1. Scope
This Privacy Policy applies to Hey T’s website, personal intelligence, agent runs, connected computers, approvals, events, artifacts, support, and related services (the “Service”). It does not govern third-party products you choose to connect, which operate under their own policies.
2. Information we collect
Account and identity information
We collect the phone number you provide, verification and consent events, encrypted session information, and an internal pseudonymous identity. If you connect GitHub, Discord, or another provider, we receive the account identifiers and profile details that provider makes available for the connection. We store provider mappings in pseudonymous form where practical.
Content and agent activity
We process prompts, messages, attachments, preferences, memories, approvals, tool instructions, computer events, generated output, and artifacts. This can include personal information found in content you submit or services you direct Hey T to access.
Technical and usage information
We collect information needed to operate and secure the Service, such as IP address, device and browser type, request timestamps, routes used, error logs, security signals, and approximate location inferred from an IP address. We do not currently use third-party advertising cookies or behavioral advertising trackers.
Information from connected services
When you connect a service or ask Hey T to work with it, we receive the data needed to carry out your instruction. The scope depends on the permissions you grant and the task you request. You can remove a supported connection in account settings or through the third-party service.
3. How we use information
We use information to:
- authenticate you and maintain your personal intelligence across sessions;
- understand requests, run agents and tools, and produce responses and artifacts;
- show progress, request approvals, preserve relevant context, and connect services;
- prevent spam, fraud, abuse, unauthorized access, and other security incidents;
- debug, analyze, support, and improve the reliability and usability of the Service;
- communicate about the Service and respond to requests; and
- comply with law and enforce our agreements.
4. AI processing
Your requests and relevant context are sent to AI models and infrastructure providers so Hey T can generate responses, make plans, and perform requested work. At the effective date of this policy, the agent uses Cloudflare Workers AI. Hey T does not use your private prompts, messages, attachments, or artifacts to train a general-purpose AI model of its own.
We may evaluate de-identified or aggregated service signals to improve reliability and product behavior. If our model providers or training practices materially change, we will update this policy and provide appropriate notice or choice.
5. Mobile numbers and SMS consent
We use your mobile number to send user-requested authentication and security messages, maintain your account identity, and prevent abuse. We do not sell or rent mobile numbers. We do not share mobile numbers, SMS opt-in data, or SMS consent with third parties for their marketing or promotional purposes.
We disclose this information only to Twilio, carriers, and vendors that help deliver, authenticate, secure, or support the messaging program; when you direct us to; or when required by law. The SMS Terms explain the sign-in messaging program.
6. When we disclose information
We may disclose information in these circumstances:
- Service providers. Vendors process information for hosting, storage, AI inference, communications, security, support, and similar operations. Current core providers include Cloudflare and Twilio.
- Connected services and computer providers. We send information to GitHub, Discord, t.computer, websites, APIs, or other services when needed for a connection or task you request.
- Legal and safety reasons. We may disclose information if reasonably necessary to comply with law, protect rights and safety, investigate misuse, or enforce our agreements.
- Business transactions. Information may be transferred in connection with a financing, merger, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate safeguards.
- With your direction. We disclose information when you ask us to or give clear permission.
We do not sell personal information or share it for cross-context behavioral advertising.
7. Retention
We retain information for as long as reasonably needed to provide and secure the Service, preserve the context you expect, comply with legal obligations, resolve disputes, and enforce agreements. Auth.js sessions currently expire after 30 days unless refreshed or ended sooner. Conversation history, memories, connections, and artifacts may remain until you delete them, close your account, or ask us to remove them, subject to technical and legal exceptions.
We retain SMS consent and opt-out evidence as needed to operate the program and demonstrate compliance. Backup copies and security logs may remain for a limited period after deletion.
8. Security
We use technical and organizational safeguards designed to protect information. For example, sessions are encrypted, internal identities are pseudonymous, and the agent and computer layers do not need your raw phone number. No system is perfectly secure, so we cannot guarantee that information will never be accessed, lost, or altered without authorization.
9. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or obtain a copy of personal information, or to object to certain processing. You may disconnect supported providers in Settings and can stop SMS as described in the SMS Terms. Send a request to the contact below. We may need to verify your identity before completing it.
You may also have the right to appeal our response or complain to your local privacy regulator. We will not discriminate against you for exercising a privacy right.
10. International use
Hey T and its providers may process information in the United States and other countries. These places may have different data-protection laws than where you live. Where required, we use recognized safeguards for international transfers.
11. Children
The Service is not directed to children under 18, and we do not knowingly collect their personal information. If you believe a child has provided information, contact us so we can investigate and remove it as appropriate.
12. Changes and contact
We may update this policy as Hey T changes. We will change the effective date and provide additional notice when required. Questions or privacy requests can be sent to legal@t.computer.