Privacy Policy | Hey Teo — AI chief of staff

Hey Teo ("we," "us," or "our") operates this website and related services. This policy explains what we collect, why we collect it, and the choices you have. If you have questions, email us at hello@heyteo.ai.

Information we collect

What you give us directly

Waitlist: When you join the waitlist, we collect at least your email address. If you sign in with Google, phone, or email/password, we may also collect your name and an account identifier from our authentication provider (Firebase Auth).
Phone number: If you verify with SMS or enroll a number for Hey Teo messages, we collect the mobile number you provide. That number may be processed by our authentication and messaging infrastructure providers (for example, Google Firebase for verification SMS, and carriers). See SMS and text messages below.
Referral and marketing attribution: If you arrive with a referral code or UTM parameters in the URL, we may store those values with your signup so we can understand how people hear about Hey Teo.
Support: If you email us, we keep the contents of that message and our replies.

What we collect automatically (including at waitlist signup)

We do not ask you extra questions in the waitlist form to collect the items below. They are collected automatically when you submit the waitlist or use our site, using standard browser and server signals.

Network and device identifiers: Including your IP address (as sent to our servers), which may be used to infer your general location and to protect against abuse.
Approximate location from IP: We use a third-party service to map your IP address to an approximate geographic area (for example, city or region level). This is not as precise as GPS and can be affected by VPNs, corporate networks, or mobile carriers.
Browser and device details: Such as browser type and version, operating system, device type (e.g. mobile vs desktop where detectable), screen size, language preferences, time zone, and a formatted local wall-clock time at the moment of signup.
Technical context: Such as viewport size, pixel density, and—where your browser exposes—connection hints (e.g. connection type). These help us understand how people experience our site.
HTTP headers: Such as User-Agent, Accept-Language, and optionally referrer or client-hint headers when present.

We store this combined technical profile in our database (for example, in a structured field associated with your waitlist entry) alongside your email and other signup information you provide.

SMS and text messages (Twilio and carriers)

We may send transactional text messages related to your relationship with Hey Teo—for example, one-time verification codes when you sign in with a mobile number, security notices, or service-related updates tied to your account or waitlist enrollment. We do not plan to use SMS for general marketing or promotional campaigns; if that ever changes, we will ask for separate consent where required.

How you agree (opt-in)

You agree to receive these transactional messages when you take a clear action that requires us to text you—for example, entering your mobile number and requesting a verification code, or enrolling from the number you want to use with Hey Teo. That action, together with this Privacy Policy, is how we record your consent. We may store the time of that action with your account or waitlist record.

Message frequency and rates

Message frequency varies based on what you request (for example, how often you trigger verification). Message and data rates may apply according to your mobile carrier plan. Carriers are not liable for delayed or undelivered messages.

How to opt out

For automated SMS programs where STOP applies, you can text STOP to the number we message you from to end those messages. You may text HELP for help or contact hello@heyteo.ai. Note: stopping marketing or optional texts may not affect essential account or security messages where we are required or permitted to contact you.

Who sends the messages

SMS may be delivered through telecommunications infrastructure providers. We use vendors such as Twilio (or similar providers) as subprocessors to route messages, and Google Firebase for phone authentication flows that send verification texts. Those providers process phone numbers and message metadata as needed to deliver SMS and operate their services, under their terms and our agreements with them.

“Share on WhatsApp” on our site

On some pages (for example, after joining the waitlist), you may tap Share on WhatsApp. That opens WhatsApp (or wa.me) on your device with a pre-filled message you can send to contacts you choose. We do not receive your WhatsApp chats through that button—we only know that you clicked share, if our analytics records that event. The recipient and message content are between you, WhatsApp, and Meta, governed by WhatsApp's terms and privacy policy.

Future: Hey Teo on WhatsApp Business

If we offer Hey Teo through the WhatsApp Business Platform, messages you exchange with our business account may be processed by Meta and our service providers to deliver the service, prevent abuse, and improve reliability. We will describe what content is stored, for how long, and your choices in an update to this policy and, where appropriate, in-product notices before or when that goes live.

How we use information

To operate the waitlist, authenticate you, and send launch-related communications.
To send transactional SMS or service messages when you request them or as described in this policy.
To understand how visitors find and use our site, improve our product, and detect fraud or abuse.
To comply with legal obligations and enforce our terms.

We do not use your business conversations or data to train public-facing foundation models in place of our stated product terms. If you use Hey Teo as a product later, separate terms will describe how your data is handled in the product.

Legal bases (where applicable)

Depending on where you live, we may rely on your consent (for example, marketing emails where required), our legitimate interests (for example, securing the site and measuring basic interest in our waitlist), or performance of a contract when you use our services.

Service providers: We use vendors such as Google Firebase (hosting, authentication, database), analytics tools you configure via our site, SMS and communications providers (such as Twilio when we route messages through them), and infrastructure providers. They process data on our behalf under agreements.
WhatsApp / Meta: If you use a WhatsApp share link from our site, Meta processes data under its own policies. If we launch a WhatsApp Business integration, Meta may process message content and metadata as part of delivering that channel.
IP geolocation: We use a third-party service (currently ipapi.co) to look up approximate location from IP addresses. That provider receives your IP for the purpose of returning location metadata.
Legal: We may disclose information if required by law, court order, or to protect rights, safety, or security.
Business transfers: If we are involved in a merger or acquisition, your information may transfer as part of that transaction.

We do not sell your personal information for money as defined under applicable U.S. state privacy laws.

Retention

We keep waitlist and technical data for as long as needed to operate the waitlist and communicate with you about Hey Teo, unless a longer period is required by law or legitimate business needs (for example, security logs). You may request deletion as described below.

Security

We use industry-standard safeguards (including encryption in transit) appropriate to the nature of our site. No method of transmission over the internet is 100% secure.

Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. To exercise these rights, contact us at hello@heyteo.ai. We may need to verify your request.

You can also unsubscribe from marketing emails using the link in those messages, where applicable.

Children

Our services are not directed to children under 16, and we do not knowingly collect information from children. If you believe we have collected a child's information, contact us and we will take appropriate steps.

International transfers

We may process and store information in the United States and other countries where we or our providers operate. Those countries may have different data protection laws than your own.

Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and update the "Last updated" date. If changes are material, we will take additional steps as required by law.

Contact

Questions about privacy? Email hello@heyteo.ai.