Privacy Policy
Effective date: October 18, 2026
Last updated: October 19, 2026
This Privacy Policy explains how HEU AI LLC collects, uses, shares and protects personal data when you visit www.heu.ai, contact us, or deal with us in the course of business. Please read it together with our Terms of Service.
1. Who we are
HEU AI LLC ("HEU.AI", "we", "us", "our") operates www.heu.ai (the "Website") and is the contracting entity for all of our client agreements.
HEU AI LLC is responsible for the personal data described in this Policy (it is the "controller" under the EU and UK GDPR and the "data fiduciary" under India's Digital Personal Data Protection Act, 2023).
HEU AI LLC is a wholly owned subsidiary of Heu Technologies Private Limited, a company incorporated in India ("Heu Technologies"). Heu Technologies' team supports our operations and processes personal data on our behalf, under our instructions, from India.
For any privacy question or request, contact us at info@heu.ai.
2. Who this Policy covers
This Policy applies to:
- visitors to the Website;
- people who contact us through the Website's contact form or by email;
- people who send us job or collaboration enquiries at careers@heu.ai; and
- representatives of our clients, prospective clients, vendors and business partners.
Client project data is not covered by this Policy. When we process personal data on behalf of a client as part of a project, we do so as that client's service provider (processor), under our written agreement with the client. The client's own privacy notice governs that data. If your data is in a system we build or operate for a client, please contact that client first.
3. Personal data we collect
3.1 Data you give us
- Contact form: your name, work email address, company name (optional), phone number (optional), your message, your confirmation that we may contact you about your enquiry, and the Website page from which you sent the form.
- Email: your name, email address and anything you choose to include in your message or attachments.
- Careers enquiries: your CV, contact details, links to your work, and anything else you choose to send to careers@heu.ai.
- Business dealings: names, job titles, business contact details and correspondence of people who work for our clients, vendors and partners.
Please do not send us sensitive personal data (for example health information, government identification numbers or financial account details) through the Website or by email. We do not request it, and if we receive it unnecessarily we will delete it.
3.2 Data collected automatically
- Analytics: we use Google Analytics 4, loaded through Google Tag Manager, to understand how the Website is used. It collects information such as pages viewed, referring website, approximate location (city or country), device and browser type, operating system, screen size, time spent on pages, interactions with the page, and identifiers stored in cookies.
- Server logs: our web server automatically records technical information when you visit, including IP address, date and time of the request, the page requested and your browser's user-agent string. We use this for security and troubleshooting.
- Web fonts: the Website loads fonts from Google Fonts. When it does, your browser connects to Google's servers, which receive your IP address and browser information.
3.3 Data we receive from others
If someone refers you to us, or you work for an organisation we do business with, we may receive your business contact details from that person or organisation.
4. How we use personal data and our legal bases
| Purpose | Data used | Legal basis (where the GDPR or similar laws apply) |
|---|---|---|
| Responding to your enquiry, following up, arranging meetings and preparing proposals | Contact form and email data | Steps taken at your request before entering into a contract; our legitimate interest in responding to business enquiries |
| Managing client, vendor and partner relationships, including contracts, invoicing and service delivery | Business contact and correspondence data | Performance of a contract; compliance with legal obligations |
| Reviewing job and collaboration enquiries | Careers enquiry data | Steps taken at your request before entering into a contract; our legitimate interest in recruiting |
| Understanding and improving how the Website is used | Analytics data | Our legitimate interest in operating and improving the Website |
| Keeping the Website secure and preventing spam, fraud and misuse | Server logs, contact form data | Our legitimate interest in protecting the Website and our business |
| Complying with law and establishing, exercising or defending legal claims | Any relevant data | Compliance with legal obligations; our legitimate interests |
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
If we rely on your consent for any processing, you may withdraw it at any time by emailing info@heu.ai. Withdrawing consent does not affect processing that took place before you withdrew it.
5. Cookies and similar technologies
Cookies are small text files placed on your device by websites you visit. The Website uses the following:
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics | Distinguishes visitors | Up to 2 years (Google's default) unless you delete it |
_ga_H0Q3QSJ7HM | Google Analytics | Maintains session state for our analytics property | Up to 2 years (Google's default) unless you delete it |
heu_consent | HEU.AI | Remembers your cookie choice | 12 months |
We do not use advertising or retargeting cookies on the Website.
When you first visit, a banner asks for your cookie choice. If you visit from the European Union, the European Economic Area, the United Kingdom or Switzerland, analytics cookies are off until you accept them. Elsewhere, analytics cookies are on unless you reject them. You can change your choice at any time from Cookie settings at the bottom of every page.
You can control cookies by:
- using Cookie settings at the bottom of every page;
- changing your browser settings to block or delete cookies (the Website will still work); or
- installing the Google Analytics Opt-out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout.
The Website does not respond to "Do Not Track" signals. If your browser sends a Global Privacy Control signal, we treat it as a choice to reject analytics cookies unless you accept them in Cookie settings.
6. How we share personal data
We share personal data only as described below:
- Heu Technologies Private Limited (India), our parent company, which supports our operations and processes data on our behalf.
- Service providers that help us run our business, such as website hosting, email and productivity tools, and analytics (Google). They may use the data only to provide services to us and must protect it.
- Professional advisers, such as lawyers, accountants, auditors and banks, where needed for their services to us.
- Authorities and other parties where required by law, for example in response to a valid legal request, or where necessary to protect our rights, property or safety, or those of others.
- Business transfers. If we are involved in a merger, acquisition, financing or sale of all or part of our business, personal data may be transferred to the parties involved, subject to this Policy or protections at least as strong.
- Anyone else with your permission.
We do not sell personal data, and we do not share personal data for cross-context behavioural advertising.
We do not share careers enquiries or CVs with our clients or any other third party without your permission.
7. International transfers
We are based in the United States, and our team processes data from India. Our service providers may process data in other countries. These countries may have data protection laws different from those where you live.
Where the law requires safeguards for international transfers, we use mechanisms recognised by that law, such as the European Commission's Standard Contractual Clauses and their UK equivalent. You can request more information about these safeguards by emailing info@heu.ai.
8. How long we keep personal data
| Data | Retention period |
|---|---|
| Enquiries and related correspondence | 12 months from our last communication with you, unless you become a client |
| Careers enquiries | 12 months from our last communication with you |
| Client, vendor and partner records | For the duration of the business relationship, and afterwards only as long as required by law (for example tax and accounting rules) or needed to establish, exercise or defend legal claims |
| Analytics data | No longer than 12 months |
| Server logs | No longer than 12 months |
When a retention period ends, we delete the data or anonymise it so it no longer identifies you. We may keep data longer only where required by law or where it is relevant to an actual or reasonably expected legal claim.
9. How we protect personal data
We use reasonable technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS) for the Website and access to personal data limited to people who need it for their work. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
If a personal data breach occurs, we will notify affected individuals and authorities where the law requires it.
10. Your rights
10.1 Rights available to everyone
Wherever you live, you may ask us to:
- tell you whether we hold personal data about you and give you a copy;
- correct inaccurate or incomplete data;
- delete your data; and
- stop sending you follow-up or marketing messages.
10.2 Additional rights in the EEA, UK and Switzerland
If the GDPR or similar law applies to you, you also have the right to:
- restrict our processing of your data;
- object to processing based on our legitimate interests;
- receive your data in a structured, machine-readable format and have it transferred to another organisation (data portability);
- withdraw consent at any time where we rely on consent; and
- complain to your local data protection supervisory authority. We would appreciate the chance to address your concern first.
10.3 Additional rights in US states with privacy laws
Depending on your state of residence, you may have the right to know what personal information we collect, use and disclose; to access, correct and delete it; to opt out of its sale or sharing for targeted advertising (we do neither); and not to be discriminated against for exercising these rights.
In the past 12 months, we collected the following categories of personal information, from the sources and for the purposes described in Sections 3 and 4, and disclosed them to the recipients described in Section 6:
- identifiers (such as name, email address and IP address);
- professional information (such as company and job title);
- internet and network activity (such as pages viewed); and
- approximate geolocation.
You may use an authorised agent to make a request on your behalf. If we decline your request, you may appeal by replying to our decision with the subject line "Appeal", and we will respond within the period required by applicable law.
10.4 Additional rights in India
Under the Digital Personal Data Protection Act, 2023, you have the right to:
- obtain a summary of your personal data and how it is processed;
- have your data corrected, completed, updated or erased;
- withdraw consent where we rely on it;
- nominate another person to exercise your rights in the event of your death or incapacity; and
- seek redressal of grievances.
Please raise any grievance with us first at info@heu.ai. If you are not satisfied with our response, you may approach the Data Protection Board of India.
10.5 How to make a request
Email info@heu.ai with the subject line "Privacy Request". We may need to verify your identity before acting on your request, and we will ask only for information needed for that purpose.
We will respond within 30 days. If we need more time where the law allows it, we will tell you why and how long it will take. Requests are free of charge unless they are clearly unfounded or excessive, in which case we may charge a reasonable fee or decline, as permitted by law.
11. Children
The Website and our services are intended for businesses and are not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, please contact us and we will delete it.
12. Links to other websites
The Website links to third-party sites such as LinkedIn and Instagram. Those sites have their own privacy practices, and we are not responsible for them. Please review their privacy policies.
13. Changes to this Policy
We may update this Policy from time to time. We will post the updated version on this page and change the "Last updated" date. If we make material changes, we will place a notice on the Website before the changes take effect. Where the law requires your consent to a change, we will ask for it.
14. Contact us
HEU AI LLC
Email: info@heu.ai
This address is also the contact point for privacy grievances under Indian law.