Is Hebbia safe with your data?
Hebbia
Hebbia AI Inc.
Partial disclosure · high confidence
Hebbia earns a C (50/100) because it discloses its data practices only in part.
#81
of 216 apps ranked
50
score · Finance avg 37
+13
vs category average
Hebbia commits not to train generalized or third-party models on personal data in customer data, names a Data Protection Officer and standard contractual clauses for US transfers, and says it does not sell or share personal information for cross-context behavioral advertising, but it gives no retention period in days, no breach-notification commitment, and no named security controls.
What Hebbia's privacy policy and terms of service say about your data
No training on customer data
The policy states that personal data contained in customer data is not used to train or improve generalized or third-party AI or machine learning models, with any improvement use limited to internal debugging, performance monitoring and feature development.
Retention has no number
Service data is kept for the duration of the customer relationship "and for a period of time thereafter", and prospect data until it "no longer has business value", so no retention period in days or months is stated anywhere.
Rights routed through one form
Access, correction, deletion and opt-out requests all go through a named Data Subject Request Form, and a "Do Not Sell or Share My Personal Information" control sits in the cookie preferences.
Security and breach disclosure are thin
Protection is described only as "commercially reasonable security measures" with no encryption, access-control or certification named, and the policy says nothing about notifying anyone after a breach.
What the policy is silent or vague on
- Not stated: a way to opt out of training
- Not stated: whether training use differs by plan
- Not stated: your ownership of generated outputs
- Not stated: a deletion timeline after closure or request
Hebbia privacy rating
Details
- Category
- Finance
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2026-05-08
- Region scored
- Global / US-default
- Last assessed
- 2026-10-13
Documents examined
Other finance apps
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.