Legal

Privacy Policy

Effective October 11, 2026

HeartbeatAI (“HeartbeatAI,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, share, and protect information when you visit heartbeatai.vc, apply to our private beta, or use our products and services (collectively, the “Service”).

1. Information we collect

Information you provide

  • Beta applications: your business email address, LinkedIn profile URL, a link to your pitch deck, and a short description of your company.
  • Account information: your name, email address, company name, and login credentials.
  • Fundraising materials: documents, pitch decks, memos, metrics, financial information, and notes you upload.
  • Investor lists: names, email addresses, firms, and related details of the investors you choose to contact.
  • Communications: messages you send us, including support requests and feedback.

Information collected automatically

  • Usage and device data: IP address, browser type, device information, pages viewed, and actions taken within the Service.
  • Engagement data: when you use outreach features, we may collect information about how recipients interact with your emails and materials (for example, opens, link clicks, and deck viewing time) so we can report it to you and time follow-ups.
  • Cookies: we use essential cookies to operate the Service and may use limited analytics to understand how it is used.

2. How we use information

  • to review beta applications and communicate with applicants;
  • to provide the Service, including generating pitch decks and investment memos and running the outreach you configure;
  • to schedule, send, and draft emails, replies, and follow-ups on your behalf;
  • to maintain, secure, debug, and improve the Service;
  • to communicate with you about your account, updates, and support; and
  • to comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information or your investor lists, and we do not use them for advertising.

3. AI processing

To generate decks, memos, and emails, we process your content using AI models, which may be operated by trusted third-party providers acting on our behalf. We require these providers to process data only to deliver the Service to us and not to use your content to train their general-purpose models. We do not use your confidential fundraising materials to train models that serve other customers.

4. How we share information

We share information only in the following circumstances:

  • At your direction: when you send materials and messages to investors through the Service.
  • Service providers: with vendors who provide hosting, storage, email delivery, AI processing, analytics, and support, under contractual confidentiality and data-protection obligations.
  • Legal requirements: when required by law, subpoena, or legal process, or to protect the rights, property, or safety of HeartbeatAI, our users, or others.
  • Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy’s protections.

5. Email account access

If you connect an email account (for example, via Google or Microsoft OAuth), we access only the permissions needed to send messages you authorize, read replies to threads created through the Service, and schedule follow-ups. We do not read unrelated messages in your inbox for any other purpose. You can revoke access at any time from your account settings or your email provider’s security settings. Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

6. Investor contact data

You control the investor lists you upload, and you are responsible for having a lawful basis to contact the people on them. We process this contact data on your behalf solely to provide the Service. If a recipient asks to opt out, we will honor that request and suppress future outreach to them from your account.

7. Data retention

We retain information for as long as your account is active or as needed to provide the Service. Beta application data for applicants who are not admitted is retained for up to 12 months and then deleted. You may request deletion of your account and content at any time; we will delete it within a reasonable period, except where retention is required by law.

8. Security

We use industry-standard safeguards, including encryption in transit and at rest, access controls, and least-privilege practices, to protect your information. No method of transmission or storage is completely secure, but we work hard to protect your data and will notify you of any breach as required by law.

9. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, and residents of the EEA and UK have rights under the GDPR. To exercise any of these rights, email privacy@heartbeatai.vc. We will not discriminate against you for exercising your rights.

You may opt out of non-essential emails from us at any time using the unsubscribe link in those emails.

10. International transfers

We are based in the United States, and your information may be processed in the United States and other countries. Where required, we rely on appropriate safeguards, such as Standard Contractual Clauses, for international transfers.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from them.

12. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service before they take effect. The “Effective” date above indicates when this Policy was last updated.

13. Contact

Questions or requests regarding this Policy? Contact us at privacy@heartbeatai.vc.