HeyHai Ltd ("HeyHai", "we", "us", or "our") provides AI-powered voice communication services for dealerships.

This page explains how we process personal data when delivering our Services.

In most cases:

• Our customers (dealerships) act as the data controller
• HeyHai Ltd acts as the data processor, processing data on their behalf

In providing our Services, we may process the following types of personal data:

• Contact data: name, phone number, and enquiry details
• Call data: audio recordings of calls
• Transcripts: text generated from call recordings
• Interaction data: responses, preferences, and conversation outcomes
• Qualification data: indicators such as interest level, timing, and intent

We only process data necessary to deliver the Services.

We process personal data to:

• Respond to inbound enquiries
• Conduct outbound sales and follow-up calls
• Qualify leads and assess buying intent
• Book appointments on behalf of dealerships
• Generate insights and reporting
• Improve the performance and reliability of our Services

We do not use this data for unrelated purposes.

Our Services use AI-powered voice agents to communicate with individuals.

• Calls may be conducted using AI-generated or AI-assisted voice
• Calls are recorded and transcribed by default.
• We (HeyHai Ltd) are responsible for ensuring that individuals are informed and, where required, consent is obtained for audio recording of calls.

We design our systems to support transparent and responsible use.

For most use cases:

• The dealership (our customer) is the data controller
• HeyHai Ltd is the data processor

This means:

• The dealership determines the purpose and legal basis for processing
• We process data only on their instructions and to provide the Services

We store data securely using trusted infrastructure providers.

• Data is retained only for as long as necessary to provide the Services
• Data may be deleted upon request or upon termination of the customer relationship
• We take reasonable steps to prevent unauthorised access, loss, or misuse

We use third-party service providers ("subprocessors") to deliver our Services, including:

• Cloud hosting providers
• Telephony and voice infrastructure providers
• Data processing and storage services

These providers process data only as necessary and are subject to appropriate safeguards.

Individuals whose data is processed may have rights under applicable data protection laws, including:

• The right to access their data
• The right to request correction or deletion
• The right to restrict or object to processing

Requests should generally be directed to the dealership acting as the data controller.

We will assist our customers in responding to such requests where required.