Privacy Policy

Effective Date: April 9, 2026

This Privacy Policy explains how Hedge, Inc. ("Hedge," "we," "us," or "our") collects, uses, stores, and shares personal information through the Vernacular platform (vernacular.chat) and related services (the "Service"). Hedge is based in Pittsburgh, Pennsylvania.

By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

Information you provide directly:

  • Account registration data (name, email address, company name, password)
  • Billing information (payment method, billing address)
  • Contact lists you upload or create (names, phone numbers, email addresses, physical addresses, dates of birth, tags, notes, and other metadata)
  • Message content you compose, approve, or send through the Service
  • Conversation goals, AI configuration preferences, and workflow settings
  • Support requests and communications with us

Information collected automatically:

  • Message delivery metadata (timestamps, delivery status, read receipts where available)
  • Station activity data (uptime, message throughput, health metrics)
  • Usage analytics (pages visited, features used, session duration)
  • Device and browser information (IP address, browser type, operating system)
  • Cookies and similar tracking technologies (see Section 7)

Information from third parties:

  • Contact enrichment data from third-party data providers (when you use our enrichment feature)
  • Information from integrated services (Notion, CRM tools) that you connect

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service, including sending and receiving iMessages on your behalf
  • Process AI-generated message drafts and automated responses using third-party language models
  • Store and manage your contact database
  • Process payments and manage billing
  • Analyze usage patterns to improve the Service
  • Send you transactional communications (billing confirmations, service updates, security alerts)
  • Respond to your support requests
  • Enforce our Terms of Service and Acceptable Use Policy
  • Comply with legal obligations

3. AI Processing and Third-Party Models

The Service uses artificial intelligence to draft and generate message responses. When AI features are active, message content and conversation context are sent to third-party AI providers (currently Anthropic's Claude) for processing. These providers process data according to their own privacy policies and data processing agreements. We do not use your message content to train AI models. AI providers receive message content only as needed to generate responses and do not retain it beyond the processing session, subject to their published data retention policies.

4. How We Share Your Information

We do not sell your personal information. We may share information with:

  • Service providers: Cloud hosting (Supabase, Vercel), payment processors, AI model providers (Anthropic), analytics tools, and contact enrichment providers -- all bound by data processing agreements
  • Message recipients: When you send messages through the Service, recipients receive your message content and the station's phone number
  • Legal compliance: When required by law, subpoena, court order, or governmental request
  • Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to you
  • With your consent: When you explicitly authorize sharing with a third party

5. Data Storage and Security

Your data is stored on Supabase (hosted on AWS) in the United States. Message content is encrypted in transit (TLS) and at rest. We implement commercially reasonable security measures including access controls, audit logging, and regular security reviews. Relay stations are physically secured at Hedge's facilities. Despite these measures, no system is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Message content and conversation history are retained until you delete them or close your account. Upon account closure, we will delete your data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our agreements). You may request data export at any time before account closure.

7. Cookies and Tracking

We use cookies and similar technologies for authentication, remembering preferences, and analytics. We use Vercel Analytics to understand how users interact with the Service. You can control cookies through your browser settings, but disabling cookies may affect the functionality of the Service.

8. Your Rights and Choices

All users:

  • Access, update, or correct your account information at any time through the dashboard
  • Export your data (contacts, messages, conversation history) in standard formats
  • Delete your account and associated data by contacting us
  • Opt out of non-essential communications

California residents (CCPA/CPRA):

If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:

  • Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you
  • Right to delete: Request deletion of your personal information, subject to certain exceptions
  • Right to correct: Request correction of inaccurate personal information
  • Right to opt out of sale/sharing: We do not sell or share personal information for cross-context behavioral advertising
  • Right to non-discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at jackson@hedgepayments.co. We will verify your identity before processing requests and respond within 45 days.

Categories of personal information collected (CCPA disclosure):

  • Identifiers (name, email, phone number, IP address)
  • Commercial information (billing history, plan details)
  • Internet or electronic activity (usage data, analytics)
  • Professional or employment information (company name, role)
  • Inferences drawn from the above (usage patterns, preferences)

9. Message Recipients' Privacy

When you send messages through Vernacular, you act as the data controller for the personal information of your message recipients. You are responsible for: (a) having a lawful basis to contact each recipient; (b) honoring opt-out and do-not-contact requests; (c) complying with applicable messaging laws (TCPA, CAN-SPAM, and state-level regulations); and (d) maintaining accurate records of consent. Hedge acts as a data processor with respect to recipient data you provide.

10. Chat Widget and Website Visitors

If you embed the Vernacular chat widget on your website, we collect information from visitors who interact with the widget, including their messages, browser information, and IP address. This data is stored in your Vernacular account and subject to your own privacy policy. You are responsible for disclosing the use of the Vernacular widget in your website's privacy policy.

11. Children's Privacy

The Service is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at jackson@hedgepayments.co.

12. International Data Transfers

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer. We take steps to ensure that your data receives adequate protection consistent with applicable data protection laws.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service at least 15 days before the changes take effect. The "Effective Date" at the top of this page indicates when the policy was last revised.

14. Contact Us

For questions, concerns, or requests related to this Privacy Policy or your personal data, contact us at:

Hedge, Inc.
Pittsburgh, PA
jackson@hedgepayments.co