Have a question?
I'm Anas, founder of Heeya. Have a question about the platform? Email us and we'll get back to you.
Email us 07 82 80 51 40www.heeya.fr — Version dated 14/10/2026
The website www.heeya.fr is published by TENSORIA,
SIREN: 988 823 258
Address: 59 rue de Ponthieu 75008 Paris
Contact: [email protected]
In connection with the creation and management of your professional account, we may collect the following data:
- Customer identity and contact details (last name, first name, company, email, phone number)
- Authentication and identification data (username, password)
- How you found the site (UTM campaign and referring domain, when available), kept during the visit and linked to the account if you sign up
- Platform usage data (history, AI assistant configuration, documents or texts provided by the customer)
- Payment data (via secure payment service providers)
The data collected is processed for the following purposes:
- Creation, management, and configuration of user accounts
- Provision and management of AI assistant services
- Invoicing, payment management, and customer relationship management
- Internal analytics and continuous service improvement
- Measuring the effectiveness of our ads, with your consent (section 9)
- Compliance with legal and regulatory obligations
Your data is strictly accessible by:
- Heeya and any support personnel it may employ
- Technical service providers involved in delivering the service:
- Hosting: OVH (France), with data stored in the European Union
- AI providers: Google (Gemini) and OpenAI
- Security, email delivery and payment providers
- Ad measurement, only with your consent: Meta Platforms Ireland (section 9)
These providers are committed to maintaining the confidentiality, security, and compliance with personal data protection regulations.
Data is stored in the European Union.
To generate the assistants' responses, the content of conversations is sent to our AI providers, based in the United States, and may be processed outside the European Union. We ensure that our providers offer adequate safeguards in accordance with applicable regulations (European Commission standard contractual clauses or adherence to the Data Privacy Framework, depending on the provider). Data shared with Meta with your consent may be processed in the United States by Meta Platforms, Inc., which adheres to the Data Privacy Framework.
When a customer installs a Heeya assistant on their website, the customer is the data controller for their visitors' data. Heeya acts as a data processor within the meaning of Article 28 of the GDPR and processes this data solely to provide the service to the customer.
The data processed is as follows:
- The content of messages exchanged with the assistant, their date and time, and a random conversation identifier
- Any feedback given on a response (helpful or not)
- Information entered in the assistant's contact form and attached files, when the customer has enabled this form
- Identification details sent by the customer's website, when the customer has enabled visitor identification: identifier, first name, last name, email address and additional information chosen by the customer. They are not passed to the AI model
- Images sent in the conversation, which are passed to the AI model to generate the response but are not stored
No IP address is stored with conversations. IP addresses may appear in server technical logs for a limited period, for security purposes.
Browser storage. The assistant uses no cookies and no advertising trackers. It stores in the browser's local storage (localStorage) the identifier of the current conversation, whether the welcome message was closed, a copy of that message, and the visitor's identifier when the customer's website provides it. This information is strictly necessary for the assistant to work.
Access. Conversations are accessible to the customer and to the members of their Heeya workspace. Heeya accesses them only for maintenance and technical support.
Retention. Conversations are kept for as long as the assistant exists in the customer's account, and deleted when the customer deletes the assistant. The customer may also request the deletion of a conversation or of the entire history at any time by writing to [email protected]. Deletion is carried out within 30 days. Visitors exercise their rights with the customer, as data controller, whom Heeya assists in responding.
Model training. Conversations are not used to train AI models, neither by Heeya nor by its providers: Heeya excludes providers that train their models on the data sent to them. AI providers may temporarily retain requests, solely to detect abuse.
Your data is retained for the duration of the contractual relationship, and thereafter archived for the legally required period for evidentiary or accounting purposes, unless an explicit deletion request is made.
Information and documents added to the platform may be used for internal statistical purposes, anonymised as early as possible, with the aim of improving our services.
When you visit www.heeya.fr, a banner lets you accept or decline ad measurement cookies. Your choice is stored in a cookie (heeya_consent) kept for 6 months. You can change it at any time with the "Cookie settings" link at the bottom of the page. Declining has no effect on your access to the site.
- Audience measurement: Google Analytics and Google Ads, to understand site traffic and measure sign-ups.
- Ad measurement, only if you accept: the Meta (Facebook) pixel, which sets the _fbp and _fbc cookies to measure visits coming from our ads. If you create an account, start a trial or subscribe, we also send that event to Meta Platforms Ireland Ltd, with your email address and account identifier in hashed form (unreadable as such), the Meta cookie identifiers, your browser type and, for a subscription, its amount. Meta uses them to measure and improve our campaigns. See Meta's privacy policy.
These cookies only apply to www.heeya.fr. The assistants our customers install on their own websites use none (see section 6).
In accordance with the GDPR, you have the following rights:
- Right to access, rectify, and erase your personal data
- Right to restrict or object to the processing of your data
- Right to data portability
To submit a request, write to [email protected] with the subject line "Personal Data Deletion" or specify your request. The identity of the requester will be verified before the request is processed. Deletion will be carried out within 30 days, unless legal obligations require otherwise.
We implement all appropriate technical and organisational measures to ensure the security, confidentiality, and integrity of your data.
This policy may be updated at any time. The applicable version is the one published on the website at the time of consultation.
For any questions regarding the management of your personal data, you may contact us at [email protected].
This site uses cookies to improve your experience and measure how well our ads perform. Learn more
Have a question?
I'm Anas, founder of Heeya. Have a question about the platform? Email us and we'll get back to you.
Email us 07 82 80 51 40