Effective date of the policy: 03 January 2024
Your privacy is of paramount importance to us. We, Hevo Data Inc. (“Hevo”, “us” or “we”) are a California based corporation, engaged in the business of providing a SaaS data integration platform, tools, and related services to our customers (the “Service(s)”).
This Privacy Policy ("Policy") explains how we collect, use, disclose, protect and otherwise process our customers’ representatives’ ("you" or "your" or "User") Personal Information (as defined below) that we may collect on the website, www.hevodata.com (the "Site") when you register for the Services or make any changes to your registration details; through our SaaS platform, or our Slack app. We also provide information regarding how you can access and update your Personal Information and make certain choices about how your Personal Information is used by us. We also provide information on the non-Personal Information that we may collect such as cookies and log files, and our practices regarding such information.
This Policy is applicable when you subscribe to or register for our Services on the Site or are an already existing subscriber.
Please read this Policy carefully to understand our views and practices regarding your Personal Information and how we will treat it. If you reside in California, then this Policy is supplemented by our California Privacy Notice, which provides a privacy notice in accordance with the requirements of CCPA (defined below).
In accordance with applicable laws and regulations, including the European Union General Data Protection Regulation (EC Regulation 2016/679) (“GDPR”), Hevo controls, owns and directs the use of the Personal Information collected on the Site and, in this regard, Hevo is the data controller.
For any queries regarding this Policy and the collection and use of Personal Information collected or processed under this Policy, you can write to our Data Protection Officer (Sourabh Agarwal) by e-mail atprivacy@hevodata.com or by post at Hevo Data, Inc, 1390 Market St, Suite 200, San Francisco, CA 94102.
In this Policy, Personal Information means information or an information set that identifies or could be used to identify an individual. Hevo collects Personal Information as set out in Section 2 and 3 of this Policy from Users.
Personal Information does not include “Usage Data” which we define as encoded or anonymized information or aggregated data we collect about a group or category of services, features or Users which does not contain personally identifying information. Usage Data helps us understand trends in usage of the Service so that we can better consider new features or otherwise tailor the Service. In addition to collecting and using Usage Data ourselves, we may share Usage Data with third parties, including our, partners and service providers, for various purposes, including to help us better understand our customers’ needs and improve the Service as well as for advertising and marketing purposes. Such Usage Data is always stored in encrypted form, and in no event can any person who has access to the Usage Data be able to use or modify the Usage Data in a way such that it may become Personal Information, or can be used to identify a person.
We process the following types of information to provide you the Services.
| Sr. No | Category of information | Description |
|---|---|---|
| 1 | Customer Identification Data | Customer Identification Data means the Personal Information provided by you, on our request, at the time of signing up for the Services, whether through the website www.hevodata.com or through an agreement. |
| 2 | Customer Personal Data |
Customer Personal Data means Personal Information processed or stored by or on your behalf during your use of the Services. Customer Personal Data excludes any Customer Identification Data, which is primarily processed or stored by us. This Policy does not apply to Customer Data. For more information on how we process the Customer Data, please refer to the Data Processing Addendum, which details our role as the data processor and your rights as the data controller during your use of the Service. |
| 3 | Payments Data | When you register for the Service on the Site, you will be directed to our third-party payment gateway services provider, Stripe, which will collect certain credit card or other billing information to enable you to make the payment for the Service. Please read the privacy policy of such third-party service provider. We receive your billing name, address and other transaction details from the payment gateway service provider. |
| 4 | Settings and configurations Data | We record your configuration and settings-related data. This includes information relating to your choices and preferences of using our Site. |
| 5 | Communications Data | We keep records of your communications and interactions with us, through email, chat messages, telephone or other modes. This includes instances when you provide feedback or seek technical support from us. |
| 6 | App Credentials | In order to facilitate the exchange of data between third-party applications, we may need to store certain information such as your login identification details and password which you provide to us that helps us access these third-party application accounts on your behalf to provide the Service. Please refer to Section 13.1 for more details. |
The legal basis for the collection and processing of any Personal Information collected and processed by us is: (i) for the performance of the Services in accordance with the contract executed with you or in accordance with our Terms of Use; or (ii) where it is in our legitimate interests to do so and such legitimate interest is not overridden by your rights, (as specified in Section 10 below, for example to do internal research on our Users' usage, including, without limitation, demographics, interests, patterns, and behaviour to better understand, protect, and serve our Users, while improving our Site and Services). This information is compiled and analyzed on an aggregated basis.
We collect your Personal Information in the following three modes:
When you register for the Service on the Site, we ask for certain Personal Information comprising ‘customer identification data’ which includes, but is not limited to:
Additionally, when you register for the Service on the Site, you will be directed to our third-party payment gateway services provider, Stripe, which will collect certain credit card or other billing information to enable you to make the payment for the Service. Please read the privacy policy of such third-party service provider.
When you visit our Site, we may receive Personal Information about you from third parties through authorization that you may have provided to the third party for sharing such information with us. For example, if you access our Site through a third-party connection or log-in or connect an application to Hevo, that third party you connected with may pass certain information about your use of its service to Hevo.
This information could include, but is not limited to, the user ID associated with your account, an access token necessary to access that service, any information that you have permitted the third party to share with us, and any information you have made public in connection with that third-party service. You should always review, and if necessary, adjust your privacy settings on third party websites and services before linking or connecting them to the Service.
We use third party analytics tools to help us measure traffic and usage trends for the Service. These tools collect information sent by your browser while you are on the Site, that assists us in improving the Service.
Note that we will never email you to ask for your Hevo account information; if you receive such an email, please forward it to privacy@hevodata.com. Hevo may use your cell phone number to call or text you in order to provide the Service, if you have provided consent to Hevo for such communication. You may opt-out of this communication at any time by writing in to privacy@hevodata.com.
We rely on our underlying contract (whether through the Terms of Use, or the agreement entered into between you and Hevo) for the processing of Personal Information for the following purposes:
While collecting Personal Information, we indicate fields that are mandatory and those that are optional. You may decide whether or not to provide such optional information to us. However, non-provision of mandatory information may result in us being unable to provide the Services to you. Further, non-provision of specific or accurate Personal Information may result in a disruption in your usage of our Site or the Services, for which we will not be responsible.
When you access or use the Site or the Service, or otherwise provide information to us, you are consenting to the sharing of such information with Hevo’s related entities, third-party service providers and other entities. We may disclose your Personal Information in the following instances:
We may disclose Personal Information to our third-party service providers (such as its credit card processors and hosting partners) to provide the necessary hardware, software, networking, storage, and other services we use to operate the Service and maintain a high-quality user experience. We do not permit our service providers to use the Personal Information we share for their marketing purposes.
We may disclose Personal Information to our third-party service providers to provide you with marketing and advertising communication about our products and services, to undertake marketing research, and to help us deliver or track our marketing content and activities. We do not permit our service providers to use the Personal Information we share for their marketing purposes.
We may also disclose Personal Information with our third-party service providers for purposes of improvement and maintenance of our Site and Services, and in order to customize Users’ experiences.
We may disclose Personal Information to respond to subpoenas, court orders, on legal process, or to establish or exercise our legal rights or defend against legal claims, provided that we will intimate you, if not prohibited under law, as soon as reasonably possible if your Personal Information is shared for such purpose.
We may also share such information with the relevant third party if we believe it is necessary in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations or our Terms of Service.
We may also share information, including Personal Information with any member of the Hevo family which includes any entity that controls, is controlled by, or under common control with Hevo, in order to provide you with the Service.
The following table enlists the third-party applications that we may share your information with and the purpose for which such information is shared:
| Third Party Application | Purpose |
|---|---|
| Calendly | Set up meetings |
| Clearbit | Data enrichment |
| Confluence | Documentation |
| Front App | Sending emails |
| Fullstory | User Behaviour Tracking |
| Gsuite/Google Drive | Emails, document creation & storage |
| Hubspot | CRM |
| Instapage | Customer Landing Pages |
| Intercom | Support Tickets |
| Jira | Project Management |
| Mailchimp | Marketing Automation |
| Mixpanel | User Behaviour Tracking |
| New Relic | Monitor application performance |
| Reply.io | Sending emails |
| Retently | Collect feedback |
| Segment | User Behaviour Analysis |
| Sendgrid | Sending emails |
| Simplesat | Customer Support Rating |
| Slack | Alerts |
| Stripe | Payments and Billing |
| Upvoty | User Feedback |
| Zapier | Workflow Automation |
| Zendesk | Support Tickets |
We are based in the United States, but, unless we expressly agree otherwise (including through our Terms), we may host, transfer and process data, including Personal Information, in the United States and in other countries through Hevo and third parties that we use to operate and manage the Service, provided that we shall ensure that your Personal Information shall be protected in accordance with this Policy.
These countries may have data protection laws that are different from the laws of your country. Where we transfer Personal Information outside of your country, we will ensure that appropriate safeguards are in place to ensure that your Personal Information will remain protected in accordance with this Policy. For instance, in order to transfer Personal Information to third parties outside of European Economic Area, we may enter into Standard Contractual Clauses to ensure that such transfer is in compliance with the GDPR.
When you access or use the Site or the Service, or otherwise provide information to us, you are consenting to the processing and transfer of information in and to the United States and other countries which may have different privacy laws from your or their country of residence.
All your Personal Information is stored on the Amazon Web Services (AWS) cloud, which is restricted and highly secured with the necessary firewalls. A copy of the privacy practices applicable to storage of information on AWS’ servers is available at https://aws.amazon.com/privacy/.
We process the Personal Information collected in a lawful and proper manner and take appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of the Personal Information. While Hevo will use commercially reasonable efforts and in accordance with applicable law, to ensure the security of all Personal Information, we expressly disclaim any liability for any unauthorized access to or use of third-party servers and/or any and all personal and/or financial information stored therein if such access or use has been done despite Hevo employing all commercially reasonable efforts and in accordance with applicable law.
We take appropriate security measures to protect against unauthorized access to or unauthorized alteration, disclosure, or destruction of Personal Information. These include:
However, no internet, e-mail or other electronic transmission is ever fully secure or error free, so you should take care in deciding what information you send to us in this way. Hevo is not responsible for the functionality or security measures of any third party.
We process certain non-Personal Information, as provided below. In certain situations, such non-Personal Information may be used in conjunction with Personal Information.
Hevo gathers certain information automatically and stores it in log files. This information includes internet protocol addresses as well as browser, internet service provider, referring/exit pages, search terms, operating system, date/time stamp, and click stream data. Occasionally, we may connect Personal Information to information gathered in our log files, as necessary to improve the Service for individual customers. Otherwise, we generally use this information as we would any usage Data, to analyze trends, administer and maintain the Service, or track usage of various features within the Service.
A cookie is a small software file stored temporarily or placed on your computer’s hard drive. The main purpose of a cookie is to allow a web server to identify a user’s computer and web browser, and tailor web pages and/or login information to such user’s preferences.
Cookies help us promptly display the information needed to use the capabilities on the Service and other information which we consider to be of interest to visitors to the Site and users of the Service. By gathering and remembering information about website preferences through cookies, we can provide a better product experience. Cookies don’t give us access to your computers.
We utilize session cookies, which allow us to uniquely identify your browser while you are logged in and to process your online transactions. Session cookies disappear from your computer when the web browser is closed or computer is turned off. We also utilize persistent cookies to make it easier to log into and use the Service. Persistent cookies remain on computers after the web browser is closed or the computer is turned off.
We use or may use cookies to: (a) provide custom, personalized content and information; (b) monitor aggregate metrics such as total number of visitors, traffic, and demographic patterns; and (c) to provide advertising to your browser or device.
You are always free to disable our cookies at any time by using your browser options, however if you turn off cookies you may not be able to use certain features on the Site or in respect of the Services, for which, we shall not be responsible. Additionally, you may encounter "cookies" or other similar devices on certain pages of our Site or our Service that are placed by third parties.
If you require more specific information as to the nature of the cookies utilized in the Service for purposes of fulfilling these obligations, please contact us by email at privacy@hevodata.com.
When you use the Service, we may employ clear gifs (also known as web beacons) which are used to anonymously track the online usage patterns of our Users. In addition, we may also use clear gifs in HTML-based emails sent to our Users to track which emails are opened and which links are clicked by recipients. The information allows for more accurate reporting and improvement of the Service.
The Company may use log files, device identifiers and clear gifs information to: (a) remember information so that you will not have to re-enter it during your visit or the next time you visit the Site; (b) to provide and monitor the effectiveness of our Service; and (c) diagnose or fix technology problems; (d) help you efficiently access your information after you sign in.
If you reside in European Economic Area, you have the following rights in relation to the Personal Information:
If you reside in the United Kingdom, you have the rights listed in section 10.1. In addition, you can lodge a complaint with the Information Commissioner’s Office (“ICO”), if you are unhappy with the way in which your Personal Information is handled. You can reach out to the ICO at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF or on its website at https://ico.org.uk/ or call them at 0303 123 1113.
If you reside in California (United States), you may have the following rights in relation to Personal Information:
In order to exercise any of your rights in relation to your Personal Information, you may send us an email at privacy@hevodata.com detailing your request. Provided that, in such circumstances, the Services we provide you may be adversely affected as a result of such correction or deletion, and we shall not be responsible for such adverse effects or disruptions.
We will aim to respond to all legitimate requests within one month of receipt of your request. Occasionally it may take us longer than one month if your request is particularly complex or if you have made a number of requests. In this case, we will notify you and keep you updated.
We may need to request specific information from you to help us confirm your identity and to allow you to exercise any of your rights. This is a security measure to ensure the safety of your Personal Information. We may also contact you to ask you for further information in relation to your request to speed up our response.
You may decline to submit any Personal Information through the Site or withdraw your consent under this Policy at any time, in which case we may not be able to provide Services to you.
If you would like to opt-out of getting communications (like marketing communications) from Hevo please contact us at privacy@hevodata.com or follow the unsubscribe instructions included in such communications.
Requests to opt-out of transfers to our third-party vendors may also be submitted, but limitations on data sharing may make it difficult or impossible to provide the Service after an opt-out.
If you have any concerns about the use of your Personal Information, you can write to our Data Protection Officer (Sourabh Agarwal) by email at privacy@hevodata.com detailing your concern. You can also contact your local data protection authority if you have any concerns regarding your rights under local law.
Hevo will retain Personal Information we collect directly from Users for as long as needed to provide the Service to our customers, subject to our compliance with this Policy.
We may further retain and use this Personal Information as necessary only to comply with our legal obligations, maintain accurate accounting, financial and other operational records, resolve disputes, and enforce our agreements. We have established internal policies for the deletion of data from customer accounts following termination of a customer’s subscription to the Service.
It is important that the Personal Information we hold about you is accurate and current. Please keep us informed if your Personal Information changes during your relationship with us.
In the event that you would like to access, correct, delete or object to any inaccuracies of the Personal Information provided by you, please follow the mechanism provided in Section 10.4 to exercise such rights.
In order to facilitate the exchange of data between third-party applications, we may need to store certain information such as your login identification details and password which you provide to us (“App Credentials”) that helps us access these third-party application accounts on your behalf to provide the Service. We store your App Credentials in an encrypted form.
When we access these third-party applications on your behalf, the third-party application provides us with access to certain data. We will use, store and disclose this data in accordance with this Policy in order to provide the Services.
Hevo shall have no liability or responsibility for the privacy practices or other actions of any third-party applications for which you provide us with App Credentials. We suggest that you review the privacy policies of the third parties prior to using the third-party platforms.
The Site contains links to websites and applications other than the Site, including websites and applications operated by affiliates and other third parties. Please be aware that we do not determine and we are not responsible for the privacy practices or content of websites and applications operated by third parties. Your browsing and interaction on any third-party website or service, including those that have a link on our Site, are subject to that third party’s own rules and policies. We encourage you to be aware when you leave the Site, and read the privacy statements of such third-party websites and applications. Hevo does not endorse and is not responsible for the practices of third parties or their websites or applications. If you are using a third-party website or service and you allow such a third-party access to your Personal Information, you do so at your own risk.
We do not track or respond to browser “Do Not Track” Requests. A user will have to disable cookies in order that no information is tracked.
The Site or Service offers publicly-accessible blogs or community forums. You should be aware that any information provided in these areas may be read, collected, and used by others who access them. If you elect to post something in a public area of our Site or Service, any Personal Information or content that you voluntarily disclose for posting to the Site or Service, becomes available to the public, as controlled by any applicable privacy settings. If you remove information that you posted to the Site or Service, copies may remain viewable in cached and archived pages of the Service, or if other Users have copied or saved that information. To request removal of your Personal Information from our blog or community forum, contact us at privacy@hevodata.com. In some cases, we may not be able to remove your Personal Information.
From time to time, we may post customer testimonials, reviews, case studies etc. on the Site which may contain Personal Information. We obtain the Users’ consent to post their names along with their testimonials.
Hevo does not knowingly collect any Personal Information from children under the age of 16. If you are under the age of 16, please do not submit any Personal Information through our Site or Service. We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce our Policy by instructing their children never to provide Personal Information on our Site or Service without their permission. If you have reason to believe that a child under the age of 13 has provided Personal Information to us through our Site or Service, please contact us, and we will use commercially reasonable efforts to delete that information from our databases.
We may, in our sole discretion, modify or update this Policy from time to time. If we make any material changes to this Policy, we will notify you by email or by posting a prominent notice on the Site prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices. Your continued use of the Service constitutes your agreement to be bound by such changes to this Policy. Your only remedy, if you do not accept the terms of this Policy, is to discontinue use of the Service. Please refer Legal Resources Page for archives of existing policies.
Hevo may assign or transfer this Policy, and your Personal Information, to any person or entity that acquires all or substantially all of the business, stock or assets of, or is merged with Hevo. We may also transfer or assign such information in the course of corporate divestitures, mergers, acquisitions, bankruptcies, dissolutions or similar transactions or proceedings, provided that the recipient of such information will continue to be bound by the terms of this Policy.