This policy describes how the Hedy website (hedy.one) and the Hedy product handle data. It reflects a core architectural fact: the Hedy product is deployed on your own infrastructure. In Self-hosted / BYO mode, operational data does not flow to us at all. In Managed mode, exactly one path to us exists — model traffic through Hedy's gateway — and it is described below.
The product
- Self-hosted. Hedy runs in your environment (your VPC, or fully air-gapped). Your knowledge base, conversation memory and audit logs are stored in your own database on your own machines in both model modes; in Self-hosted / BYO mode, token metering lives entirely in your database too.
- Sub-processors. In Self-hosted / BYO mode there are none: your operational data is not transmitted to Hedy or to any third party on our behalf. If you configure external model providers, your own agreements with those providers govern that traffic; air-gapped deployments with local models make no external calls at all. In Managed mode, Hedy and the underlying model provider act as sub-processors for model traffic only: prompts and responses pass through Hedy's gateway to the provider for inference, and the gateway stores metering metadata (token counts, cost, model name, latency) and your credit ledger — never prompt or response content.
- Secrets. Credentials are injected through your deployment environment and are never transmitted to us.
- No training on your data. We do not train on your data in either mode. In Self-hosted / BYO mode we do not collect it at all; in Managed mode the gateway retains no prompt or response content, so there is nothing of yours on our side to train on. Managed model traffic is routed only to providers whose commercial API terms exclude training on inputs and outputs by default.
This website
- hedy.one is a static marketing site. It does not set advertising cookies.
- If you email us, we process your message and contact details solely to respond and to discuss a possible engagement.
Your rights
For any question about data we hold from your correspondence, or to request its deletion, contact hello@hedy.one. Enterprise customers can request a Data Processing Agreement as part of a deployment.