HeyCaly

Privacy Policy

HeyCaly Privacy Policy

Last updated: April 10, 2026

HeyCaly ("we," "us," or "our") operates heycaly.com and the HeyCaly platform. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, use our services, or interact with our AI-powered WhatsApp re-engagement platform.

By using our services, you agree to the terms of this Privacy Policy.

1. Information We Collect

Information You Provide

  • Account information: Name, email address, business name, and payment details when you sign up or subscribe
  • Business data: Calendar availability, appointment history, service offerings, and staff information you connect to HeyCaly
  • Customer contact data: Phone numbers and names of your customers that you import or connect for WhatsApp messaging
  • Contact form submissions: Name, email, and any message you send through our contact form

Information Collected Automatically

  • Usage data: Pages visited, features used, time spent on the platform, and browser/device information
  • Cookies and tracking: We use cookies and similar technologies to improve your experience and analyze site traffic (see our Cookie Policy)
  • WhatsApp interaction data: Message delivery status, response rates, and booking conversion metrics

Information from Third Parties

  • Calendar providers: Appointment and availability data from Google Calendar, Apple Calendar, Microsoft Outlook, or Calendly
  • WhatsApp Business API: Message delivery and read receipts via 360dialog

2. How We Use Your Information

We use your information to:

  • Operate and deliver the HeyCaly platform and AI-powered messaging services
  • Send personalized WhatsApp messages to your customers on your behalf
  • Sync appointments with your calendar system
  • Process payments and manage your subscription
  • Provide analytics and insights on re-engagement performance
  • Send you service updates, feature announcements, and support communications
  • Send marketing emails (only with your consent — unsubscribe anytime)
  • Improve our platform, AI models, and services
  • Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information or your customers' data. We may share data with:

  • WhatsApp Business API provider (360dialog) to send and receive WhatsApp messages
  • Payment processors (Stripe) to process subscription payments
  • Calendar providers (Google, Apple, Microsoft, Calendly) to sync appointments
  • AI providers (Anthropic/Claude) to generate personalized messages — no customer data is stored by AI providers
  • Email service providers (Postmark, Brevo) to send transactional and marketing emails
  • Analytics tools (Vercel Analytics) to understand platform usage
  • Error monitoring (Sentry) to identify and fix technical issues
  • Legal authorities if required by law

All third-party providers are bound by their own privacy policies and data protection obligations.

4. AI and Automated Processing

HeyCaly uses AI (Claude by Anthropic) to generate personalized WhatsApp messages for your customers. Important details:

  • AI processes customer names, visit history, and service preferences to create personalized messages
  • No customer data is retained by the AI provider — each message is generated in real-time without persistent storage
  • You review and approve message templates and tone before AI sends messages
  • Customers can opt out of receiving messages at any time by replying "STOP"
  • AI-generated messages are clearly sent from your business, not from HeyCaly

5. Data Security

We implement industry-standard security measures:

  • All data is encrypted in transit (TLS/SSL) and at rest (AES-256)
  • API keys and credentials are encrypted before storage
  • Access controls and authentication via Clerk
  • Regular security audits and monitoring via Sentry
  • Infrastructure hosted on Vercel and Supabase with SOC 2 compliance

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

  • Account data: Retained for the duration of your subscription plus 30 days after cancellation
  • Customer contact data: Deleted within 30 days of account cancellation or upon your request
  • WhatsApp message logs: Retained for 90 days for analytics purposes, then anonymized
  • Payment records: Retained as required by law (typically 7 years for tax purposes)

7. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you and your customers
  • Correct inaccurate or incomplete data
  • Delete your personal data and all associated customer data ("right to be forgotten")
  • Export your data in a portable format
  • Opt out of marketing communications at any time
  • Object to automated processing of your data

To exercise any of these rights, contact us at hello@heycaly.com.

For EU/EEA Residents (GDPR)

We process your data based on consent and/or contractual necessity. You have the right to withdraw consent at any time. Our lawful bases for processing are: performance of a contract, consent, and legitimate interests.

For Turkish Residents (KVKK)

We comply with the Turkish Personal Data Protection Law (KVKK). You have the right to learn whether your personal data is processed, request information about processing, and request deletion.

For California Residents (CCPA)

You have the right to know what personal information we collect and to request its deletion. We do not sell personal information.

8. International Data Transfers

Your data may be processed in countries outside your jurisdiction (including the USA and Turkey). We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email and by posting the updated policy on this page.

11. Contact Us

If you have questions about this Privacy Policy, contact us at:

Email: hello@heycaly.com

Website: heycaly.com