Heybird Privacy Policy
Last updated 5 October 2026
Heybird is an AI receptionist that answers phone calls and texts for small businesses. This policy explains what we collect, why, who helps us process it, and your rights. Heybird is operated by UNIQ VENTURES, SLU (Spain), the data controller for business owners' account data. For the calls and messages a business receives, the business is the controller and we process that data on its behalf.
What we collect
- Account data (business owners): name, email, phone number, country, business name, hours, services and the information you add to your receptionist.
- Call and message data: the caller's phone number, call audio while it is processed, call recordings (unless the owner turns recording off), transcripts, summaries, messages taken, bookings, and texts sent or received on the business number.
- Caller memory: when the owner leaves "remember callers" on, a short note about returning callers (for example their name and last topic).
- Email: emails sent to the business's Heybird address and the replies sent from it.
- Connected calendar (only if the owner connects one): the free/busy times of the owner's calendar for the next two weeks, and the events Heybird creates for bookings. We store the access tokens encrypted. We do not read the titles, attendees or contents of the owner's own events, and we do not change or delete events Heybird did not create.
- Your details for errands (only if you add them): your full name, ID number, date of birth, address or account numbers, for Heybird to identify you when it calls a company for you and they ask to verify the account holder. We store them encrypted; the assistant sees them only masked; a call gives them only when you approved that call, and only to the company it calls. We never keep passwords, PINs, codes or card numbers.
- Subscription data: your App Store subscription status and transaction ids. Apple handles payment; we never see your card.
- Device and diagnostics: push-notification tokens, and crash and error reports.
Why we use it
- To answer calls and texts for the business, take messages, book appointments and send the owner notifications and summaries (performing our contract with the business).
- To bill the subscription and count answered calls against the plan.
- To keep the service secure, block spam and fix problems (legitimate interest).
We don't sell personal data, and we don't use call or message content to train AI models.
Recording and AI disclosure
Where the law requires it, Heybird tells callers that they are speaking with an AI assistant and that the call may be recorded. Business owners choose whether calls are recorded.
Who processes data for us
| Provider | What for |
|---|---|
| Telnyx | Phone numbers, calls and text messages |
| LiveKit | Real-time call audio (EU region) |
| Google (Gemini) | The live voice model and spoken replies |
| Anthropic (Claude) | Call summaries and text replies |
| Deepgram, Cartesia | Speech-to-text and text-to-speech (backup voice path) |
| OpenAI | Search over the business's own knowledge (embeddings) |
| Supabase | Database, sign-in and file storage |
| Hetzner | Servers (Germany) |
| Sentry | Error reports |
| Apple | App Store subscriptions and push notifications |
| Resend | Receiving and sending email for the business's Heybird address (data stored in the US) |
| Google Calendar, Microsoft (Outlook) | Reading busy times and writing bookings, only for a calendar the owner connected |
European businesses' data is stored in the EU. Some providers above may process data outside your country; where they do, we rely on their standard contractual clauses or equivalent safeguards.
Google user data
If you connect a Google Calendar, Heybird's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use calendar data only to offer callers real openings and to put bookings in your calendar; we never use it for advertising, never sell it, and only people at Heybird who need to fix a problem you reported can see it. You can disconnect the calendar in the app at any time, which deletes the tokens, or revoke access from your Google account.
How long we keep it
Call recordings are deleted automatically once they are older than the owner's "Keep recordings for" setting: 30 days, 90 days (the default) or 1 year. The call's transcript and summary stay with the account. We keep account, call and message data while the account is active. When you delete your account in the app (Account → You → Delete my account), we delete your recordings and your business data and release its phone number. Records we must keep by law (for example billing records) are kept for as long as the law requires.
Your rights
You can access, correct, export or delete your data, object to or restrict processing, and complain to your data-protection authority (in Spain, the AEPD). Callers who reached a business through Heybird can contact that business, or us, and we will help. Write to hello@heybird.ai.
Children
Heybird is a service for businesses and isn't directed to children under 16.
Changes
If we change this policy we'll update the date above, and tell account holders in the app when a change matters.