Privacy Policy

Last updated: March 27, 2026

1. Data We Collect

We collect only the data necessary to provide our marketing services: your name, email address, business information, and marketing analytics data. We never sell your data to third parties.

2. How We Use Your Data

Your data is used exclusively to deliver marketing services, track campaign performance, and communicate with you about your account. Our AI agents process your data to generate marketing strategies, content, and analytics.

3. Data Security

We employ enterprise-grade security measures including:

• AES-256 encryption for all data at rest
• TLS 1.3 encryption for all data in transit
• HTTP Strict Transport Security (HSTS) with preloading
• Content Security Policy (CSP) headers
• Row Level Security (RLS) for database access control
• SOC 2 compliant cloud infrastructure (Supabase + Vercel)

4. Your Rights

You have the right to access, export, correct, or delete your personal data at any time. Contact us at privacy@heepsters.com to exercise these rights.

5. Data Retention

We retain your data only as long as your account is active or as needed to provide services. Upon account deletion, all personal data is permanently removed within 30 days.

6. Third-Party Services

We use the following processors: Supabase (database), Vercel (hosting), Anthropic (AI processing), Google (analytics and advertising APIs), Meta (advertising APIs), and SendGrid (email delivery). Each maintains their own privacy commitments.

7. Contact

For privacy questions or data requests, email privacy@heepsters.com.