Privacy Policy

This Privacy Policy explains how Hey Cass AI (a product of ThinkBOLD Solutions, LLC) collects, uses, discloses, and safeguards information when you visit heycass.ai, join the waitlist, or use any related service (collectively, the “Service”).

Cass is an AI assistant — not a human. See our Terms of Service for details on what Cass is, what she does, and what she explicitly does not do.

1. Who we are

Hey Cass AI is operated by ThinkBOLD Solutions, LLC (registered in Wyoming, USA). For any privacy question, contact us at cass@heycass.ai.

2. What we collect

Information you give us

• Waitlist signup: first name, last name, email address, and (optionally) your agency name.
• Email replies: if you reply to a Cass email, we receive the content of your message.
• Future product use: when the chatbot launches, your queries and conversation history will be collected to operate the service.
• Cookie consent decisions: we record your choices from our consent banner so we can honor them and prove we did.

Information collected automatically

• Usage data: pages visited, links clicked, approximate location (city / country level), device type, browser, and referrer.
• Tracking and analytics: subject to your cookie consent choices, our analytics and CRM provider may set cookies and use similar technologies to associate site activity with a contact record over time. See our Cookie Policy for the full list.

3. How we use it

• To operate and improve the waitlist
• To send the welcome email and future product communications you signed up for
• To respond to inquiries you send us
• To analyze site performance and product interest in aggregate
• To detect and prevent abuse, fraud, or security threats
• To comply with legal obligations

4. Service providers we use

Hey Cass AI relies on a small set of trusted service providers to operate. Each processes some data on our behalf under their own privacy and security commitments. Categories include:

• Email delivery — to send transactional and waitlist emails
• Customer relationship management (CRM) — contact storage, conversation history, and site visitor tracking
• Hosting, DNS, and email routing — to serve the site and forward inbound mail
• AI model providers— to power Cass's conversational responses when the chatbot is live
• Payment processing — when paid tiers launch (not currently active)

For the current list of named sub-processors used to deliver the Service, see our Sub-processor list.

We do not sell your personal information to anyone. We share data with the providers above only as necessary to operate the Service.

5. AI disclosure and how Cass processes your input

Hey Cass AI uses third-party AI model providers to generate Cass's responses when the chatbot is live. Inputs you submit to the chatbot may be transmitted to and processed by those providers under their own privacy and data-handling terms.

We do not use customer inputs to train the underlying AI models. We may, however, retain anonymized or pseudonymized usage patterns to improve Cass's reliability, safety, and topic coverage.

Cass is an AI character — not a real person and not a credentialed Public Information Officer. We do not represent Cass's outputs as a substitute for human credentialed judgment, and you should not rely on them as such. See Terms of Service for scope limits and Acceptable Use Policy for prohibited contexts.

6. Communications from us may be AI-generated

Some communications you receive from Hey Cass AI — including welcome emails, product updates, and (when active) SMS or voice interactions — may be drafted, summarized, or delivered by artificial intelligence. Each communication identifies Hey Cass AI as the sender and is sent only to recipients who consented to receive it.

• Email: joining the waitlist signs you up to receive transactional and product emails from cass@heycass.ai. Every marketing message includes a one-click unsubscribe.
• SMS / MMS (future): if SMS becomes available, we will only send to phone numbers that have given prior express written consent. Reply STOP to opt out at any time. We comply with U.S. TCPA, CAN-SPAM, A2P 10DLC carrier rules, and applicable state AI-disclosure laws.
• AI voice or chat (future): any AI voice or chat agent will identify itself as AI at the start of the interaction. Outbound AI voice calls will only be made to recipients who have provided prior express written consent for AI / prerecorded calls.

See our Terms of Service §5 for the full framework on AI-generated messaging and calling.

7. How long we keep data

• Waitlist contacts: retained as long as you are on the waitlist or a customer. Deleted within 30 days of your written request.
• Project / conversation data: retained for the duration of your use of the Service plus a minimum of 36 months afterward to support continuity, audit trails, and dispute resolution.
• Usage and analytics data: typically retained for up to 24 months in aggregate or pseudonymized form.
• Email logs: retained by our email delivery provider per their policy (typically 30–90 days for delivery metadata).

8. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data (“right to erasure”)
• Object to or restrict certain processing
• Export your data in a portable format
• Withdraw your cookie consent at any time
• Opt out of marketing communications at any time

To exercise any of these rights, email cass@heycass.ai. We respond within 30 days.

9. Cookies and tracking

heycass.ai uses cookies and similar technologies for essential functionality, optional analytics, and optional marketing. Non-essential tracking is only loaded after you grant consent through our cookie banner. You can change your choices at any time using the cookie preferences link in the site footer. See our Cookie Policy for the full list of cookies in use and what they do.

10. Children

Hey Cass AI is intended for working professionals — Public Information Officers, emergency communicators, and the agencies that employ them. It is not directed to anyone under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have done so, contact us and we will delete it.

11. Security

We use reasonable technical and organizational safeguards to protect your data, including encrypted connections (TLS) for the site and for all email and CRM traffic, principle-of-least-privilege access controls, and audit logging. No system is 100% secure — if a security incident affecting your data occurs, we will notify you as required by applicable law.

12. International users

Our infrastructure is primarily based in the United States. By using Hey Cass AI from outside the United States, you consent to the transfer of your data to the United States, which may have data protection laws different from your jurisdiction.

13. California residents (CCPA / CPRA)

If you are a California resident, the rights described in Section 7 apply to you, and you also have the right to opt out of any sale or sharing of your personal information. We do not sell or share personal information in the meaning of the CCPA / CPRA, and we will not do so without offering a clear opt-out.

14. Changes to this policy

We may update this policy from time to time. Material changes will be announced via email to waitlist members and active users and posted on this page with an updated “Last updated” date.

15. Contact

Hey Cass AI / ThinkBOLD Solutions, LLC
1603 Capitol Ave, Suite 413 E269, Cheyenne, WY 82001
Email: cass@heycass.ai