Privacy Policy

1. Introduction

SOCLOSE PTE. LTD. ("Company," "we," "us," or "our"), a company incorporated in Singapore, operates the Heyy platform ("Service") available at https://heyy.blog.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service. We are committed to protecting your privacy and ensuring compliance with applicable data protection regulations, including the European Union General Data Protection Regulation (GDPR), the Singapore Personal Data Protection Act (PDPA), and other relevant laws.

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1. Information You Provide Directly

• Account Information: Name, email address, and password when you create an account
• Profile Information: Profile picture, bio, and other optional details you choose to provide
• Payment Information: Billing address and payment details (processed securely through our third-party payment processor; we do not store full payment card numbers)
• Content Data: Blog configurations, content sources, generated articles, templates, and other content you create through the Service
• Communications: Information you provide when contacting our support team or responding to surveys

2.2. Information Collected Automatically

• Usage Data: Pages visited, features used, actions taken, time spent on the Service, and interaction patterns
• Device Information: Browser type and version, operating system, device type, screen resolution, and unique device identifiers
• Log Data: IP address, access times, referring URLs, and error logs
• Location Data: Approximate geographic location derived from your IP address

2.3. Information from Third Parties

• OAuth Providers: If you sign in using a third-party service (e.g., Google, GitHub), we receive basic profile information from that provider
• Analytics Partners: Aggregated usage and performance data from analytics services

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your transactions and manage your subscription
• Personalize and improve your experience with the Service
• Generate AI-powered content based on your configurations and preferences
• Send you transactional communications (account confirmations, billing notices, technical alerts)
• Send you marketing communications (with your consent, where required)
• Respond to your inquiries and provide customer support
• Monitor and analyze usage trends to improve the Service
• Detect, prevent, and address technical issues, fraud, and security threats
• Comply with legal obligations and enforce our Terms of Service

3.1. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal bases for processing your personal data include:

• Contract Performance: Processing necessary to provide the Service you requested
• Legitimate Interests: Processing for our legitimate business interests, such as improving the Service, fraud prevention, and security
• Consent: Processing based on your explicit consent, such as marketing communications
• Legal Obligation: Processing necessary to comply with applicable laws and regulations

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With trusted third-party vendors who assist us in operating the Service (e.g., cloud hosting, payment processing, email delivery, analytics). These providers are contractually obligated to protect your data.
• AI Processing: Content data may be processed by third-party AI providers (e.g., Anthropic) to generate articles. This processing is governed by our data processing agreements with these providers.
• Legal Requirements: When required by law, regulation, legal process, or governmental request
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of the transaction
• With Your Consent: When you have given us explicit permission to share your information for a specific purpose

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information about your use of the Service. Cookies are small data files stored on your device.

Types of Cookies We Use

• Essential Cookies: Required for the Service to function properly, including authentication and session management
• Analytics Cookies: Help us understand how users interact with the Service so we can improve it
• Preference Cookies: Remember your settings and preferences for a better experience

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may impact the functionality of the Service.

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request that we limit the processing of your personal data
• Right to Data Portability: Request your personal data in a structured, commonly used, machine-readable format
• Right to Object: Object to the processing of your personal data for direct marketing or based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact our Data Protection Officer at privacy@heyy.ai. We will respond to your request within 30 days.

If you are in the EEA, you also have the right to lodge a complaint with your local data protection supervisory authority.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account Data: Retained for the duration of your account and up to 30 days after account deletion
• Content Data: Retained for the duration of your account. You may delete individual content items at any time.
• Usage Data: Retained in an aggregated, anonymized form for analytics purposes
• Payment Records: Retained as required by tax and accounting regulations (typically 7 years)
• Log Data: Retained for up to 90 days for security and debugging purposes

8. Data Security

We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security assessments and vulnerability testing
• Access controls and authentication mechanisms
• Secure cloud infrastructure with reputable providers
• Employee security training and awareness programs

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

Your personal data may be transferred to and processed in countries other than Singapore, including countries that may not have data protection laws equivalent to those in your jurisdiction.

When we transfer personal data internationally, we implement appropriate safeguards in compliance with applicable law, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data processing agreements with all third-party providers
• Ensuring recipient countries or organizations provide adequate levels of data protection

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information promptly. If you believe we have collected data from a child, please contact us at privacy@heyy.ai.

11. Third-Party Links and Services

The Service may contain links to third-party websites or services that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services. We encourage you to review the privacy policies of any third-party services you access.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top.

For material changes, we will also provide additional notice through email or a prominent notice on the Service. We encourage you to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise your data protection rights, please contact our Data Protection Officer:

For general legal inquiries, you may also reach us at legal@heyy.ai.