Privacy Policy

This Privacy Policy explains how Hey Cass AI (a product of ThinkBOLD Solutions, LLC) collects, uses, discloses, and safeguards information when you visit heycass.ai, join the waitlist, or use any related service (collectively, the “Service”).

Cass is an AI assistant — not a human. See our Terms of Service for details on what Cass is, what she does, and what she explicitly does not do.

1. Who we are

Hey Cass AI is operated by ThinkBOLD Solutions, LLC (registered in Wyoming, USA). For any privacy question, contact us at cass@heycass.ai.

2. What we collect

Information you give us

• Waitlist signup: first name, last name, email address, and (optionally) your agency name.
• Email replies: if you reply to a Cass email, we receive the content of your message.
• Cass chat: when you use the Cass chat (currently in private beta), your queries and conversation history are collected to operate the service.
• Cookie consent decisions: we record your choices from our consent banner so we can honor them and prove we did.
• Canva connection (optional):if you choose to connect your Canva account, we use Canva’s API to read your Canva designs and basic profile information so you can browse and import them into your media library. When you import a design, we export it from Canva as an image and store that image in your Hey Cass account so you can reuse it. We use this access only to provide the Canva import feature and your library. We store your Canva connection on our servers in encrypted form, and we never sell or share your Canva designs or profile information with third parties. You can disconnect Canva at any time in Settings, which deletes the stored connection, and if you delete your Hey Cass account we delete your Canva connection with it. Images you have already imported remain in your library until you remove them.

Information collected automatically

• Usage data: pages visited, links clicked, approximate location (city / country level), device type, browser, and referrer.
• Tracking and analytics: subject to your cookie consent choices, our analytics and CRM provider may set cookies and use similar technologies to associate site activity with a contact record over time. See our Cookie Policy for the full list.

3. How we use it

• To operate and improve the waitlist
• To send the welcome email and future product communications you signed up for
• To respond to inquiries you send us
• To analyze site performance and product interest in aggregate
• To detect and prevent abuse, fraud, or security threats
• To comply with legal obligations

4. Service providers we use

Hey Cass AI relies on a small set of trusted service providers to operate. Each processes some data on our behalf under their own privacy and security commitments. Categories include:

• Email delivery — to send transactional and waitlist emails
• Customer relationship management (CRM) — contact storage, conversation history, and site visitor tracking
• Hosting, DNS, and email routing — to serve the site and forward inbound mail
• AI model providers— to power Cass's conversational responses in the chat
• Payment processing — when paid tiers launch (not currently active)

For the current list of named sub-processors used to deliver the Service, see our Sub-processor list.

We do not sell your personal information to anyone. We share data with the providers above only as necessary to operate the Service.

5. AI disclosure and how Cass processes your input

Hey Cass AI uses third-party AI model providers to generate Cass's responses in the chat. Inputs you submit to the chat are transmitted to and processed by those providers under their own privacy and data-handling terms.

We do not use customer inputs to train the underlying AI models. We may, however, retain anonymized or pseudonymized usage patterns to improve Cass's reliability, safety, and topic coverage.

Cass is an AI character — not a real person and not a credentialed Public Information Officer. We do not represent Cass's outputs as a substitute for human credentialed judgment, and you should not rely on them as such. See Terms of Service for scope limits and Acceptable Use Policy for prohibited contexts.

6. Communications from us may be AI-generated

Some communications you receive from Hey Cass AI — including welcome emails, product updates, and (when active) SMS or voice interactions — may be drafted, summarized, or delivered by artificial intelligence. Each communication identifies Hey Cass AI as the sender and is sent only to recipients who consented to receive it.

• Email: joining the waitlist signs you up to receive transactional and product emails from cass@heycass.ai. Every marketing message includes a one-click unsubscribe.
• SMS / MMS: we only send SMS to phone numbers that have given prior express written consent via a required, explicitly-labeled opt-in checkbox on our waitlist form. SMS opt-in information (phone numbers and consent records) is never shared with third parties or affiliates for marketing or any other purpose, and is not sold under any circumstances. Message frequency varies (typically 1–3 messages per week). Message and data rates may apply. Reply STOP to opt out at any time; reply HELP for help. We comply with U.S. TCPA, CAN-SPAM, A2P 10DLC carrier rules, and applicable state AI-disclosure laws.
• AI voice or chat (future): any AI voice or chat agent will identify itself as AI at the start of the interaction. Outbound AI voice calls will only be made to recipients who have provided prior express written consent for AI / prerecorded calls.

See our Terms of Service §5 for the full framework on AI-generated messaging and calling.

7. How long we keep data

• Waitlist contacts: retained as long as you are on the waitlist or a customer. Deleted within 30 days of your written request.
• Project / conversation data: retained for the duration of your use of the Service plus a minimum of 36 months afterward to support continuity, audit trails, and dispute resolution.
• Usage and analytics data: typically retained for up to 24 months in aggregate or pseudonymized form.
• Email logs: retained by our email delivery provider per their policy (typically 30–90 days for delivery metadata).

8. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data (“right to erasure”)
• Object to or restrict certain processing
• Export your data in a portable format
• Withdraw your cookie consent at any time
• Opt out of marketing communications at any time

To exercise any of these rights, email cass@heycass.ai. We respond within 30 days.

9. Cookies and tracking

heycass.ai uses cookies and similar technologies for essential functionality, optional analytics, and optional marketing. Non-essential tracking is only loaded after you grant consent through our cookie banner. You can change your choices at any time using the cookie preferences link in the site footer. See our Cookie Policy for the full list of cookies in use and what they do.

10. Children

Hey Cass AI is intended for working professionals — Public Information Officers, emergency communicators, and the agencies that employ them. It is not directed to anyone under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have done so, contact us and we will delete it.

11. Security

We use reasonable technical and organizational safeguards to protect your data, including encrypted connections (TLS) for the site and for all email and CRM traffic, principle-of-least-privilege access controls, and audit logging. No system is 100% secure — if a security incident affecting your data occurs, we will notify you as required by applicable law.

12. International users

Our infrastructure is primarily based in the United States. By using Hey Cass AI from outside the United States, you consent to the transfer of your data to the United States, which may have data protection laws different from your jurisdiction.

13. California residents (CCPA / CPRA)

If you are a California resident, the rights described in Section 7 apply to you, and you also have the right to opt out of any sale or sharing of your personal information. We do not sell or share personal information in the meaning of the CCPA / CPRA, and we will not do so without offering a clear opt-out.

14. Changes to this policy

We may update this policy from time to time. Material changes will be announced via email to waitlist members and active users and posted on this page with an updated “Last updated” date.

15. Contact

Hey Cass AI / ThinkBOLD Solutions, LLC
1603 Capitol Ave, Suite 413 E269, Cheyenne, WY 82001
Email: cass@heycass.ai