Privacy Policy

1. Who We Are

Hey Zoe ("Company", "we", "us", or "our") operates a WhatsApp-based AI messaging platform for businesses (heyzoe.io). We provide businesses with an automated assistant ("Zoe") that communicates with their customers via WhatsApp.

Contact: office@heyzoe.io

2. What Data We Collect

When you interact with Zoe via WhatsApp, we may collect:

• Phone number — provided automatically via WhatsApp
• Name — if shared during the conversation
• Conversation content — messages exchanged with Zoe
• Date and time of interactions
• Business identifier — which business account you contacted

We do not collect payment information, government IDs, or sensitive personal data.

3. How We Use Your Data

We use the data collected solely to:

• Enable businesses to communicate with their customers via WhatsApp
• Power automated responses from the Zoe AI assistant
• Improve the quality and accuracy of responses
• Comply with legal obligations

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Legitimate interest — to provide the messaging service you initiated
• Consent — where explicitly obtained
• Legal obligation — where required by applicable law

5. Third-Party Service Providers

We share data only with trusted processors necessary to operate the service:

We never sell personal data to third parties.

6. Data Retention

We retain personal data for as long as necessary to provide the service, and no longer than 12 months after your last interaction, unless:

• A deletion request is submitted (see Section 7)
• Longer retention is required by law

7. Your Rights

You have the right to:

• Access — request a copy of data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data
• Restriction — request we limit processing of your data
• Objection — object to processing based on legitimate interests

To exercise your rights:

• Email: office@heyzoe.io
• Or send the word הסר in your WhatsApp conversation with Zoe

We will respond within 30 days.

8. Data Security

We implement industry-standard security measures including:

• Encryption of data in transit (TLS) and at rest
• Access controls limiting data access to authorized personnel only
• Regular security reviews
• Secure cloud infrastructure (Supabase, Vercel)

9. International Data Transfers

Your data may be processed in countries outside Israel or the EU (including the United States), where our service providers operate. We ensure appropriate safeguards are in place in accordance with applicable data protection laws.

10. Children's Privacy

Our service is not directed to children under the age of 16. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a child, please contact us at office@heyzoe.io and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. Continued use of our service after changes constitutes acceptance of the updated policy.

12. Applicable Law

This policy is governed by the laws of the State of Israel, including the Protection of Privacy Law, 5741-1981. Users in the EU may also have rights under the GDPR.

13. Contact Us

For any privacy-related questions or requests:

Hey Zoe
Email: office@heyzoe.io
Website: https://heyzoe.io