Privacy Policy

HeyThere360 is the public brand of CBG Companies LLC (“HeyThere360,” “we,” “us,” or “our”). We operate an operator-led customer acquisition service. This Privacy Policy covers the public website at https://www.heythere360.com and the HeyThere Brain portal at https://app.heythere360.com (together, the “Services”).

The public website explains the acquisition service and lets a business request a conversation. The Brain portal is where client operations, approvals, and optional account connections are handled. We do not sell software subscriptions or a public trial on this website.

This Policy explains what we collect, how we use it, who else processes it, and how to ask for access or deletion. It is an operational description, not legal advice. Have a lawyer review it before relying on it in a dispute.

People who visit heythere360.com, submit the Let’s Talk form, or book a time on the embedded calendar.

Clients and their authorized users who access the Brain portal.

Operators and staff who administer accounts inside the portal.

Clients who choose to connect Google or Meta (Facebook/Instagram) inside the portal. Those connections are optional and are not required to request a conversation on the public website.

Consultation requests: first name, last name, email, phone, business name, website, a short description of what the business does, and what you want to talk about.

Scheduling: if you pick a time, Cal.com processes the booking details you enter there, including the name and email passed into the calendar.

Business and operating information you later provide: offers, goals, lead-quality feedback, brand rules, factual claims you approve, and similar records needed to run an acquisition engagement.

Usage and technical data: IP address, browser and device type, pages viewed, approximate timestamps, and diagnostic logs needed to operate and secure the Services. If analytics is enabled, Google Tag Manager may measure aggregate use of the public site.

Communications: messages you send to hello@heythere360.com or bryan@heythere360.com, and operational emails we send about scheduling, questions, or the portal.

Connected account data, only if you connect a platform in the portal: OAuth tokens, account or page identifiers, and the minimum profile and content data required for the feature you enable. See Sections 5 and 6 for Google and Meta.

To receive and respond to acquisition inquiries, schedule conversations, and follow up on the business goals you describe.

To operate a customer acquisition engagement you authorize: research, messaging, creative, campaigns, conversion experiences, qualification, and reporting, within the goals, claims, brand rules, and budget you approve.

To run the Brain portal, including drafts and approvals. Public-facing content for a client is not published without approval in the portal or another written instruction.

To operate Google or Meta connections you authorize.

To maintain security, prevent abuse, debug outages, comply with law, and enforce our Terms.

We do not sell your personal information. We do not use information from a connected Google or Meta account to build advertising profiles for unrelated third parties.

When a client connects Google in the portal, HeyThere360 may request basic profile identifiers and Google Business Profile scopes so we can help monitor and operate that business’s public presence as part of the Services.

Google user data obtained via Google APIs is used only to provide or improve user-facing features that are visible or actionable in the portal. We do not use Google user data for any other purpose.

Limited Use: HeyThere360’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain terms:

• We use Google user data only to provide or improve HeyThere360’s user-facing features.

• We do not transfer Google user data to others except as necessary to provide those features with your direction, for security or compliance, or as required by law.

• We do not use Google user data for serving advertisements, including retargeting, personalized ads, or ad measurement unrelated to providing the Services to you.

• We do not allow humans to read Google user data unless you give affirmative admin consent for support, it is necessary for a security or compliance investigation, or we are required by law — and then only with access controls.

• We do not sell Google user data.

You can revoke access in your Google Account permissions at https://myaccount.google.com/permissions and by asking us to disconnect the account. After revocation we stop new access and delete or revoke stored tokens when reasonably practicable. Portal disconnect controls are being repaired; revoking access at Google and emailing hello@heythere360.com is sufficient to start that process.

When a client connects Meta, HeyThere360 may request Page and Instagram permissions needed to draft and, after approval, publish content and show performance for the Pages or accounts you authorize.

We use Meta data only to operate those features for your business. We do not sell Meta data, and we do not use it to build ad audiences for unrelated advertisers.

Publishing is approval-gated by default unless you give a separate written instruction for a specific automation.

You can remove HeyThere360 in Meta Business settings. Email hello@heythere360.com if you also want stored tokens cleared. Your use of Facebook and Instagram remains subject to Meta’s terms.

A Let’s Talk submission is sent to the HeyThere Business Brain, our own system at app.heythere360.com, which stores the inquiry. The form does not send that inquiry to GoHighLevel or any other third-party CRM.

We previously used GoHighLevel. We no longer have an active GoHighLevel account, and the public website no longer calls it. If you believe an older inquiry still sits with a former vendor, email us and we will tell you what we can confirm.

Choosing a time loads a Cal.com calendar. Cal.com receives the booking details you submit there. Cal.com’s own privacy policy applies to that booking.

We also use infrastructure processors such as hosting, database, email delivery, and AI inference providers. They may process data only to provide services to us.

We have not selected a separate communications provider such as Twilio. The public website does not send SMS.

We may use third-party AI providers to help prepare internal research, drafts, and operating notes. Prompts may include business information you provide so the work is relevant.

Do not submit sensitive personal data about your customers — government IDs, precise health information, children’s data, or payment card numbers — into forms or transcripts unless it is necessary, lawful, and minimized.

AI outputs can be wrong. You are responsible for reviewing claims and approvals before anything is published or sent to your customers.

We use cookies and similar technologies necessary for portal sign-in and basic site function.

The public site may use Google Tag Manager for aggregate measurement when that container is configured. You can control cookies in your browser. Blocking necessary cookies may break portal sign-in.

Service providers who process data for us, including hosting, email delivery, the Business Brain’s database, Cal.com when you book, and AI inference, under obligations to protect it.

Google or Meta, only when you connect those platforms and only to perform the actions you enable.

Professional advisors under confidentiality, when reasonably necessary.

Authorities or other parties when required by law or to protect rights, safety, and security.

A successor entity in a merger, acquisition, or asset sale, with continued protection of personal information.

We do not sell personal information, and we do not share it for cross-context behavioral advertising as those terms are commonly used under U.S. state privacy laws.

We keep inquiry, account, approval, and connection records for as long as needed to provide the Services and for legitimate business, legal, tax, and security purposes.

OAuth tokens are kept while a connection remains active and are revoked or deleted when you disconnect or when the tokens expire and are not refreshed.

You may request deletion of personal data we control. Backups may persist for a limited period before they age out.

You may request access, correction, or deletion of personal information we hold about you, subject to law and legitimate retention needs such as invoices, fraud prevention, or disputes.

Email hello@heythere360.com or bryan@heythere360.com with the subject “Privacy Request,” the email address on the inquiry or account, and whether you want access, correction, or deletion. We will take reasonable steps to verify the request.

Instructions for Google and Meta data are at https://www.heythere360.com/data-deletion.

Deleting information we hold does not delete content already published on your Google or Meta accounts, and it does not delete or manage your business email. HeyThere360 does not provide client email hosting.

Depending on where you live, you may have rights to access, correct, delete, export, or limit certain processing.

To exercise a right, use the contact method in Section 12. We will not discriminate against you for doing so.

Marketing emails include an unsubscribe option where required. Transactional messages about security, scheduling, and an active engagement may still be sent.

We use administrative and technical measures designed to protect information, including encrypted transport, access controls, and secret management for credentials.

No method of storage or transmission is perfectly secure. Tell us promptly if you suspect unauthorized access.

The Services are for businesses and are not directed to children under 13, or under 16 where that age applies. We do not knowingly collect children’s personal information. Contact us if you believe a child provided data and we will delete it.

We are based in Bellevue, Nebraska, United States. If you access the Services from elsewhere, your information may be processed in the United States and in other countries where our providers operate.

We may update this Policy. We will change the “Last updated” date and, when a change is material, provide additional notice on the site or by email when appropriate.

HeyThere360, operated by CBG Companies LLC

Bellevue, Nebraska

Privacy requests: hello@heythere360.com or bryan@heythere360.com (subject: “Privacy Request”)

Phone: 402-881-0057

Website: https://www.heythere360.com

Portal: https://app.heythere360.com

Data deletion: https://www.heythere360.com/data-deletion

Terms: https://www.heythere360.com/terms