Privacy Policy

Who we are

hiublue provides an AI workspace where named AI workers help operate outbound businesses - handling email, calendar scheduling, documents, and outreach on your behalf. The Service is operated by hiublue, LLC, a company registered in Montana, United States, with its registered office at 415 N Benton Ave, Helena, Montana 59601-5041, United States. You can reach us at [email protected].

Information we collect

• Account information. When you sign in with Google, we receive your name, email address, and profile picture to create and secure your account.
• Google service data. If you connect a Google integration, we access the specific data needed for that feature - see “Google user data” below.
• Connected social account data. If you connect a LinkedIn, Facebook, or Instagram account, we access the specific data needed to publish and measure content on the pages and accounts you choose - see “Connected social accounts” below.
• Content you create. Workspaces, workers, messages, contacts, campaigns, and settings you create in the Service.
• Usage and device data. Log data such as IP address, browser type, and actions taken, used to operate and secure the Service.

Google user data and the permissions we request

Google integrations are optional and only activate when you explicitly connect them. We request the narrowest scopes each feature needs:

• Gmail (gmail.send, gmail.modify) - so your AI worker can read, search, label, draft, and send email from your connected mailbox at your direction.
• Calendar (calendar.events) - so your worker can read your availability and create, reschedule, or cancel appointments.
• Drive & Docs (drive) - so your worker can find, read, create, and update documents and files you ask it to work with.
• Sheets (spreadsheets.readonly, drive.metadata.readonly) - read-only access so you can import audiences from your spreadsheets.

You can disconnect any integration at any time from Settings → Integrations, or revoke access from your Google Account permissions page.

How we use Google data

We use data obtained through Google APIs solely to provide the features you ask for - reading and sending your mail, managing your calendar, and working with your documents within the Service. We do not use Google user data for advertising, and we do not sell it.

How we share Google user data

We do not sell Google user data, and we never share it for advertising. We disclose it only to the service providers listed below, only so far as each one needs it to deliver a feature you asked for, and only under contracts that bind them to confidentiality, to process the data on our instructions alone, and not to use it for their own purposes or to train generalized AI/ML models.

• Anthropic (AI model provider). When your worker carries out a task, the content it needs is sent to Anthropic at the moment of the request. That content may include email text, calendar entries, and document or spreadsheet contents from your connected Google account.
• OpenAI (alternative AI model provider). The same categories of content, where your workspace is configured to run on our OpenAI-based engine instead of the Anthropic one.
• Amazon Web Services. Hosting and databases for the Service, file storage for attachments and media (which can include attachments from your Gmail), and Amazon SES, which transmits the email the Service sends on your behalf.
• Cloudflare. Network delivery and TLS termination. All traffic to the Service passes through Cloudflare in transit.

Some processing never leaves us: we run our own AI models on hardware we own and operate, and we use them for tasks such as naming conversations, classifying incoming mail, and building search indexes over your workspace. No third party is involved in that processing.

Beyond the providers above, we disclose Google user data only when the law compels us to, such as a valid legal process, or when we need to in order to protect the safety and security of our users and the Service, and we may transfer it as part of a merger, acquisition, or sale of assets, in which case we will give you notice before it becomes subject to a different privacy policy. We share Google user data with no one else.

Google API Limited Use disclosure

hiublue’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we only use Google user data to provide or improve user-facing features that are prominent in the Service; we do not transfer or sell this data except as necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition; we do not use the data for advertising; and we do not allow humans to read the data unless we have your consent, it is necessary for security or to comply with applicable law, or the data is aggregated and anonymized.

Connected social accounts (LinkedIn, Facebook & Instagram)

hiublue’s Social features let you connect social accounts you own or administer so your AI worker can publish and measure content on your behalf. Each connection is optional, uses OAuth, and only grants access to the specific pages and accounts you select. We do not access pages, profiles, or content you do not connect, and we never post without your direction.

• LinkedIn. When you connect LinkedIn, we access your basic profile (openid, profile, email), publish posts you compose to your personal feed or to a Company Page you administer (w_member_social, w_organization_social), read those posts back with their engagement - reactions, comments, and shares (r_organization_social), and list the Company Pages you administer so you can only publish to your own pages (rw_organization_admin).
• Facebook & Instagram (Meta). When you connect Meta, we list the Facebook Pages and linked Instagram Business accounts you manage (pages_show_list, instagram_basic, business_management), publish posts you compose (pages_manage_posts, instagram_content_publish), read post and page engagement plus ad-performance metrics for reporting (pages_read_engagement, instagram_manage_insights, ads_read), and - where you enable outreach - send and receive messages and run comment-to-message replies on your connected Pages and Instagram accounts (pages_messaging, pages_manage_metadata, instagram_manage_messages).

We use this data solely to provide the Social publishing, analytics, and outreach features you enable, on the accounts you connect. We do not sell it, and we do not use it for our own advertising targeting. Access tokens are stored encrypted and are revoked and deleted when you disconnect the account or delete your workspace. hiublue’s use of information from the Meta and LinkedIn platforms adheres to those platforms’ developer policies and Limited Use requirements.

AI processing and service providers

The Service uses AI models to power your workers. To carry out a task you request, relevant content - which may include Google data such as email or document text - is sent to our AI model provider (Anthropic) for processing at the moment of the request. This data is used only to generate the response for that task. It is not used to train generalized AI/ML models, and providers are contractually bound not to use it for their own purposes.

Where a task runs on our OpenAI-based engine instead, the same content is sent to OpenAI on the same terms. We also rely on the infrastructure providers named under “How we share Google user data” above, each of which processes data on our behalf under confidentiality and data-protection obligations.

Data retention and deletion

We retain your data for as long as your account is active. You can disconnect an integration to stop further access, delete individual content within the Service, or request deletion of your account and associated data by emailing [email protected]. When you delete your account, we remove your workspace data, and tokens for connected Google accounts are revoked and deleted.

Security

Access tokens are encrypted at rest, traffic is served over HTTPS, and access to production data is restricted to authorized personnel. No method of transmission or storage is perfectly secure, but we work to protect your information using industry practices.

Your choices

You can review and revoke hiublue’s access at any time from your Google Account permissions, disconnect integrations in-app, and contact us to access or delete your data. Depending on your location, you may have additional rights under applicable privacy laws.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, communicated in-app.

Contact

Questions about this policy or your data? Email [email protected].

hiublue, LLC
415 N Benton Ave
Helena, Montana 59601-5041
United States