1. Introduction
HeHRa, LLC ("HeHRa," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at hehra.com and our services, including the AI HR Advisor, consultant marketplace, and related features (collectively, the "Service").
2. Information We Collect
Information You Provide:- Email address (for account creation and magic link authentication)
- Conversation content with the AI HR Advisor
- Intake notes and booking details for consultant sessions
- Payment information (processed by Stripe; we do not store card numbers)
- Consultant application information (name, bio, certifications, states)
Information Collected Automatically:- Usage data and analytics (via Vercel Analytics)
- Device type, browser type, and IP address
- Pages visited and features used
3. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Service
- Process transactions and send related information (receipts, confirmations)
- Send transactional emails (booking confirmations, account notifications)
- Facilitate consultant-client connections and bookings
- Monitor and analyze usage patterns and trends
- Comply with legal obligations
4. Data Encryption & Storage
Your AI conversation data is stored in encrypted databases powered by Supabase with Row Level Security (RLS) enabled. This means your conversations, bookings, and personal data are isolated — no other user can access your information. Payment processing is handled entirely by Stripe, which is PCI DSS Level 1 certified.
5. Data Sharing
We do not sell your personal information. We share data only in these circumstances:
- With Consultants: When you book a consultation, your intake notes and contact information are shared with the booked consultant to prepare for your session.
- Service Providers: We use Stripe (payments), Supabase (database), Anthropic (AI), Resend (email), and Vercel (hosting) to operate the Service.
- Legal Requirements: When required by law, subpoena, or to protect our rights.
6. AI Conversations
Your conversations with the AI HR Advisor are stored in your account and are accessible only to you. We use Anthropic's Claude API to process your messages. Anthropic's data retention and privacy policies apply to the processing of your messages. We do not use your conversations to train AI models.
7. Your Rights
You may:
- Access your personal data by logging into your account
- Delete your account and associated data by contacting us at privacy@hehra.com
- Opt out of non-essential communications
California residents have additional rights under the CCPA. Contact us for details.
8. Data Retention
We retain your data for as long as your account is active. Deleted conversations are soft-deleted and permanently removed after 30 days. You may request full account deletion at any time.
9. Children's Privacy
The Service is not intended for individuals under 18 years of age. We do not knowingly collect information from minors.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service.
11. Contact Us
For privacy-related questions or data requests, contact us at:
privacy@hehra.com
HeHRa, LLC
Georgia, United States