Privacy Policy

1. About this policy

This Privacy Policy explains how Haize Inc. (“Haize,” “we,” “us”) collects, uses, discloses, and protects personal information when you use joinhaize.com, app.joinhaize.com, websites and profiles hosted on Haize, and our related services (the “Service”). Capitalized terms not defined here have the meanings in our Terms of Service.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Who this policy covers

• Users: people and businesses with a Haize account. For information about Users, Haize decides how it is used, and this policy applies.
• Clients: people who visit a User’s Haize website or profile, or who book, buy from, subscribe to, or are contacted by a User. When a User collects your information through Haize, the User decides how it is used, and Haize processes it on the User’s behalf as a service provider. The User’s own privacy policy and practices apply. To ask about or exercise rights over that information, contact the User directly; we will help them respond where we can.
• Visitors: people who browse joinhaize.com or our Help Center.

2. Information we collect

From Users

• Account information: name, email address, password, and, if you use Google sign-in, your Google name, email address, and profile photo.
• Business information: business name, address, website, phone number, and, if you turn on texting, the details needed for carrier registration, such as your legal business name, EIN or sole-proprietor details, contact details, sample messages, and how you collect consent.
• Payment information: billing details and subscription history. Card details are collected and stored by Stripe; Haize does not store full card numbers. To accept payments, Stripe also collects identity and bank details from you directly.
• Content: everything you add to the Service, including website and profile content, images, listings, prices, availability, email and text campaigns, CRM notes and tags, knowledge base and FAQ content, and your conversations with our AI agent.
• Contacts you import: contact lists and Client records you upload or create.
• Verification and support: phone numbers you verify with a one-time passcode, and messages you send our support team or share in feedback sessions.
• Connected accounts: information from services you connect, such as Google Calendar events and availability, or Zoom meeting details.

From Clients, on behalf of Users

• Form submissions, such as your name, email, phone number, and answers to intake questions
• Bookings, including the service, time, and any notes
• Orders and purchases, including the product, amount, and your email (payment details go to Stripe)
• Email and text subscription records, including your consent, opt-outs, and replies
• Messages with a User’s AI assistant
• Video call details when a User hosts a session through an integrated video tool

Collected automatically

When anyone uses the Service, we and our providers automatically collect device and usage information, including IP address, browser and device type, operating system, pages and features used, referring website, approximate location based on IP address, NFC and QR tap events, link clicks, email opens and clicks, and error logs. We use cookies and similar technologies to do this (see Section 5).

From third parties

We receive information from Google when you use Google sign-in or connect your calendar; from Stripe about your payment account, payouts, and transactions; from Twilio and carriers about your texting registration status and message delivery; and from other services you choose to connect.

3. How we use information

We use personal information to:

• Provide the Service, including hosting websites, processing bookings and payments, sending Users’ emails and texts, and running AI Features
• Create and manage accounts, verify identity and phone numbers, and register Users for texting with carriers
• Process subscriptions, seller fees, refunds, and billing
• Provide support and respond to requests and feedback
• Send transactional messages, such as receipts, security alerts, and notices about changes to our Terms
• Send marketing about Haize to Users, where permitted, with the option to unsubscribe
• Monitor, secure, and debug the Service, and detect and prevent spam, fraud, and abuse
• Analyze usage and improve and develop the Service
• Comply with the law, enforce our Terms, and protect the rights and safety of Haize, Users, Clients, and others

We use Client Data only to provide the Service to the User who collected it and for the security, support, and legal purposes listed above. We do not use one User’s Client Data to market to anyone else.

AI Features

Our AI Features are powered by third-party AI model providers, currently Google (Gemini, through Google Cloud’s Vertex AI), and we may add others, such as Anthropic. When you use an AI Feature, we send the information needed for the request, which may include your Content, Client Data, and a Client’s chat messages, to the provider to generate a response.

• We use these providers’ business services under terms that do not allow them to use this information to train their general AI models.
• We do not use your Content or Client Data to train AI models.
• We may review AI conversations and actions, with access limited to our team, to provide support, keep the Service safe, investigate misuse, and fix and improve our features. We also use monitoring tools to trace errors in AI responses.
• AI chat on a User’s website may be labeled as AI. Clients should not share sensitive information with an AI assistant.

4. How we disclose information

We disclose personal information only as described below.

• To Users: Client information collected through a User’s website or profile, such as form responses, bookings, orders, subscriptions, and AI chat messages, is shared with that User.
• To service providers: We use vendors to run the Service, who may only use the information to provide services to us. These include providers of cloud hosting and databases, file storage, email delivery, text messaging and phone verification, AI models, payments, calendar and video integrations, scheduling, stock images, malware scanning, error monitoring, product analytics, and customer support and help center tools. You can request our current list of service providers by emailing support@joinhaize.com.
• To payment and messaging partners: We share information with Stripe to process payments and payouts, and with Twilio, The Campaign Registry, and wireless carriers to register Users for texting and deliver messages.
• To services you connect: If you connect a third-party service, such as Google Calendar or Zoom, we exchange information with it as needed to make the connection work.
• For legal and safety reasons: to comply with law or legal process, enforce our Terms, or protect the rights, property, or safety of Haize, Users, Clients, or others.
• In a business transfer: as part of a merger, acquisition, financing, or sale of assets, subject to this policy.
• With your direction or consent.

We may share aggregated or de-identified information that cannot reasonably be used to identify anyone.

Text messaging data

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. This excludes service providers that help us deliver messages, such as Twilio and wireless carriers, and disclosures required by law.

5. Communications, cookies, and analytics

Messages from Haize

We send Users transactional and account messages by email, text, and in-app notice, and may send marketing emails. You can unsubscribe from marketing emails using the link in any of them, and change notification settings in your account. You can’t opt out of messages about billing, security, or changes to our Terms while you have an account. For texts from Haize, reply STOP to unsubscribe or HELP for help. Message frequency varies, and message and data rates may apply.

Messages from Users

If you’re a Client who receives emails or texts from a User, you can unsubscribe using the link in any marketing email, or reply STOP to any text. Reply HELP for help. Message frequency varies, and message and data rates may apply.

Cookies and similar technologies

We and our providers use cookies, local storage, pixels, and similar technologies to keep you signed in, remember your settings, keep the Service secure, measure performance, and understand how the Service and Users’ websites are used, including views, clicks, and NFC and QR taps. We use product analytics and web analytics tools for this. Our customer support and help center provider may also set cookies and collect visitor information on pages where its help center or chat widget appears. We do not use advertising cookies or cross-site tracking for targeted advertising.

You can block or delete cookies in your browser settings, but some parts of the Service, such as signing in, may not work without them. We honor Global Privacy Control (GPC) signals as a request to opt out of any sale or sharing of personal information. Our Service does not respond to “Do Not Track” signals.

6. Retention and security

How long we keep information

We keep personal information for as long as your account is active and as needed to provide the Service, then delete or de-identify it unless we need to keep it for the reasons below.

When a User deletes their account, we delete:

• Their profile, website and page content, links, services, availability, and booking settings
• Products that nobody has bought, including their files
• AI assistant conversations and related records
• Their texting account with our messaging provider
• Images uploaded to their sites, within 24 hours

We keep the following, no longer linked to the deleted account:

• Order records (amount, date, product name, payment IDs, and buyer email) for up to 7 years, for tax and accounting
• Booking records, including the Client’s details, for up to 7 years, for payment history, tax, and disputes
• The seller’s email on orders for 90 days after each sale, for payment disputes, then erased
• Files for products that were sold until buyers’ download links expire, up to 30 days
• Text messaging consent and opt-out records for up to 5 years, as proof of consent and to keep honoring opt-outs
• Data held by Stripe, under Stripe’s own policies
• Backups, until they expire on their regular schedule

We may keep information longer if the law requires it or if it’s needed to resolve disputes, prevent fraud or abuse, or enforce our Terms.

Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including encryption in transit, access controls, malware scanning of uploaded files, phone number verification, and processing payment cards through Stripe instead of storing them ourselves. No system is completely secure, so we can’t guarantee the security of information. If we learn of a security breach affecting your personal information, we will notify you as required by law.

7. Your privacy rights

Users can view, update, and delete most of their information directly in their account. Depending on where you live, you may also have the right to:

• Know what personal information we have collected about you and how we use and disclose it
• Get a copy of your personal information
• Correct inaccurate information
• Delete your information
• Opt out of the sale or sharing of personal information, targeted advertising, and certain profiling (we don’t do any of these)
• Limit the use of sensitive personal information (we use it only as needed to provide the Service)

To make a request, email support@joinhaize.com. We will verify your identity, usually by confirming your account email, before acting on a request. You may use an authorized agent where the law allows; we may ask the agent for proof of authority. We will not discriminate against you for exercising your rights. If we deny your request, you may appeal by replying to our decision.

If you are a Client and your information was collected by a User, please contact that User first, since they control that information. If you contact us instead, we will forward your request to the User or help them respond.

Notice for California residents

The California Consumer Privacy Act (CCPA) requires us to describe our practices for the past 12 months:

• Categories collected: identifiers (such as name, email, phone number, and IP address); customer records (such as billing and business details, including an EIN or sole-proprietor details for texting registration); commercial information (such as subscriptions, orders, and bookings); internet and device activity; approximate geolocation; audio or video information if a session is recorded; professional information (such as business type); and inferences about how you use the Service.
• Sensitive personal information: account login credentials, and any sensitive information a User chooses to collect through forms. We use it only to provide the Service and do not use it to infer characteristics about you.
• Sources, purposes, and recipients: as described in Sections 2, 3, and 4. We disclose each category to service providers and the other recipients in Section 4 for business purposes.
• Sale and sharing: we have not sold or shared personal information, including that of consumers under 16.
• Retention: as described in Section 6.

8. Children, location, changes, and contact

Children

Haize accounts are for people 18 and older. The Service is not directed to children, and we do not knowingly collect personal information from children under 13. Users must not use Haize to collect information from children under 13, and bookings, payments, or messaging consent for anyone under 18 should come from a parent or guardian. If you believe a child under 13 has given us personal information, contact us at support@joinhaize.com and we will delete it.

United States only

Haize is operated in the United States and intended for use in the United States. If you access the Service from elsewhere, your information will be processed and stored in the United States, where privacy laws may differ from those where you live.

Changes to this policy

We may update this policy. For material changes, we will email account holders and show an in-app notice at least 14 days before the changes take effect, and update the “Last updated” date above.

Contact us

Haize Inc.
2261 Market Street STE 14576
San Francisco, CA 94114

Privacy questions and requests: support@joinhaize.com
General inquiries: hello@joinhaize.com