the episodes, videos, tracks, and artwork generated for you.
  • Payment data: handled by Stripe; Heeo never sees or stores your card number.
  • Usage and diagnostics: which features you use and, when an error occurs, technical diagnostics so we can fix it.

3. How we use it

To provide the service (generate, store, and publish your content on your instruction), process payments, send service messages, prevent abuse, and improve Heeo. We do not sell your personal data. We do not use your content to train AI models without your explicit consent.

4. AI transparency

Heeo is AI-powered: scripts, narration, artwork, video, and music are produced by large language and generative models from providers such as Anthropic and Google. AI output can be wrong or unexpected — review before publishing. We do not use AI to make legally significant decisions about you. You can always ask a human to review an AI-driven action: support@heeo.io.

5. YouTube and Google account data

If you connect a YouTube channel, you grant Heeo — through our authentication provider, Composio — permission to upload and manage videos on your channel via Google’s YouTube API Services. Exactly how that data is handled:

  • What we access: the ability to upload and manage videos on the channel you connect. We do not read subscriber lists, private messages, or analytics unless you explicitly enable a feature that needs them.
  • How we use it: solely to publish the videos you create in Heeo, when you or an automation you configured request it. We never post anything you did not create or schedule.
  • Where tokens live: your Google OAuth tokens are stored by Composio, our integration provider — never in Heeo’s own database.
  • No selling, no ads, no training: Google user data is never sold, never used for advertising, and never used to train AI models. Our use complies with the Google API Services User Data Policy, including its Limited Use requirements.
  • Revoking access: disconnect any time from your Google account’s third-party access settings, which immediately invalidates Heeo’s access.

Heeo uses YouTube API Services. By connecting a channel you also agree to the YouTube Terms of Service and the Google Privacy Policy.

6. Service providers

Heeo runs on a small set of processors, each under its own privacy policy:

  • Anthropic & Google — AI generation (scripts, artwork, video, music). API traffic is not used to train their models.
  • Vercel — hosts heeo.io.
  • Supabase — application database.
  • Stripe — payments; merchant of record is Heeo Inc.
  • Composio — holds your channel OAuth tokens (Section 5).
  • Resend — transactional email.
  • PostHog / Sentry — product analytics and error diagnostics.

7. Cookies

Heeo uses essential session cookies to keep you signed in, and analytics/diagnostic storage as described above. We do not run third-party advertising cookies.

8. Retention and deletion

Your data is stored encrypted and kept while your account is active. You can request deletion of your account and content at any time at support@heeo.io; we process deletion within 30 days. Content you already published to your own channels stays on those channels until you remove it there.

9. Your rights

Depending on where you live (including GDPR Articles 15–22 for EU/UK, and state privacy laws such as the CCPA/CPRA for California residents), you may have rights to access, correct, export, delete, or restrict processing of your personal data. Email support@heeo.io with the subject “Privacy request”; we respond to verified requests within 30 days. EU/UK users may also complain to their local data-protection authority.

10. International transfers

Our processors are primarily in the United States. Where EU/UK personal data is transferred outside the EEA, we rely on Standard Contractual Clauses or an adequacy decision.

11. Children

Heeo is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has an account, contact support@heeo.io and we will delete it.

12. Changes and contact

Material changes are announced by email or in-product before they take effect. Privacy questions: support@heeo.io · Legal: legal@heeo.io