Privacy Policy

This Privacy Policy explains how NeverRest AI LLC (“NeverRest,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with the Hey Papi™ mobile application, the heypapi.ai website, and related services (collectively, the “Service”). Hey Papi is an AI field assistant used by contractors and trade professionals to document job sites, generate estimates, and communicate with their customers.

By using the Service you agree to this Policy. If you do not agree, please do not use the Service.

1. Information We Collect

Account information. Name, business name, email address, mobile phone number, trade or service category, and billing details when you create an account or request access.

Job and project content. Photos, LiDAR/room scans, voice recordings and transcripts, measurements, notes, line items, estimates, proposals, invoices, and change orders you create or upload.

Customer contact information you provide. If you are a contractor using Hey Papi, you may enter the names, phone numbers, email addresses, and property addresses of your own customers so the Service can send them quotes, appointment confirmations, and job updates. You are responsible for having the right and the consent to provide that information to us.

Communications. The content and metadata of SMS/MMS messages, emails, and in-app messages sent or received through the Service, including delivery status and opt-in and opt-out records.

Device and usage data. Device model, operating system, app version, IP address, approximate or precise location (only with your permission), crash logs, and feature usage events.

Payment data. Payments are processed by our payment processor. We receive limited transaction details such as the last four digits of a card, brand, and status. We do not store full payment card numbers.

2. How We Use Information

• To provide, operate, secure, and improve the Service.
• To generate estimates, proposals, renders, and job documentation using AI models on content you submit.
• To send transactional messages, including quotes, appointment reminders, job status updates, and account or security notices.
• To process payments and provide customer support.
• To detect, investigate, and prevent fraud, abuse, and violations of our terms.
• To comply with legal obligations and enforce our agreements.
• To create aggregated, de-identified data about how the Service is used, as described in Section 5.

We do not sell your personal information, and we do not share it with third parties for their own independent marketing purposes.

3. SMS and Text Messaging Privacy

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service and messaging delivery providers, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Mobile phone numbers and SMS consent records are collected and used only to deliver the messages you or your customer asked for. Consent is never transferred, sold, rented, or licensed.

Message frequency varies based on your job activity. Message and data rates may apply. Reply STOP to any message to opt out and HELP for assistance. Full details are in our SMS Terms.

4. How We Share Information

We disclose information only in these circumstances:

• Service providers. Cloud hosting, database, telecommunications and messaging carriers, AI model providers, email delivery, analytics, and payment processing vendors who process data on our behalf under contract.
• Your recipients. Content you direct us to send, such as a quote texted or emailed to your customer.
• Customer project pages. When a contractor shares a project link, the person who opens it sees only that job. We record that the page was opened and what they did on it (signed, approved or declined a change, started a payment, sent a message), and we keep a one-way, keyed fingerprint of their IP address rather than the address itself. A signature is kept with the signed document, together with the signer’s typed name, IP address and browser details as the e-signature audit record. Card details go directly to our payment processor and never touch our servers. The page loads no advertising or analytics trackers and sends no referrer, so the private link is not shared with other sites.
• Legal and safety. When required by law, subpoena, or to protect the rights, property, or safety of NeverRest, our users, or the public.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this Policy.
• Aggregated, de-identified data. Summary statistics that cannot identify you, your business, or your customers, as described in Section 5.

5. Aggregated and De-identified Data

We combine information from across the Service into aggregated, de-identified data. Examples include the types of jobs being quoted, typical prices and margins for common line items, materials and the supplier prices contractors are offered, regional trends, and which features are being used.

How we de-identify it. Before information becomes part of this data we remove names, email addresses, phone numbers, street addresses, and anything identifying your customers. Location is kept no more precisely than the first three digits of a ZIP code, and free-text descriptions are stripped of contact details. Mobile numbers and SMS consent records are never included.

How we use and share it. We use this data to improve the Service and to negotiate better pricing, supply, and insurance terms for the businesses on it. We may share it with suppliers, distributors, manufacturers, insurers, and other partners, but only in aggregate form that combines activity from at least three separate businesses, so that no individual user, business, or customer can reasonably be identified. We do not attempt to re-identify this data, and we require the partners we share it with not to try.

Because aggregated, de-identified data does not identify you, it is not personal information, and we may keep it after your account is closed. Sharing it is not a sale of your personal information.

6. AI Processing

The Service uses third-party artificial intelligence models to interpret photos, scans, and voice input and to draft estimates and job documentation. Content you submit may be transmitted to those providers solely to return a result to you. We do not permit those providers to use your content to train their general-purpose models. AI output may contain errors and should be reviewed by a qualified professional before being relied upon or sent to a customer.

7. Data Retention

We retain account and job content for as long as your account is active and for a reasonable period afterward to meet legal, tax, accounting, and dispute-resolution obligations. SMS opt-out records are retained as required for compliance. You may request deletion at any time as described below.

8. Your Rights and Choices

• Access, correct, or export the information in your account.
• Delete your account and associated data by emailing privacy@heypapi.ai or using our data deletion page.
• Opt out of SMS at any time by replying STOP.
• Disable camera, microphone, photo, or location permissions in your device settings, though some features will stop working.

Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act or the GDPR, including the right to know, delete, correct, and to not be discriminated against for exercising those rights. Contact us at the address below to exercise them.

9. Security

We use encryption in transit and at rest, access controls, and row-level database security to protect information. No system is perfectly secure, and we cannot guarantee absolute security.

10. Children’s Privacy

The Service is intended for business use by adults. It is not directed to children under 13, and we do not knowingly collect their personal information.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be posted here with a revised “Last updated” date and, where appropriate, communicated in the app.

12. Contact Us

NeverRest AI LLC
Hey Papi™
Email: privacy@heypapi.ai
Support: support@heypapi.ai