hiublue

Privacy Policy

Last updated July 2, 2026

This Privacy Policy explains how hiublue (“hiublue”, “we”, “us”) collects, uses, and protects information when you use the hiublue application and related services (the “Service”). By using the Service you agree to the practices described here.

Who we are

hiublue provides an AI workspace where named AI workers help operate outbound businesses — handling email, calendar scheduling, documents, and outreach on your behalf. You can reach us at [email protected].

Information we collect

  • Account information. When you sign in with Google, we receive your name, email address, and profile picture to create and secure your account.
  • Google service data. If you connect a Google integration, we access the specific data needed for that feature — see “Google user data” below.
  • Connected social account data. If you connect a LinkedIn, Facebook, or Instagram account, we access the specific data needed to publish and measure content on the pages and accounts you choose — see “Connected social accounts” below.
  • Content you create. Workspaces, workers, messages, contacts, campaigns, and settings you create in the Service.
  • Usage and device data. Log data such as IP address, browser type, and actions taken, used to operate and secure the Service.

Google user data and the permissions we request

Google integrations are optional and only activate when you explicitly connect them. We request the narrowest scopes each feature needs:

  • Gmail (gmail.send, gmail.modify) — so your AI worker can read, search, label, draft, and send email from your connected mailbox at your direction.
  • Calendar (calendar.events) — so your worker can read your availability and create, reschedule, or cancel appointments.
  • Drive & Docs (drive) — so your worker can find, read, create, and update documents and files you ask it to work with.
  • Sheets (spreadsheets.readonly, drive.metadata.readonly) — read-only access so you can import audiences from your spreadsheets.

You can disconnect any integration at any time from Settings → Integrations, or revoke access from your Google Account permissions page.

How we use Google data

We use data obtained through Google APIs solely to provide the features you ask for — reading and sending your mail, managing your calendar, and working with your documents within the Service. We do not use Google user data for advertising, and we do not sell it.

Google API Limited Use disclosure

hiublue’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we only use Google user data to provide or improve user-facing features that are prominent in the Service; we do not transfer or sell this data except as necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition; we do not use the data for advertising; and we do not allow humans to read the data unless we have your consent, it is necessary for security or to comply with applicable law, or the data is aggregated and anonymized.

Connected social accounts (LinkedIn, Facebook & Instagram)

hiublue’s Social features let you connect social accounts you own or administer so your AI worker can publish and measure content on your behalf. Each connection is optional, uses OAuth, and only grants access to the specific pages and accounts you select. We do not access pages, profiles, or content you do not connect, and we never post without your direction.

  • LinkedIn. When you connect LinkedIn, we access your basic profile (openid, profile, email), publish posts you compose to your personal feed or to a Company Page you administer (w_member_social, w_organization_social), read those posts back with their engagement — reactions, comments, and shares (r_organization_social), and list the Company Pages you administer so you can only publish to your own pages (rw_organization_admin).
  • Facebook & Instagram (Meta). When you connect Meta, we list the Facebook Pages and linked Instagram Business accounts you manage (pages_show_list, instagram_basic, business_management), publish posts you compose (pages_manage_posts, instagram_content_publish), read post and page engagement plus ad-performance metrics for reporting (pages_read_engagement, instagram_manage_insights, ads_read), and — where you enable outreach — send and receive messages and run comment-to-message replies on your connected Pages and Instagram accounts (pages_messaging, pages_manage_metadata, instagram_manage_messages).

We use this data solely to provide the Social publishing, analytics, and outreach features you enable, on the accounts you connect. We do not sell it, and we do not use it for our own advertising targeting. Access tokens are stored encrypted and are revoked and deleted when you disconnect the account or delete your workspace. hiublue’s use of information from the Meta and LinkedIn platforms adheres to those platforms’ developer policies and Limited Use requirements.

AI processing and service providers

The Service uses AI models to power your workers. To carry out a task you request, relevant content — which may include Google data such as email or document text — is sent to our AI model provider (Anthropic) for processing at the moment of the request. This data is used only to generate the response for that task. It is not used to train generalized AI/ML models, and providers are contractually bound not to use it for their own purposes.

We also rely on infrastructure providers (e.g. cloud hosting and databases) that process data on our behalf under confidentiality and data-protection obligations.

Data retention and deletion

We retain your data for as long as your account is active. You can disconnect an integration to stop further access, delete individual content within the Service, or request deletion of your account and associated data by emailing [email protected]. When you delete your account, we remove your workspace data, and tokens for connected Google accounts are revoked and deleted.

Security

Access tokens are encrypted at rest, traffic is served over HTTPS, and access to production data is restricted to authorized personnel. No method of transmission or storage is perfectly secure, but we work to protect your information using industry practices.

Your choices

You can review and revoke hiublue’s access at any time from your Google Account permissions, disconnect integrations in-app, and contact us to access or delete your data. Depending on your location, you may have additional rights under applicable privacy laws.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, communicated in-app.

Contact

Questions about this policy or your data? Email [email protected].