Privacy Policy

Who we are

heytam provides AI agents and practice-management software for aesthetic and medical practices. This policy explains what information we collect when practices and their staff use heytam, and when patients interact with a practice through heytam.

Information we collect

• Account information: name, email, phone, practice details, and billing information (processed by Stripe).
• Patient and lead information that a practice stores or receives through heytam, such as contact details, appointment requests, messages, and call recordings or transcripts.
• Connected-account data: when a practice connects a service such as Facebook, Google, Mailchimp, or Twilio, we receive the data that practice authorizes. For Facebook, this includes the list of Pages the user manages, Page access tokens, and lead form submissions from Facebook Lead Ads.
• Usage data: log data, device and browser information, and cookies needed to keep you signed in.

Google user data

When a practice connects Google, heytam requests only the access it needs:

• Google Calendar: to read free and busy times and to create, update or cancel the appointments its AI agents book for the practice’s patients.
• Gmail (send only): to send the emails the practice’s AI agents write to its patients, from the practice’s own address. heytam does not read, store or index the mailbox.
• Basic profile (email address): to show which Google account is connected.

heytam’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not sold, not used for advertising, not used to train AI models, and not shared with anyone except as needed to provide these features. People at heytam do not read it unless the practice asks for support, it is needed for security, or the law requires it. A practice can disconnect Google at any time in heytam or at myaccount.google.com/permissions; tokens are then deleted.

How we use information

• To provide the service: routing leads, booking appointments, sending messages and calls on the practice’s behalf, and showing results in the dashboard.
• To bill for subscriptions and keep accounts secure.
• To support, maintain, and improve heytam.

Facebook and Meta data

Data received from Meta (Pages, lead form submissions, and access tokens) is used only to deliver leads into the connected practice’s heytam account and to let that practice follow up with those leads. We do not sell this data, use it for advertising, or share it with anyone other than the practice that connected the Page and the service providers needed to run heytam. A practice can disconnect Facebook at any time from Integrations, and can request deletion as described on our data deletion page.

Sharing

We do not sell personal information. We share it only with service providers that help us run heytam (for example hosting, payments, email, SMS, voice, and AI model providers) under contracts that limit their use of it, when the practice directs us to, or when required by law.

Retention and security

We keep information for as long as the practice’s account is active or as needed to provide the service and meet legal obligations. We use encryption in transit, access controls, and audit logging to protect it.

Your choices

You can access, correct, or delete your information from your account, or by emailing support@heytam.com. Patients should contact the practice they interacted with, and we will help that practice fulfil the request.

Contact

Questions about this policy: support@heytam.com.