Legal
Privacy Policy
What we collect, how we use it, and what your rights are. Short version: we collect only what the product needs, we don't sell anything, and we don't use your data to train AI models.
Last updated: April 17, 2026
1. Who we are
mr CHUY. is operated by CLEVERALPHA, a California-based digital-first investment advisor. Questions about this policy go to support@hellomrchuy.com.
2. What we collect
- Account info — email, name, and authentication identifiers.
- Usage data — voice minutes, session metadata, and feature usage counts.
- Memory — per-user context you build up in conversation with mr CHUY.
- Knowledge base — documents, transcripts, and files you upload.
- Device and logs — IP address, browser, device type, and error logs for reliability.
3. How we use it
To run the Service, remember your context across sessions, bill you accurately, prevent abuse, communicate with you about the product, and improve reliability. That's it.
Marketing across CLEVERALPHA properties. If you opt in at signup (the box is off by default), we may use your email to send product updates about mr CHUY. and occasional communications about other CLEVERALPHA digital properties. You can unsubscribe from any marketing email at any time — the link is in every message, and opting out does not affect Service-related notifications or your account.
4. Third-party processors
We use a small set of vendors to run mr CHUY. Each processes data under a data-processing agreement scoped to providing the Service:
- OpenAI — voice and language model inference, configured with zero data retention for content where available.
We do not sell your personal information to anyone. Ever.
5. Training
We do not use your data to train AI models. Our third-party processors are configured to not retain your content for training where that setting is available.
6. Your rights
You may request access, correction, export, or deletion of your data at any time. California residents have additional rights under the CCPA, including the right to know what personal information is collected and the right to request deletion. Email support@hellomrchuy.com to exercise any right — we'll respond within 30 days.
7. Data retention
We keep your data while your account is active. On account deletion we remove personal data within 30 days, except where retention is required by law (for example, billing records). Voice recordings, if generated, are deleted or anonymized according to your tier's retention policy.
8. Security
Encryption in transit (TLS 1.2+) and at rest. Scoped access to production systems, MFA required for privileged accounts, and tenant-level isolation for enterprise knowledge bases. We're a small team and treat data like we'd treat our own.
9. Children
The Service is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we'll remove it.
10. Changes
We'll post updates to this page with a new "Last updated" date. Material changes will be announced in the app and via email to account holders.