PRIVACY
POLICY

(Last updated December 30, 2025)

Overview

Protecting your privacy and securing your data are top priorities for Heeb.ai by xLab. We use industry-standard security measures to safeguard the data we process and store while operating transparently about our practices.
End-to-End Encryption. Secure Storage. Transparency. Full Control.

Introduction

This Privacy Policy outlines how Heeb.ai (“we”, “us”, “our”, or “the Service”) collects, processes, and protects your personal and usage information. By using Heeb.ai, you consent to the practices described here. Heeb.ai is operated by xLab, based in Muscat, Oman.

Authentication and Security

  • Account authentication is secured through email and password.
  • Passwords are hashed and encrypted; we never store them in readable form.
  • All transmitted data is protected with TLS 1.3 encryption.
  • Strict access controls ensure only authorized personnel can access stored data.
  • We perform periodic security reviews to maintain a secure environment.
  • User data is never used for marketing, profiling, or advertising purposes.

Information We Collect

Information You Provide

  • Name, email, and password (hashed) to create and manage accounts.
  • Job or API requests submitted for processing.
  • Contact details and messages when you reach out to [email protected].
  • Payment information handled by secure third-party processors. Heeb.ai never stores card data.

Information We Collect Automatically

  • Device data such as IP address, browser type, and operating system.
  • Usage data like API call frequency, job queue statistics, and performance metrics.
  • Essential cookies used only for login and session management.

Information from Third-Party Services

Heeb.ai connects to third-party AI models using our own managed and secured API integrations. Users do not need to provide third-party API keys or credentials, and we do not store or access any external API credentials on behalf of users.

Data Processing and Storage

When you send a request or job through Heeb.ai, your prompt, parameters, and related metadata are stored securely in our database so that the job can be queued, processed, and returned reliably. After the job completes, we store both requests and responses to allow you to retrieve results, view history, and ensure accurate billing.

All stored data is encrypted both at rest and in transit. Access to stored prompts and responses is strictly limited to authorized support and engineering personnel for maintenance and troubleshooting purposes. We do not share stored data with third-party AI vendors, nor do we use it to train external AI or machine learning models.

Data Retention and Deletion

  • Account and billing data remain for the duration of your account’s activity.
  • Prompts, job requests, and model responses are stored as part of your usage history and may be retained to support analytics and service improvement.
  • You may request deletion of your account by contacting [email protected]. When deletion is confirmed, all associated data is permanently removed except where retention is required by law or to prevent abuse.

Data Sharing and Third-Party Access

  • We do not sell, rent, or share your data with advertisers or external marketers.
  • Verified third-party providers, such as infrastructure hosts or payment processors, may process limited data required for operations and are bound by confidentiality agreements.
  • In the event of a business transfer, merger, or acquisition, your data may transfer to the new owner under the same privacy standards.
  • We may disclose data when legally required to comply with judicial or regulatory orders or to protect our rights and the safety of users.

Your Rights

Depending on applicable law, you may have the right to access, correct, delete, or restrict processing of your data. You may also withdraw consent or request a data export by emailing [email protected]. Requests are processed within a reasonable timeframe consistent with data protection regulations.

Children's Privacy

Heeb.ai is not directed at or intended for children under 16 years old. We do not knowingly collect personal data from minors. If you believe a child has submitted personal information, please contact us to have it removed.

Cookie Policy

  • We use minimal cookies strictly required for authentication and session security.
  • We use a self‑hosted, anonymized analytics system to measure site usage. It does not use tracking cookies or collect personally identifiable information.
  • CSRF and secure session cookies protect against unauthorized actions.

International Data Transfers

As an Oman-based company, we may use cloud infrastructure located in other regions. In such cases, we ensure that equivalent security and data protection safeguards are applied consistently, regardless of location.

Changes to This Policy

We may update this Privacy Policy at any time. Updates will be announced on our website, and the "Last Updated" date at the top of this page will change accordingly. Continued use of Heeb.ai after any modifications indicates your acceptance of the updated Privacy Policy.

Contact Us

For questions or privacy concerns, contact us at [email protected].
Address: xLab, Muscat, Oman