Your data, plainly.

HeroAI is based in Toronto, Ontario, Canada. We are responsible for the personal information described here, and our founders are accountable for how it is handled. Questions, requests and complaints go to privacy@usehero.ca.

Only what the site needs to answer you and keep running:

• What you give us in a form: your name, your shop's name, your phone number, your email, your message, and whether you'd rather be called or emailed.
• The phone number you confirm when you ask Nova to book a call with the founders.
• What you say or type to Nova. Your voice is processed live so Nova can hear and answer you. We do not keep recordings of your voice. A text transcript of the conversation is kept for 30 days, then deleted.
• Standard technical data our host records when any page loads — IP address, browser, pages requested, time — used for security and to stop abuse, including limiting how often one address can start a conversation.
• Page-view counts from Vercel Web Analytics, which does not use cookies and does not track you across other websites.

We don't ask for payment details, we don't buy data about you, and we don't collect anything from you that you haven't typed, said, or requested by loading a page.

• To get back to you the way you asked — a call or an email from one of the founders.
• To run the conversation with Nova, and to read past transcripts so we can improve her answers.
• To keep the site secure and working, and to prevent abuse.
• To meet our legal obligations.

We don't sell personal information, we don't use it for advertising, and we won't add you to a mailing list. We only contact you about the thing you asked us about.

A few service providers handle data on our behalf, under contracts that limit them to providing their service:

• Vercel — hosts the website and provides the cookieless page-view analytics.
• ElevenLabs — runs Nova's voice conversations: speech recognition, the voice you hear, and the conversation transcript.
• Anthropic — provides the language model that writes Nova's replies, called through ElevenLabs.
• Supabase — stores the contact details you submit through our forms.

Some of these providers process data outside Canada, including in the United States, where it may be accessible to authorities under local law. By using the site you acknowledge that transfer.

• Voice audio: not stored.
• Nova transcripts: 30 days, then deleted automatically.
• Form and call requests: for as long as we're in conversation with you, and no more than 24 months after we last hear from you — sooner if you ask.
• Server logs: kept by our host for a short period for security, then deleted on its schedule.

You can ask to see the personal information we hold about you, correct it, or have it deleted, and you can withdraw your consent at any time. Email privacy@usehero.ca; we will answer within 30 days. If you want a Nova conversation deleted before the 30 days are up, tell us roughly when it took place.

If you're not satisfied with how we handle a concern, you can contact the Office of the Privacy Commissioner of Canada.

Everything travels over encrypted connections. Service keys stay on our servers, never in your browser, and access to what you submit is limited to the founders. No system is perfectly secure, so please don't send us anything you wouldn't put in an email — no card numbers, no health information.

The site is for businesses and is not directed at children. We don't knowingly collect information from anyone under 16.

If we change this policy, the date below changes with it. If a change is significant, we'll say so on the site. Last updated September 21, 2026.