Privacy Policy

What we collect

When you sign up for Heist, we collect your email address and the information you provide to set up your Brand Brain (voice, audience, and offer details). We also collect standard usage analytics to improve the product.

How we use it

Your data powers your Heist experience — generating content in your voice, scheduling to your platforms, and tracking your analytics. We never sell your personal data to third parties. Your Brand Brain data belongs to you.

Third-party services (sub-processors)

We use the following services to run Heist, sharing the minimum data each needs to function. Each operates under its own privacy policy:

AI generation — Anthropic, OpenAI, Google, or OpenRouter, depending on the AI provider you configure. Content you generate (your prompts and Brand Brain context) is sent to your chosen provider; if you use the MCP connector, your own AI chat does the writing under its own privacy terms. Payments — Stripe. Hosting — Oracle Cloud Infrastructure. Media storage — Cloudflare R2. Email delivery — Resend. Stock photos — Unsplash. Voice & video rendering — ElevenLabs and Creatomate (only when you use video features). Sign-in & bot protection — Google, Cloudflare Turnstile. Analytics — Google Analytics, Microsoft Clarity.

The full list with more detail lives on our Security page.

Cookies

We use essential cookies to keep you signed in and optional analytics cookies to understand how people use Heist. You can disable analytics cookies in your browser settings.

Data retention

Your account data is retained as long as your account is active. If you delete your account, we remove your data within 30 days. You can export your content at any time.

Your rights

You can access, correct, export, or delete your data at any time from your account settings or by emailing support@heistbrain.com.

Contact

Questions about privacy? Email us at support@heistbrain.com.