Legal
Privacy Policy
Last updated 2 September 2026
This policy explains what Hety collects, what we do with it, and every outside company that receives any of it. It is written to be specific rather than reassuring — if you want to know whether your chat messages reach an AI provider, or which analytics company sees your visit, the answer is below by name.
Who we are
Hety is an equity-research tool operated by Truthify. We can be reached at info@hety.io for any question or request in this policy, including deletion.
What we collect
If you create an account
| Email address | Your login, and where account and alert email is sent. |
| Password | Stored only as a scrypt hash with a random salt. We cannot read it or recover it. |
| Name, profile picture URL and locale | Only if you sign in with Google, and only what Google returns. |
| Sign-up method and dates | Whether you used a password or Google, when you registered, and when you last signed in. |
| Subscription status | Whether you are trialing, active or inactive, when the period ends, and your Stripe customer ID. |
| Approximate location and time zone | City, region, country and time zone, derived from your connection by our host at the edge. We never store your IP address. |
What you do in the app
| Watchlist | The tickers you save. |
| Investment theses you write | Your own written reasoning, price target and time frame. This is text you author; we store it so the tracker can score it later. |
| Feature and AI usage | Which features you open, which tickers you research, and which AI tools you run. Used to understand what is worth building. |
| Alert preferences and notifications | Whether you want email alerts, and the alerts you have been shown. |
| Browser push subscription | Only if you switch on browser notifications. It is a token from your browser, not an identifier we create. |
If you only visit the marketing site
We record an anonymous visit: a random session ID kept in your browser's sessionStorage, which pages and sections you reached, scroll depth, time on page, clicks, the site that referred you, any campaign or ad-click parameters in the URL (including gclid), whether you are on mobile or desktop, and the city, region and country our host resolves at the edge. This is not linked to a name or an email, and again, your IP address is not stored.
Payments
Payments are handled entirely by Stripe. Card numbers are entered on Stripe's own checkout page and are never sent to, seen by, or stored on our servers. We keep only your Stripe customer ID, your plan and its status, and invoice records so you can see your billing history.
Cookies and similar technologies
We set one cookie of our own, hety_session, which keeps you signed in. It is required for the product to work and is not used for advertising.
Google Analytics and Google Ads run on our pages and set their own cookies to measure traffic and attribute sign-ups to advertising. Our own visit tracking uses sessionStorage rather than a cookie, and clears when you close the tab.
How we use AI, and what it sees
Hety uses AI models to produce several parts of the product. This matters for your privacy because your input is sent to those providers to be processed:
- Grok, by xAI. Writes the plain-English 10-K summaries and the draft investment theses, and answers the chat assistant. Anything you type into the chat is sent to xAI to generate a reply, along with the filing or company text the feature needs.
- Google Gemini. Transcribes public company interviews and earnings recordings so they can be summarised. Your personal data is not part of this.
- Truthify. Produces the management-integrity analysis from public company statements and filings. Your personal data is not part of this.
AI output is generated text. It can be wrong, and it is not reviewed by a human before you see it. Nothing Hety produces is investment advice — see our Terms.
We do not use your personal data to train our own models, and we do not sell your personal information.
Who we share data with
Named individually, with what each one receives:
| Stripe | Payments and subscriptions. Receives your email and card details (entered directly with them). |
| xAI (Grok) | AI generation. Receives your chat messages and the text of the filings being summarised. |
| Google — Gemini, YouTube Data API | Transcription and public company media. No personal data. |
| Google — Analytics and Ads | Usage measurement and ad attribution. Receives page views, events and the pages you visit. |
| Google — Sign-In | Only if you choose Google to sign in. Confirms your identity and returns your email, name and picture. |
| Truthify | Management-integrity analysis of public companies. No personal data. |
| Financial Modeling Prep | Market prices and company financials. Receives ticker symbols, not user data. |
| Resend, and Google (SMTP) | Delivers our email. Receives your email address and the message content. |
| Supabase | Hosts our database — accounts, watchlists, preferences. |
| Vercel | Hosts and serves the site, and resolves approximate location at the edge. |
| Upstash | Cache and session storage. |
We also display blog articles supplied by Soro. That is content coming to us; no user data is sent to them.
We may also disclose data if the law requires it, or to protect our rights or a person's safety.
Where your data is held
Hety is operated from India and hosted on infrastructure in the United States and other countries. If you use Hety from outside those countries, your data is transferred and processed there.
How long we keep it
Account data is kept while your account exists. Sessions expire after 30 days. Anonymous visit records are retained up to about 800 sessions before being rotated out. Cached market and AI results are held for between five minutes and thirty days depending on how quickly the underlying data changes.
Your rights and how to use them
You can delete your account and its data yourself at any time from Settings. That removes your account, watchlist, saved theses, preferences and push subscription.
You can also turn alert email off in Settings, or use the unsubscribe link in any alert email.
Depending on where you live you may have rights to access, correct, export or restrict the use of your personal data, and to object to it. Email info@hety.io and we will action it. We will not charge you or make you cancel to exercise a right.
Security
Traffic is served over HTTPS. Passwords are stored only as salted scrypt hashes. Card data never reaches our servers. No system is perfectly secure, so if we discover a breach affecting your personal data we will tell you and any regulator we are required to notify.
Children
Hety is for adults making their own research decisions and is not directed at children under 16. We do not knowingly collect their data; if you believe a child has an account, email us and we will remove it.
Changes
If we change how we handle your data we will update this page and its date. If the change is significant we will tell account holders by email rather than quietly editing this page.
Contact
Questions, requests or complaints: info@hety.io.