Privacy Policy

Human Behavior, Inc. ("Human Behavior," "we," "us," or "our") provides product analytics, session replay, and AI agent tools at https://www.humanbehavior.co. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

This policy covers two kinds of people: our customers (the teams who create accounts and install our SDK) and our customers' end users (the people whose sessions are recorded on customer sites and apps). For end-user session data we act as a processor on the customer's behalf under our Data Processing Addendum; the customer is the controller, and end users should direct privacy questions about a specific site to that site's operator.

By using our services, you agree to this policy. If you do not agree, do not use the services.

Depending on how you use Human Behavior, we may collect:

• Account information such as name, email address, and authentication details when you sign up or sign in.
• Product and usage data from websites or apps that install our SDK, including session activity, events, and related diagnostics, subject to customer configuration and privacy controls.
• Communications you send us, such as support requests to founders@humanbehavior.co.
• Mobile phone numbers you voluntarily provide for SMS verification and optional transactional notifications, as described below.

If you add a phone number in Settings → Connections → Your phone, we use that number to send transactional SMS only: one-time verification codes and, if you enable SMS on an agent, optional agent or account notifications you request in-product.

Your mobile information will not be sold or shared with third parties for promotional or marketing purposes.

We do not use your mobile number for marketing SMS. Message frequency varies based on verification requests and notifications you enable. Message and data rates may apply. Reply HELP for help or STOP to cancel. You can also remove your number in account settings.

Completing phone verification confirms consent to receive these transactional messages. Consent is not a condition of purchasing any goods or services.

We use personal information to:

• Provide, operate, secure, and improve the Human Behavior service.
• Authenticate users and send verification or account-related messages.
• Communicate about the product, including support responses.
• Comply with law and enforce our Terms of Service.

We may share information with service providers that help us operate the product (for example, hosting, authentication, and SMS delivery providers), solely to provide those services on our behalf. We may also share information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale.

Every provider that processes personal data on our behalf is listed on our Subprocessors page, along with what it is used for and what data it handles.

We do not sell personal information. As stated above, mobile information is not sold or shared with third parties for promotional or marketing purposes.

Where the GDPR or UK GDPR applies, we process personal data on these legal bases:

• Performance of a contract (Art. 6(1)(b)) — providing the service to our customers.
• Legal obligations (Art. 6(1)(c)).
• Legitimate interests (Art. 6(1)(f)) — for example service improvement, security, and fraud prevention.

Customers are responsible for establishing a legal basis and, where required, obtaining end-user consent (for example via a cookie or tracking banner) for the recording and analytics they configure.

Our own website uses cookies for core functionality such as authentication, session continuity, and remembering preferences. On customer sites, our SDK uses browser storage to support session recording; customers must configure their own consent mechanisms for their end users in compliance with applicable cookie laws.

Data may be transferred to and processed in the United States or other jurisdictions where we or our subprocessors operate. Where required, we rely on Standard Contractual Clauses or other lawful transfer mechanisms to safeguard those transfers, as described in our Data Processing Addendum.

For customers on the Get Started plan, we may use and share redacted, de-identified data derived from use of the service to improve and develop our products. Before any such use, personal identifiers and identifying content are removed so the data cannot reasonably be linked back to a customer or their end users — it is never personal information.

This applies only to the Get Started plan. We do not use data this way for any other plan, or during any free trial on any plan, including the Get Started trial.

While your account is active, we retain information for as long as needed to provide the service, meet legal obligations, resolve disputes, and enforce agreements.

When you delete your account, we keep the data of projects you were the only member of for 90 days so that the deletion can be reversed if you change your mind. At the end of that period we permanently delete it from Human Behavior's systems, including our databases, analytics store, and session recording storage. We email you when the deletion is scheduled and tell you the date the data will be removed. Projects you shared with other members are not deleted; they remain with the other members.

Deleting an individual project in the dashboard, or asking us to delete data, starts permanent deletion right away rather than 90 days later.

Deleted data may persist in encrypted backups and snapshots of our databases for a limited period until those backups expire on their own rotation schedule, after which it is gone from backups as well. Service providers that process data on our behalf (for example infrastructure, billing, email, and AI model providers) delete their copies on their own retention schedules, which we do not control. We may also retain records we are required to keep by law, such as invoices and tax records, and information needed to resolve a dispute.

We use administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure.

Depending on where you live (for example the EU, UK, or California), you may have the right to access, correct, or delete your personal data, restrict or object to its processing, receive a portable copy, and lodge a complaint with a supervisory authority. If your data was collected through a customer's site, we will refer your request to that customer and assist them in responding.

• Update or remove your phone number in Settings → Connections → Your phone.
• Text STOP to opt out of SMS, or HELP for assistance.
• Contact founders@humanbehavior.co for access, correction, or deletion requests.

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last updated" date. Continued use of the service after changes means you accept the updated policy.

Human Behavior, Inc.
1395 22nd St, San Francisco, CA
Email: founders@humanbehavior.co
Website: https://www.humanbehavior.co