Privacy Policy

HeyThere Marketing (“HeyThere,” “we,” “us,” or “our”) operates the marketing website at https://www.heythere360.com and the HeyThere Brain portal at https://app.heythere360.com (together, the “Services”). This Privacy Policy explains what information we collect, how we use it, how we share it, how long we keep it, and the choices you have.

By using the Services, you agree to this Policy. If you do not agree, do not use the Services.

This Policy is intended to meet the disclosure expectations of Google and Meta when you connect those platforms to HeyThere. It is not a substitute for legal advice; if your situation is complex, consult counsel.

Prospective clients who book a consult or submit a pre-audit form on heythere360.com.

Clients and their authorized users who access the Brain portal (including magic-link sign-in).

Operators and staff who administer accounts inside the portal.

If you connect Google, Meta (Facebook/Instagram), or a CRM such as GoHighLevel, this Policy also covers how we handle data obtained through those Connections.

Account & contact information: name, email address, phone number, business name, website, and related intake answers when you book, enrich a lead, or create a portal account.

Business & marketing information: offers, tools/CRM notes, goals, meeting transcripts you paste, audits, approval drafts, notes, billing stage, and similar operational records.

Usage & technical data: IP address, browser/device type, pages viewed, approximate timestamps, and diagnostic logs needed to operate and secure the Services.

Communications: messages you send us (for example to hello@heythere360.com or bryan@heythere360.com) and operational emails we send you (briefs, ready packs, magic links, billing notices).

Connected account data (only if you choose to Connect): OAuth tokens, account/page identifiers, and the minimum profile and content data required for the features you enable. See Sections 5–6 for Google and Meta specifics.

To provide and improve the Services — including lead intake, dossiers, marketing diagnoses/audits, agent runs, signals, approvals, and client portal features.

To communicate with you about scheduling, deliverables, account health, security, and product updates.

To run AI-assisted workflows that generate analyses and drafts for your review. Public-facing content is not published without your approval in the portal (or another written instruction from you).

To operate Connections you authorize (for example reading Google Business Profile information you grant, or publishing content you approve to Facebook/Instagram Pages).

To maintain security, prevent fraud/abuse, debug outages, comply with law, and enforce our Terms of Service.

We do not sell your personal information. We do not use Connected platform data to build advertising profiles for unrelated third parties.

When you connect Google, HeyThere may request access such as basic profile identifiers (openid/email/profile) and Google Business Profile management scopes (for example business.manage) so we can help you monitor and operate your public business presence as part of the Services.

Google user data obtained via Google APIs is used only to provide or improve user-facing features of HeyThere that are visible or actionable to you in the portal (for example reputation/review workflows, business-profile related insights, and related drafts you approve). We do not use Google user data for any other purpose.

Limited Use (Google API Services User Data Policy): HeyThere’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain terms:

• We use Google user data only to provide/improve HeyThere’s user-facing features.

• We do not transfer Google user data to others except (a) as necessary to provide/improve those features with your direction, (b) for security/compliance, or (c) as required by law.

• We do not use Google user data for serving advertisements, including retargeting, personalized ads, or ad measurement unrelated to providing the Services to you.

• We do not allow humans to read Google user data unless you give us affirmative admin consent for support, it is necessary for security/compliance investigations, or we are required by law — and then only with appropriate access controls.

• We do not sell Google user data.

You can revoke HeyThere’s access at any time in your Google Account permissions (https://myaccount.google.com/permissions) and/or by disconnecting Google in the Brain portal under Connect. After disconnect/revocation we stop new access and delete or revoke stored tokens when reasonably practicable.

When you connect Meta, HeyThere may request Page and Instagram permissions such as listing Pages you manage, managing Page posts, basic Instagram account access, and publishing Instagram content — solely so we can draft and (when you approve) publish marketing content to the Pages/accounts you authorize.

We use Meta data only to operate those features for your business: selecting the correct Page/account, preparing drafts, publishing content you approve, and showing status/errors in the portal.

We do not sell Meta data. We do not use Meta data to build ad audiences for unrelated advertisers. We do not scrape friends lists or unrelated personal profiles.

Publishing is approval-gated by default: HeyThere prepares drafts; you (or your designated approver) must approve before content goes live, unless you give a separate written instruction for a specific automation.

You can remove HeyThere’s access in Meta Business settings and/or disconnect Meta in the Brain portal under Connect. We then stop new access and delete or revoke tokens when reasonably practicable.

Your use of Facebook/Instagram remains subject to Meta’s terms and policies.

If you link a CRM such as GoHighLevel, we store the identifiers and credentials needed to update contacts, pipelines, or related workflows you enable.

We use infrastructure and processors such as hosting providers, databases, email delivery, and AI inference providers under contractual obligations to protect data. They may process data only to provide services to us.

Those platforms have their own privacy policies. Your use of them remains subject to their terms.

We use third-party AI providers (such as OpenAI) to help generate dossiers, audits, intelligence signals, and draft content. Prompts may include business information you provide so outputs are relevant.

Do not submit sensitive personal data about your customers (government IDs, precise health diagnoses, children’s data, payment card numbers, etc.) into forms or transcripts unless necessary, lawful, and minimized.

AI outputs can be wrong or incomplete. You are responsible for reviewing Approvals before anything is published or sent to your customers.

We use cookies and similar technologies necessary for authentication (for example portal session cookies) and basic site function.

We may use analytics tools to understand aggregate traffic on heythere360.com. You can control cookies through your browser settings; disabling necessary cookies may break sign-in.

Service providers who process data for us (hosting, email delivery, databases, AI inference, error monitoring) under obligations to protect it.

Platforms you connect (Google, Meta, GoHighLevel, etc.) as needed to perform authorized actions you enable.

Professional advisors (legal, accounting) under confidentiality, when reasonably necessary.

Authorities or other parties when required by law, legal process, or to protect rights, safety, and security.

A successor entity in connection with a merger, acquisition, or asset sale, subject to continued protection of personal information.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising as those terms are commonly defined under U.S. state privacy laws.

We retain account, lead, audit, approval, signal, and connection records for as long as needed to provide the Services and for legitimate business, legal, tax, and security purposes.

OAuth tokens are retained while a Connection remains active and are revoked/deleted when you disconnect or when tokens expire and are not refreshed.

When services end, you may request deletion of personal data we control (see Section 12). Backups may persist for a limited period on a rolling schedule before permanent deletion.

You may request access to, correction of, or deletion of personal information we hold about you, subject to applicable law and legitimate retention needs (for example invoices, fraud prevention, or legal disputes).

How to request deletion or a copy of your data: email hello@heythere360.com or bryan@heythere360.com with the subject line “Privacy Request,” include the email address on your account, and tell us whether you want access, correction, or deletion. We will verify your identity reasonably and respond within a commercially reasonable time (and within any period required by law).

You can also disconnect Google/Meta/CRM Connections in the portal (Connect) and revoke access directly in those providers’ security settings.

Deleting your HeyThere account data does not automatically delete content already published to your Google, Meta, or CRM accounts — you control those platforms.

Depending on where you live (for example certain U.S. states or the EEA/UK), you may have rights to access, correct, delete, export, or restrict certain processing, or to opt out of certain uses.

To exercise rights, contact us as described in Section 12. We will not discriminate against you for exercising privacy rights.

Marketing emails from us include an unsubscribe option where required. Transactional messages (security, approvals, billing) may still be sent.

We use administrative, technical, and organizational measures designed to protect information, including encrypted transport (HTTPS), access controls, and secret management for API credentials.

No method of transmission or storage is 100% secure. Use strong unique passwords for connected platforms and protect magic-link emails. Notify us promptly of suspected unauthorized access.

The Services are for businesses and are not directed to children under 13 (or under 16 where applicable). We do not knowingly collect children’s personal information. If you believe a child provided data, contact us and we will delete it.

We are based in Nebraska, United States. If you access the Services from elsewhere, you understand your information may be processed in the United States and other countries where our providers operate.

We may update this Policy from time to time. We will change the “Last updated” date at the top of this page and, when changes are material, provide additional notice in the portal or by email when appropriate.

HeyThere Marketing

Bellevue & Omaha, Nebraska — serving Nebraska & Iowa

Privacy / data requests: hello@heythere360.com or bryan@heythere360.com (subject: “Privacy Request”)

Phone: 402-881-0057

Web: https://www.heythere360.com

Portal: https://app.heythere360.com

This Privacy Policy: https://www.heythere360.com/privacy

Terms of Service: https://www.heythere360.com/terms