Is Hebbia safe with your data?
Hebbia
Hebbia AI Inc.
Partial disclosure · high confidence
Hebbia earns a C (65/100) because it discloses its data practices only in part.
#49
of 116 apps ranked
65
score · Finance avg 56
+9
vs category average
Hebbia's policy is strong on data-subject rights, sharing transparency, and a clear no-training pledge for customer data. It loses ground on vague retention with no day-count, an absent breach-notification timeline, and silence on output ownership and on shorter AI-log retention. The grade rests on the company's own May 2026 privacy policy at hebbia.com/privacy, with all applicable indicators resolved by a quoted clause or documented silence.
What Hebbia's privacy policy says about your data
No customer-data training
The policy states that Hebbia does not use Personal Data contained in Customer Data to train or improve generalized or third-party AI or machine learning models, and limits any internal use to debugging, performance monitoring, and feature development.
Does not sell or share
Hebbia states it does not sell personal information for monetary consideration and does not sell or share for cross-context behavioral advertising. It provides a named Do Not Sell or Share My Personal Information opt-out in cookie preferences.
Named transfer safeguards
For international transfers the policy relies on the European Commission standard contractual clauses (2021) and the UK International Data Transfer Addendum, and it names a Data Protection Officer along with EU and UK representatives.
Vague retention and no breach timeline
Retention is framed as the duration of the customer relationship plus a period afterward, and prospect data is held until it no longer has business value, with no day-count given. The security section commits to no breach-notification timeframe.
What the policy is silent or vague on
- Not stated: a way to opt out of training
- Not stated: whether training use differs by plan
- Not stated: your ownership of generated outputs
- Not stated: shorter retention for AI conversation logs
Hebbia privacy rating
Details
- Category
- Finance
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2026-05-08
- Region scored
- Global / US-default
- Assessed
- 2026-06-20
Other finance apps
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.