HeyFloe← Back

Last updated · 20 October 2026

Privacy Policy

Who we are

HeyFloe is a product of Sanbots Technologies Pvt Ltd, a company incorporated in India with its registered office at Ranka Junction, Krishna Reddy Industrial Estate, Dooravani Nagar, Bengaluru, Karnataka 560016. GSTIN: 29AAYCS0623A1ZB. Contact: hello@heyfloe.ai.

What we collect

We collect only what we need to run HeyFloe:

  • Account data — name, email address, password hash (held by our sign-in provider), and profile information you add.
  • Channel data — the YouTube or Instagram channel links you give us, and the public details of a YouTube channel’s recent videos (titles, descriptions, thumbnails and publish dates) that we read to understand your content. If you connect a YouTube channel, also what “YouTube” below lists.
  • Creative content — ideas, stories, scripts, images, videos, voiceovers, music, and editor projects you create inside HeyFloe.
  • Billing data — subscription plan, payment status, floe balance, transaction history. Payment card details are never stored on our servers; they're handled by our payment processors (Dodo Payments, and Razorpay for Academy purchases paid in India).
  • Usage telemetry — which features you use, errors encountered, latency, cost tracking for AI calls. Aggregated and pseudonymised where possible.
  • Device data — browser type, IP address, screen resolution, captured automatically via standard web logs.

How we use your data

  • To deliver the product — generate AI content per your prompts, store your projects, display them back to you, and power your creative pipeline.
  • To bill — calculate your floe usage, process subscriptions and top-ups through Dodo Payments, send invoices.
  • To support — respond to your emails, fix bugs, recover stuck workflows.
  • To improve HeyFloe — analyse aggregated usage patterns. We do NOT train models on your individual content without your explicit opt-in consent.
  • To comply with law — if legally required to retain or disclose information (tax, fraud investigation, court order).

Who we share your data with

Your data leaves our servers only when absolutely required to deliver the product:

  • AI model providers — the companies whose models make your results: Google (Gemini, Nano Banana, Veo, Lyria and the Gemini voices), ElevenLabs (voiceovers and sound effects), OpenAI (checks prompts and pictures for safety), xAI (Grok, when you extend a clip with it), DeepSeek and others for writing, and Voyage AI (embeddings), together with the services that host and route those models. Your prompts, and the pictures you attach, pass through them to make your result or to check that it is safe to make; each handles them under its own terms. MiniMax H3, our video model, runs on machines we rent (below). Unless you switch Enhance off on a clip's prompt card, the clip's prompt and links to the pictures, clips and sounds it uses also go to MiniMax, which rewrites the prompt into the form H3 reads best.
  • Computing providers — data-centre GPU providers run the machines that render your video clips. A clip's prompt, start frame and reference pictures are sent to the machine that renders it, only for that.
  • Payment processors — Dodo Payments processes plans, the trial and top-ups in every country; Razorpay processes Academy purchases paid in India. We receive only the transaction status and reference ID, never the card details.
  • Service providers — the companies that run our hosting, database and file storage, sign-in, background jobs, content delivery, email, error reports and lesson video streaming. They process your data only to run HeyFloe for you. Email hello@heyfloe.ai for the current list.
  • Analytics — PostHog powers our product analytics and session replay: we record how HeyFloe is used, including page visits, clicks, and screen recordings of sessions (typed text may appear in recordings; passwords are always masked and never captured). We use this solely to fix bugs and improve the product — recordings are never sold or shared.
  • Advertising measurement — Meta (Facebook/Instagram) receives limited conversion signals (page views, sign-ups, purchases) via its Pixel and Conversions API so we can measure our own ads. Identifiers are hashed; your content and recordings are never shared. No data brokers.
  • Apps you connect — If you use HeyFloe from Claude or ChatGPT, what you send there is handled by Anthropic or OpenAI under your own account with them. If you connect your YouTube channel, see “YouTube” below.

YouTube

HeyFloe uses YouTube API Services. The Google Privacy Policy covers how Google handles your data; this policy covers what HeyFloe does with it.

What we read

  • From your channel’s link (without connecting it) — the public details of its recent videos: titles, descriptions, thumbnails and publish dates, to learn your style and topics.
  • From a channel you connect — you pick the Google account and the channel on Google’s own screen, and can untick any of the three permissions we ask for:
    • Your channel’s basic details — its ID, name, handle, picture, and subscriber and video counts — so we can show which channel is connected and publish to the right one.
    • Uploading videos — only when you publish a video from HeyFloe: the video you chose, with the title, description and visibility you set. HeyFloe never uploads, changes or deletes anything on your channel unless you ask it to.
    • Your channel’s analytics — views, watch time and audience retention for your videos — to show you how your videos do and help Floe suggest what to make next.

How we use and share it

  • Only to run these features for you. HeyFloe’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
  • To make a feature work, we send the part it needs to the AI model behind it — for example, your recent video titles to the writing model when Floe studies your style. Each handles it under its own terms (see “AI model providers” above). We pass it to no one else.
  • We never sell it, use it for advertising, or use it to train AI models. People at HeyFloe don’t read it unless you ask us to (for support), for security, or when the law requires it.
  • HeyFloe shows no ads and lets no third party serve content or ads in it. Our cookies and browser storage are listed under “Cookies” below.

How long we keep it

  • Your access to a connected channel, stored encrypted: until you disconnect the channel or delete your account.
  • A connected channel’s details, counts and analytics: read again from YouTube every day, when we also check that you still allow access. If we can’t check them for 29 days, we delete them.
  • The public video details we read from a channel’s link: never kept past 30 days. What stays is HeyFloe’s own one-line summary of each video’s topic and style, so new ideas don’t repeat videos you’ve already made, until you delete that channel in HeyFloe or your account.

Removing access, and deleting it

  • Disconnect the channel on its page in HeyFloe (Channels). We revoke our access at Google and delete what we stored about that channel straight away.
  • Or remove HeyFloe from your Google account on Google’s security settings page. We then stop using your data and delete it within 7 days.
  • Ask us to delete your YouTube data, or delete your HeyFloe account: done within 7 days.
  • Deleting what HeyFloe stores never changes anything on YouTube. To delete videos or data on YouTube itself, use YouTube.
  • Questions or complaints about how we handle your YouTube data: hello@heyfloe.ai.

How long we keep your data

Your account and content stay as long as your account is active. If you delete your account, we remove your personal data and content within 30 days, except where we must retain billing records for tax compliance (up to 8 years under Indian tax law). Anonymised usage metrics may be kept indefinitely for product analytics. Data we read from YouTube follows the shorter limits under “YouTube” above.

Your rights

You can at any time:

  • Access your data — see everything we have on file.
  • Export your content — download your ideas, scripts, generated assets.
  • Correct inaccurate information.
  • Delete your account and content.
  • Object to specific processing.
  • Withdraw consent where we rely on it.

Email hello@heyfloe.ai and we'll respond within 7 working days.

Data security

All data is transmitted over HTTPS. Service-role database credentials are stored as encrypted environment variables. Our sign-in provider hashes passwords with industry- standard algorithms (bcrypt), and our database encrypts data at rest. Payment data never reaches our servers. If a security incident affecting your data occurs, we will notify you within 72 hours of confirming the breach.

Cookies

We use the minimum set of cookies and browser storage needed to run the product: session cookies (sign-in), preference cookies (your UI choices), analytics identifiers (PostHog — product analytics + session replay), and Meta's ad-measurement cookie for measuring our own campaigns. No data brokers.

International transfers

HeyFloe's primary data storage is in the Asia Pacific region. Some processing happens in other regions through our AI model and computing providers (mainly the United States and Europe). By using HeyFloe you consent to your data being processed in these regions.

Children

HeyFloe is not intended for anyone under 13. If you believe a child has created an account, email us and we'll delete it.

Changes to this policy

We update this policy as the product evolves. The "Last updated" date at the top reflects the most recent change. Material changes will be emailed to active users before taking effect.

Questions

Email hello@heyfloe.ai. For formal complaints under Indian data protection law, write to the registered office address above.