Privacy Policy

1. Who is responsible

HeyOne is operated by TFV Industries Company Limited ("TFV", "we"), enterprise and tax code 0107410802, Tien Dai Hamlet, Yen Lang Commune, Hanoi, Vietnam. This policy explains what personal data we handle when you visit heyone.app or use the HeyOne application, and what your choices are.

We act in two roles:

• Controller for data about the people who visit our website, create a demo, administer a workspace or contact us.
• Processor for the data our customers enter into their own workspace (their customers, employees, suppliers and records). That data belongs to the customer, who decides what is stored and why. If your data is held in a company's HeyOne workspace, please contact that company first.

2. Data we collect

We do not receive or store full payment card numbers. Card payments are handled by the payment provider or Merchant of Record shown at checkout, under its own privacy policy.

3. Legal bases

Where the GDPR or similar laws apply, we rely on: performance of our contract with you (running the Service and billing), our legitimate interests (security, fraud prevention, product improvement), legal obligations (tax and accounting records), and your consent where we ask for it (for example marketing emails), which you can withdraw at any time.

4. Cookies

We use only the cookies needed to run the Service: a session cookie to keep you signed in and small preferences such as language. We do not use third-party advertising cookies on heyone.app. If this changes, we will ask for your consent first where the law requires it.

5. Who we share data with

We do not sell personal data. We share it only with service providers that help us run HeyOne, under contracts that require them to protect it:

• Cloud hosting and content delivery;
• Managed database and file storage;
• Email delivery for sign-in codes, notifications and invoices;
• Payment processing and the Merchant of Record for online orders;
• AI model providers, only when you use an AI feature, and only with the content needed for that request. We do not allow them to train their models on your data.

A current list of sub-processors is available on request. We may also disclose data when the law requires it, or to protect the rights and safety of our customers and the Service.

6. International transfers

TFV is based in Vietnam and our providers operate data centres in several countries. Your data may therefore be processed outside your own country. Where required, we use appropriate safeguards such as standard contractual clauses.

7. How long we keep data

• Demo workspaces: deleted after the demo expires and a reasonable retention period passes without a subscription.
• Paid workspaces: kept while the subscription is active and for at least 30 days afterwards so you can reactivate or export, then deleted. Backups are overwritten on a rolling schedule.
• Billing and tax records: kept for the period required by Vietnamese accounting law, currently up to 10 years.
• Support messages and logs: kept only as long as needed for support and security.

8. Security

All traffic is encrypted in transit with HTTPS. Each customer's data is isolated from other customers' data at the database level, access by our staff is limited to those who need it for support, and we take regular backups. No system is perfectly secure; if a breach affects your data we will notify you without undue delay.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to complain to your data protection authority. To use these rights, email hello@heyone.app. We reply within 30 days.

If your data is held in a customer's workspace, we will pass your request to that customer and help them respond.

10. Children

HeyOne is a business tool and is not intended for people under 16. We do not knowingly collect their data.

11. Changes

We may update this policy. We will post the new version here with a new date, and notify workspace administrators of material changes.

12. Contact