Privacy

Techpep AB (org. no. 559458-7478), a Swedish company, is the controller of the personal data described here. Contact us about any of it at support@heisyai.com.

Your account. Your email address, a hash of your password (never the password), and the date you signed up.

Your billing. Which plan you are on, your credit balance and your invoices. Your card is held by Stripe; we receive only the last four digits, the brand and the expiry so the account area can show you which card is on file.

Your work. The images you upload, the briefs you write, the settings you choose and the renders that come back.

The plugin. The site it is installed on and its version, so support can tell what you are running.

How the site is used, if you allow it. With your consent, Google Analytics records which of our public pages are visited and where visitors came from. Without it, nothing of the kind is collected.

We do not run advertising trackers and we do not sell anything to anyone.

Your account and your work, to give you the service you asked for — the legal basis is the contract between us. Analytics, only because you agreed to it — the basis is your consent, which you can withdraw at any time under Cookie settings. Your billing, because we are required to keep records of what we charged you. The plugin's version, because we have a legitimate interest in being able to support software we wrote.

Supabase holds your account and signs you in. Stripe takes the payment and holds the card; it also receives your email and billing address, because they go on the invoice. Cloudflare serves this site and the API. Zoho holds our mailbox, so anything you write to support@heisyai.com is stored there, in the EU. Google receives the analytics described above, only if you allow it; transfers to Google in the US are covered by the EU–US Data Privacy Framework.

Two AI providers receive your work, because that is what produces the video. A language-model provider receives the image and your note: its model reads the product and writes the direction the render follows. A video-model provider receives the image and that direction and films it. Neither receives your name, your email or anything about your account — a job goes to them as a picture and some text — and we name them to you on request.

Each of these is a processor acting on our instructions, not a customer of ours. Some are outside the EEA; transfers there are covered by the standard contractual clauses.

We do not train anything on your images, your notes or your renders, and we do not build a dataset from them. They are used to make your video and for nothing else.

The AI providers above are contracted as processors: what they receive is used to produce your render and is not theirs to train on. If that ever changes for a provider we use, this page changes first.

Your account and its work stay while the account is open. Close it and we delete the account, the images and the renders within 30 days.

Invoices are kept for seven years, because bookkeeping law requires it, and they are kept whether or not the account is still open.

A copy of everything we hold about you. A correction. Deletion. A machine-readable export. An objection to a use based on legitimate interest. And, if you are in the EEA or the UK, a complaint to your supervisory authority.

Ask at support@heisyai.com and we will answer within a month.

The ones the site cannot work without — the session that keeps you signed in, your preferences, and what Stripe sets on its own checkout page to take a payment — and Google Analytics, only if you accept it in the cookie banner. No advertising cookies. The cookie page lists each one.

Heisy is a tool for businesses, and an account is for someone who can enter a contract. It is not directed at anyone under 18, and we do not knowingly hold data about anyone under 18; if you think we do, write to us and we will delete it.

The date at the top is when this last changed. A change that affects what we do with your data is announced in the account area before it takes effect.