Privacy Policy
Version 0.1. Last updated April 28, 2026.
Who Operates heyBob
heyBob is operated by Joshua Collard. For privacy requests, email privacy@hey-bob.co or joshua.collard@icloud.com.
What The Waitlist Collects
| Data | Purpose |
|---|---|
| Email address | Send the confirm link, waitlist updates, product updates, and alpha invitations. |
| Consent choice, timestamp, IP, policy hash | Records what you agreed to and when. |
| Referrer and UTM tags | Measures which public channels produce signups. |
Service Providers
The waitlist uses Resend for email delivery, Vercel for the marketing site, and the heyBob backend on Fly.io with a SQLite database. The current Fly.io region is Amsterdam, Netherlands.
Cookies and Local Storage
heyBob asks for your consent on first visit before loading any analytics. Two pieces of data are stored in your browser:
| What | Why | How long |
|---|---|---|
heybob:consent (localStorage) |
Remembers whether you accepted or declined the analytics cookie. Without this, we would re-prompt every page load. | 12 months. After that, we ask again. |
| Vercel Web Analytics (loaded only after you accept) | Counts page visits and traffic sources. No personal data, no third-party trackers, no cross-site tracking. Aggregate measurements only. Operated by Vercel. | Until you clear browser storage or your consent expires. |
heybob:last-visit (localStorage) |
A timestamp so a returning visitor lands directly on the chat exchange instead of replaying the full hero animation. Strictly functional. No tracking value, never sent to a server. | 24 hours rolling. |
To revoke consent before the 12-month window expires: clear your browser's site data for hey-bob.co. We are working on a one-click revoke control to land in a future release.
Email Consent
Marketing consent is opt-in. The checkbox is off by default. You can unsubscribe through the link in any non-transactional email. You can request export or deletion by email or through the waitlist rights flow.
Product Data
The alpha app may process messages, notes, tasks, calendar context, email-derived summaries, and notification tokens when you choose to use those features. Product data is used to provide the product. It is not sold.
Your Rights
You can request access, export, correction, deletion, or withdrawal of consent. EU and UK users have these rights under GDPR and UK GDPR. heyBob will respond within 30 days.
Children
heyBob is not intended for users under 18.
Changes
Material changes will be reflected on this page and, when appropriate, sent to confirmed subscribers.