Privacy policy.
The short version: we collect the minimum necessary for you to use HeyProf on WhatsApp, we do not store individual student data, and your lesson plans are never used to train AI. Below, no fine print.
This policy describes how Zelb Labs LTDA (operator of HeyProf, "we") handles your personal data when you use the product. It applies both to individual subscribers and to teams contracted by schools. Zelb Labs is a Brazilian company and works under Brazil's data protection law, the LGPD, wherever you teach.
What we collect
We collect only what is necessary for the product to work and to provide you with support:
- Phone number (WhatsApp): to authenticate the conversation and send your lesson plans.
- Name and email: collected during onboarding for personalization and account-related contact.
- Your class profiles, grade, subject, number of students, and any pedagogical context you choose to share (e.g., "3 students with ADHD need short breaks").
- Generated lesson plans: the content we produce for you, so you can regenerate it and return to previous versions.
- AI chat messages: so the AI can remember the context of your conversation.
- Content you send in chat: audio (transcribed to text), photos, and documents (PDF or Word). We use it only to understand your request and generate the material; text extracted from documents is deleted after a short period.
- Payment data: processed directly by our payment partner (we do not store card numbers; we receive only a confirmation and the last 4 digits).
What we do NOT collect: a student's name, tax ID, ID document, photo, grade, attendance, or any individual student record. HeyProf was designed to work with the aggregate class profile: even when you send a photo or a document, it's to generate your material, never to build a student record.
Why we collect it
Every piece of data has a purpose:
- To deliver the service: generate lesson plans, weekly batches, class-council reports, and respond in chat.
- To give you a history: versions of your plans, cumulative curriculum coverage per class, feedback to calibrate future plans.
- To bill subscribers: issue invoices and process payments.
- For support: when you ask to speak with a human pedagogue, the team reads the relevant history to help you effectively.
- For stability: technical logs (errors, latency) are stored anonymously for up to 30 days.
Who else sees your data
We do not sell data to anyone. To run the product, we share the strictly necessary information with service providers (sub-processors), all of whom have data-protection agreements in place:
- Messaging platform: for delivery of messages via WhatsApp. Content is encrypted in transit.
- Payment processor: to handle card charges and issue invoices. Receives only what is needed to bill.
- AI model providers: to generate and validate lesson plans. Contracts require that submitted content not be used for training the models.
- Cloud infrastructure: to host the service, store PDFs, and maintain backups, always in regions that meet the rules we work under.
- Monitoring tools: to detect errors and measure performance, with sanitized payloads (no personal data).
- Site analytics: to measure public-site usage in aggregate, with no cookies and no cross-site tracking.
- Ad platform: only if you reached us by clicking an ad. We tell the platform that the click became a signup and, later, a subscription. Only the click identifier is sent, with no name, no phone number, and nothing about your classes. This is what lets us stop paying for ads that bring in no teachers.
- Email delivery: to send receipts, confirmations, and access codes. Receives your email address and the message content.
A named, up-to-date list of sub-processors is available upon request by email. If we change any of them, we update this page beforehand.
How long we keep it
- Your account and generated plans: while your subscription is active, and for up to 90 days after cancellation (to give you time to export everything).
- Chat history: kept while your account is active (the AI uses recent messages to keep the conversation's context). It's deleted along with your account when you request deletion.
- Tax records (invoices, receipts): for the period required by the Brazilian Federal Revenue Service (5 years).
- Anonymized technical logs: up to 30 days.
You can request immediate deletion at any time. See Your rights.
How we protect it
- Strong encryption (TLS) for all communication with the server and the messaging platform.
- Passwords and sensitive secrets encrypted at rest.
- Continuous backups in regions that meet the same data-protection rules.
- Minimum internal access: only those who need it, with an audit of what was accessed.
- Infrastructure hosted in Brazil whenever possible.
Children and adolescents
HeyProf is a tool for adult teachers. There is no registration or interface for students. Since we do not collect individual student data, no child or adolescent is a direct data subject in this service.
Cookies and tracking
The public site (heyprof.ai) uses only essential session and security cookies (CSRF, login) and a cookieless analytics tool that measures page usage in aggregate. We do not use marketing cookies or pixels that track you across sites.
Changes to this policy
When we make a material change, we update the date at the top of this page and notify active subscribers via WhatsApp with at least 30 days' notice.
Contact
Questions about privacy, or to exercise a right over your data: [email protected]. We respond within 5 business days.