Privacy Policy (Customers)

Effective date of the policy: 8th March 2022

Your privacy is of paramount importance to us. We, Hevo Data Inc. (“Hevo”, “us” or “we”) are a California based corporation, engaged in the business of providing a SaaS data integration platform, tools, and related services to our customers (the “Service(s)”).

This Privacy Policy ("Policy") explains how we collect, use, disclose, protect and otherwise process our customers’ representatives’ ("you" or "your" or "User") Personal Information (as defined below) that we may collect on the website, www.hevodata.com; through our SaaS platform, or our Slack app when you register for the Services or make any changes to your registration details (the "Site"). We also provide information regarding how you can access and update your Personal Information and make certain choices about how your Personal Information is used by us. We also provide information on the non-Personal Information that we may collect such as cookies and log files, and our practices regarding such information.

This Policy is applicable when you subscribe to or register for our Services on the Site or are an already existing subscriber.

Please read this Policy carefully to understand our views and practices regarding your Personal Information and how we will treat it. If you reside in California, then this Policy is supplemented by our California Privacy Notice, which provides a privacy notice in accordance with the requirements of CCPA (defined below).

In accordance with applicable laws and regulations, including the European Union General Data Protection Regulation (EC Regulation 2016/679) (“GDPR”), Hevo controls, owns and directs the use of the Personal Information collected on the Site and, in this regard, Hevo is the data controller.

Contact Us

For any queries regarding this Policy and the collection and use of Personal Information collected or processed under this Policy, you can write to our Data Protection Officer (Sourabh Agarwal) by e-mail atprivacy@hevodata.com or by post at Hevo Data, Inc, 1390 Market St, Suite 200, San Francisco, CA 94102.

1. What do we mean by Personal Information (“Personal Information”)?

In this Policy, Personal Information means information or an information set that identifies or could be used to identify an individual. Hevo collects Personal Information as set out in Section 2 and 3 of this Policy from Users.

Personal Information does not include “Usage Data” which we define as encoded or anonymized information or aggregated data we collect about a group or category of services, features or Users which does not contain personally identifying information. Usage Data helps us understand trends in usage of the Service so that we can better consider new features or otherwise tailor the Service. In addition to collecting and using Usage Data ourselves, we may share Usage Data with third parties, including our, partners and service providers, for various purposes, including to help us better understand our customers’ needs and improve the Service as well as for advertising and marketing purposes. Such Usage Data is always stored in encrypted form, and in no event can any person who has access to the Usage Data be able to use or modify the Usage Data in a way such that it may become Personal Information, or can be used to identify a person.

2. What information do we process ?

We process the following types of information to provide you the Services.

Sr. No Category of information Description
1 Customer Identification Data Customer Identification Data means the Personal Information provided by you, on our request, at the time of signing up for the Services, whether through the website www.hevodata.com or through an agreement.
2 Customer Personal Data

Customer Personal Data means Personal Information processed or stored by or on your behalf during your use of the Services. Customer Personal Data excludes any Customer Identification Data, which is primarily processed or stored by us.

This Policy does not apply to Customer Data. For more information on how we process the Customer Data, please refer to the Data Processing Addendum, which details our role as the data processor and your rights as the data controller during your use of the Service.

3 Payments Data When you register for the Service on the Site, you will be directed to our third-party payment gateway services provider, Stripe, which will collect certain credit card or other billing information to enable you to make the payment for the Service. Please read the privacy policy of such third-party service provider. We receive your billing name, address and other transaction details from the payment gateway service provider.
4 Settings and configurations Data We record your configuration and settings-related data. This includes information relating to your choices and preferences of using our Site.
5 Communications Data We keep records of your communications and interactions with us, through email, chat messages, telephone or other modes. This includes instances when you provide feedback or seek technical support from us.
6 App Credentials In order to facilitate the exchange of data between third-party applications, we may need to store certain information such as your login identification details and password which you provide to us that helps us access these third-party application accounts on your behalf to provide the Service. Please refer to Section 13.1 for more details.

3. Legal basis for Processing of Personal Information

The legal basis for the collection and processing of any Personal Information collected and processed by us is: (i) for the performance of the Services in accordance with the contract executed with you or in accordance with our Terms of Use; or (ii) where it is in our legitimate interests to do so and such legitimate interest is not overridden by your rights, (as specified in Section 10 below, for example to do internal research on our Users' usage, including, without limitation, demographics, interests, patterns, and behaviour to better understand, protect, and serve our Users, while improving our Site and Services). This information is compiled and analyzed on an aggregated basis.

4. Collection of Personal Information

We collect your Personal Information in the following three modes:

4.1 Information You Provide to us

When you register for the Service on the Site, we ask for certain Personal Information comprising ‘customer identification data’ which includes, but is not limited to:

  1. your name,
  2. e-mail address,
  3. phone number,
  4. certain related information like your company name and job role, if applicable, and website name; and
  5. if any new team member is added to the customer’s account, Personal Information of such new team member may also be requested.

Additionally, when you register for the Service on the Site, you will be directed to our third-party payment gateway services provider, Stripe, which will collect certain credit card or other billing information to enable you to make the payment for the Service. Please read the privacy policy of such third-party service provider.

4.2 Information We May Receive from Third Parties

When you visit our Site, we may receive Personal Information about you from third parties through authorization that you may have provided to the third party for sharing such information with us. For example, if you access our Site through a third-party connection or log-in or connect an application to Hevo, that third party you connected with may pass certain information about your use of its service to Hevo.

This information could include, but is not limited to, the user ID associated with your account, an access token necessary to access that service, any information that you have permitted the third party to share with us, and any information you have made public in connection with that third-party service. You should always review, and if necessary, adjust your privacy settings on third party websites and services before linking or connecting them to the Service.

4.3 Information we generate while providing you Services:

We use third party analytics tools to help us measure traffic and usage trends for the Service. These tools collect information sent by your browser while you are on the Site, that assists us in improving the Service.

Note that we will never email you to ask for your Hevo account information; if you receive such an email, please forward it to privacy@hevodata.com. Hevo may use your cell phone number to call or text you in order to provide the Service, if you have provided consent to Hevo for such communication. You may opt-out of this communication at any time by writing in to privacy@hevodata.com.

5. Processing of Personal Information

We rely on our underlying contract (whether through the Terms of Use, or the agreement entered into between you and Hevo) for the processing of Personal Information for the following purposes:

  1. Provision of Services: We may use the Personal Information to operate, and personalize the Service for you. We may also use the Personal Information for billing identification and authentication, to contact and communicate with you about the Service and your use of the Service, and to support your use of the Service. Where it is in our legitimate interests to do so, we use the Personal Information collected by us for various purposes to enable us to serve you better.
  2. Marketing Communication: We may use the Personal Information to send you marketing material if you register for our Service on the Site, or sign up on the Site to receive marketing communication(subject to your opt-out option).
  3. Site and Service Improvement: We may use Personal Information to improve upon your use of the Service, and to generally improve the content and functionality of the Service.
  4. Fraud Prevention and Troubleshooting: Additionally, we may use the Personal Information we collect for identification and authentication and fraud prevention, troubleshooting problems on the Site and Service.
  5. Analytics Operations: We may collect and use analytics information together with your Personal Information to build a broader profile of our individual Users so that we can serve you better and provide custom, personalized content and information.
  6. Legal Obligations: In some cases, we may need to process the Personal Information about you, where we need to comply with a legal requirement.

While collecting Personal Information, we indicate fields that are mandatory and those that are optional. You may decide whether or not to provide such optional information to us. However, non-provision of mandatory information may result in us being unable to provide the Services to you. Further, non-provision of specific or accurate Personal Information may result in a disruption in your usage of our Site or the Services, for which we will not be responsible.

6. Disclosure of Personal Information

When you access or use the Site or the Service, or otherwise provide information to us, you are consenting to the sharing of such information with Hevo’s related entities, third-party service providers and other entities. We may disclose your Personal Information in the following instances:

  1. For provision of the Service:

    We may disclose Personal Information to our third-party service providers (such as its credit card processors and hosting partners) to provide the necessary hardware, software, networking, storage, and other services we use to operate the Service and maintain a high-quality user experience. We do not permit our service providers to use the Personal Information we share for their marketing purposes.

  2. For maintenance and improvement of the Site and Services:

    We may also disclose Personal Information with our third-party service providers for purposes of improvement and maintenance of our Site and Services, and in order to customize Users’ experiences.

  3. For fulfilling our legal obligations:

    We may disclose Personal Information to respond to subpoenas, court orders, on legal process, or to establish or exercise our legal rights or defend against legal claims, provided that we will intimate you, if not prohibited under law, as soon as reasonably possible if your Personal Information is shared for such purpose.

  4. For fraud prevention and troubleshooting:

    We may also share such information with the relevant third party if we believe it is necessary in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations or our Terms of Service.

  5. To members of the Hevo family:

    We may also share information, including Personal Information with any member of the Hevo family which includes any entity that controls, is controlled by, or under common control with Hevo, in order to provide you with the Service.

  6. Third Party Applications:

    The following table enlists the third-party applications that we may share your information with and the purpose for which such information is shared:

    Third Party Application Purpose
    Zapier Workflow Automation
    Reply.io Sending emails
    Hubspot CRM
    Calendly Set up meetings
    Retently Collect feedback
    Front App Sending emails
    Clearbit Data enrichment
    Gsuite/Google Drive Emails, document creation & storage
    Upvoty User Feedback
    Zendesk Support Tickets
    Intercom Support Tickets
    Fullstory User Behaviour Tracking
    Instapage Customer Landing Pages
    Mailchimp Marketing Automation
    Mixpanel User Behaviour Tracking
    Stripe Payments and Billing
    Slack Alerts

7 Hosting and Data Transfer

We are based in the United States, but, unless we expressly agree otherwise (including through our Terms), we may host, transfer and process data, including Personal Information, in the United States and in other countries through Hevo and third parties that we use to operate and manage the Service, provided that we shall ensure that your Personal Information shall be protected in accordance with this Policy.

These countries may have data protection laws that are different from the laws of your country. Where we transfer Personal Information outside of your country, we will ensure that appropriate safeguards are in place to ensure that your Personal Information will remain protected in accordance with this Policy. For instance, in order to transfer Personal Information to third parties outside of European Economic Area, we may enter into Standard Contractual Clauses to ensure that such transfer is in compliance with the GDPR.

When you access or use the Site or the Service, or otherwise provide information to us, you are consenting to the processing and transfer of information in and to the United States and other countries which may have different privacy laws from your or their country of residence.

8. Storage and Security of Personal Information

All your Personal Information is stored on the Amazon Web Services (AWS) cloud, which is restricted and highly secured with the necessary firewalls. A copy of the privacy practices applicable to storage of information on AWS’ servers is available at https://aws.amazon.com/privacy/.

We process the Personal Information collected in a lawful and proper manner and take appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of the Personal Information. While Hevo will use commercially reasonable efforts and in accordance with applicable law, to ensure the security of all Personal Information, we expressly disclaim any liability for any unauthorized access to or use of third-party servers and/or any and all personal and/or financial information stored therein if such access or use has been done despite Hevo employing all commercially reasonable efforts and in accordance with applicable law.

We take appropriate security measures to protect against unauthorized access to or unauthorized alteration, disclosure, or destruction of Personal Information. These include:

However, no internet, e-mail or other electronic transmission is ever fully secure or error free, so you should take care in deciding what information you send to us in this way. Hevo is not responsible for the functionality or security measures of any third party.

9. Non-Personal Information that we collect: Log Files, Cookies and Clear gifs

We process certain non-Personal Information, as provided below. In certain situations, such non-Personal Information may be used in conjunction with Personal Information.

9.1 Log Files

Hevo gathers certain information automatically and stores it in log files. This information includes internet protocol addresses as well as browser, internet service provider, referring/exit pages, search terms, operating system, date/time stamp, and click stream data. Occasionally, we may connect Personal Information to information gathered in our log files, as necessary to improve the Service for individual customers. Otherwise, we generally use this information as we would any usage Data, to analyze trends, administer and maintain the Service, or track usage of various features within the Service.

9.2 Cookies

A cookie is a small software file stored temporarily or placed on your computer’s hard drive. The main purpose of a cookie is to allow a web server to identify a user’s computer and web browser, and tailor web pages and/or login information to such user’s preferences.

Cookies help us promptly display the information needed to use the capabilities on the Service and other information which we consider to be of interest to visitors to the Site and users of the Service. By gathering and remembering information about website preferences through cookies, we can provide a better product experience. Cookies don’t give us access to your computers.

We utilize session cookies, which allow us to uniquely identify your browser while you are logged in and to process your online transactions. Session cookies disappear from your computer when the web browser is closed or computer is turned off. We also utilize persistent cookies to make it easier to log into and use the Service. Persistent cookies remain on computers after the web browser is closed or the computer is turned off.

We use or may use cookies to: (a) provide custom, personalized content and information; (b) monitor aggregate metrics such as total number of visitors, traffic, and demographic patterns; and (c) to provide advertising to your browser or device.

You are always free to disable our cookies at any time by using your browser options, however if you turn off cookies you may not be able to use certain features on the Site or in respect of the Services, for which, we shall not be responsible. Additionally, you may encounter "cookies" or other similar devices on certain pages of our Site or our Service that are placed by third parties.

If you require more specific information as to the nature of the cookies utilized in the Service for purposes of fulfilling these obligations, please contact us by email at privacy@hevodata.com.

9.3 Clear Gifs/Web Beacons Information

When you use the Service, we may employ clear gifs (also known as web beacons) which are used to anonymously track the online usage patterns of our Users. In addition, we may also use clear gifs in HTML-based emails sent to our Users to track which emails are opened and which links are clicked by recipients. The information allows for more accurate reporting and improvement of the Service.

The Company may use log files, device identifiers and clear gifs information to: (a) remember information so that you will not have to re-enter it during your visit or the next time you visit the Site; (b) to provide and monitor the effectiveness of our Service; and (c) diagnose or fix technology problems; (d) help you efficiently access your information after you sign in.

10 Individual Rights:

10.1 European Union Requirements:

If you reside in European Economic Area, you have the following rights in relation to the Personal Information:

  1. you will, at all times, have access to your Personal Information;
  2. be informed about the Personal Information we collect from you and use;
  3. obtain confirmation from us that Your Personal Information is being collected and used by us;
  4. can ask us to rectify information, which you think is inaccurate;
  5. erasure, or the right to be forgotten, which means you can request the deletion or removal of any Personal Information we hold about you at any time;
  6. block or suppress us from collecting and using your Personal Information, which means we can continue to store your Personal Information but we cannot further collect or use it in any way;
  7. obtain and reuse any Personal Information we hold about you for your own purposes across different services, which allows you to move, copy or transfer your Personal Information easily from Hevo to another place notified by you to us in a safe and secure way without hindrance to the usability of your Personal Information; and
  8. object or restrict the processing of your Personal Information.

10.2 United Kingdom Requirements:

If you reside in the United Kingdom, you have the rights listed in section 10.1. In addition, you can lodge a complaint with the Information Commissioner’s Office (“ICO”), if you are unhappy with the way in which your Personal Information is handled. You can reach out to the ICO at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF or on its website at https://ico.org.uk/ or call them at 0303 123 1113.

10.3 California Requirements:

If you reside in California (United States), you may have the following rights in relation to Personal Information:

  1. Right to Know: You have the right to ask us to disclose the Personal Information we have collected, used, shared or sold about you.
  2. Right to Delete: You have the right to ask us to delete your Personal Information in certain circumstances.
  3. Right to Opt-out: You have the right to ask us to stop selling your Personal Information. But we don’t sell your Personal Information.
  4. Right to Non-Discrimination: We will not discriminate against you in the event you exercise your rights. However, in certain circumstances, exercising your rights may affect our ability to provide you the Services.

10.4 Exercise of Rights:

In order to exercise any of your rights in relation to your Personal Information, you may send us an email at privacy@hevodata.com detailing your request. Provided that, in such circumstances, the Services we provide you may be adversely affected as a result of such correction or deletion, and we shall not be responsible for such adverse effects or disruptions.

We will aim to respond to all legitimate requests within one month of receipt of your request. Occasionally it may take us longer than one month if your request is particularly complex or if you have made a number of requests. In this case, we will notify you and keep you updated.

We may need to request specific information from you to help us confirm your identity and to allow you to exercise any of your rights. This is a security measure to ensure the safety of your Personal Information. We may also contact you to ask you for further information in relation to your request to speed up our response.

10.5 Withdrawal of Consent:

You may decline to submit any Personal Information through the Site or withdraw your consent under this Policy at any time, in which case we may not be able to provide Services to you.

If you would like to opt-out of getting communications from Hevo please contact us at privacy@hevodata.com or follow the unsubscribe instructions included in such communications.

Requests to opt-out of transfers to our third-party vendors may also be submitted, but limitations on data sharing may make it difficult or impossible to provide the Service after an opt-out.

10.6 Concerns:

If you have any concerns about the use of your Personal Information, you can write to our Data Protection Officer (Sourabh Agarwal) by email at privacy@hevodata.com detailing your concern. You can also contact your local data protection authority if you have any concerns regarding your rights under local law.

11. Data Retention

Hevo will retain Personal Information we collect directly from Users for as long as needed to provide the Service to our customers, subject to our compliance with this Policy.

We may further retain and use this Personal Information as necessary only to comply with our legal obligations, maintain accurate accounting, financial and other operational records, resolve disputes, and enforce our agreements. We have established internal policies for the deletion of data from customer accounts following termination of a customer’s subscription to the Service.

12. Correcting and Updating of your Information and exercise of rights:

It is important that the Personal Information we hold about you is accurate and current. Please keep us informed if your Personal Information changes during your relationship with us.

In the event that you would like to access, correct, delete or object to any inaccuracies of the Personal Information provided by you, please follow the mechanism provided in Section 10.4 to exercise such rights.

13. Other Information about our Privacy Practices

13.1 Data Integration:

In order to facilitate the exchange of data between third-party applications, we may need to store certain information such as your login identification details and password which you provide to us (“App Credentials”) that helps us access these third-party application accounts on your behalf to provide the Service. We store your App Credentials in an encrypted form.

When we access these third-party applications on your behalf, the third-party application provides us with access to certain data. We will use, store and disclose this data in accordance with this Policy in order to provide the Services.

Hevo shall have no liability or responsibility for the privacy practices or other actions of any third-party applications for which you provide us with App Credentials. We suggest that you review the privacy policies of the third parties prior to using the third-party platforms.

13.2 Links to Other Websites

The Site contains links to websites and applications other than the Site, including websites and applications operated by affiliates and other third parties. Please be aware that we do not determine and we are not responsible for the privacy practices or content of websites and applications operated by third parties. Your browsing and interaction on any third-party website or service, including those that have a link on our Site, are subject to that third party’s own rules and policies. We encourage you to be aware when you leave the Site, and read the privacy statements of such third-party websites and applications. Hevo does not endorse and is not responsible for the practices of third parties or their websites or applications. If you are using a third-party website or service and you allow such a third-party access to your Personal Information, you do so at your own risk.

13.3 Do Not Track

We do not track or respond to browser “Do Not Track” Requests. A user will have to disable cookies in order that no information is tracked.

13.4 Public Forums

The Site or Service offers publicly-accessible blogs or community forums. You should be aware that any information provided in these areas may be read, collected, and used by others who access them. If you elect to post something in a public area of our Site or Service, any Personal Information or content that you voluntarily disclose for posting to the Site or Service, becomes available to the public, as controlled by any applicable privacy settings. If you remove information that you posted to the Site or Service, copies may remain viewable in cached and archived pages of the Service, or if other Users have copied or saved that information. To request removal of your Personal Information from our blog or community forum, contact us at privacy@hevodata.com. In some cases, we may not be able to remove your Personal Information.

13.5 Customer Testimonials/ Comments/ Reviews

From time to time, we may post customer testimonials, reviews, case studies etc. on the Site which may contain Personal Information. We obtain the Users’ consent to post their names along with their testimonials.

13.6 Children's Personal Information

Hevo does not knowingly collect any Personal Information from children under the age of 16. If you are under the age of 16, please do not submit any Personal Information through our Site or Service. We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce our Policy by instructing their children never to provide Personal Information on our Site or Service without their permission. If you have reason to believe that a child under the age of 13 has provided Personal Information to us through our Site or Service, please contact us, and we will use commercially reasonable efforts to delete that information from our databases.

14. Changes to this Policy

We may, in our sole discretion, modify or update this Policy from time to time. If we make any material changes to this Policy, we will notify you by email or by posting a prominent notice on the Site prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices. Your continued use of the Service constitutes your agreement to be bound by such changes to this Policy. Your only remedy, if you do not accept the terms of this Policy, is to discontinue use of the Service.

15. Business Transactions

Hevo may assign or transfer this Policy, and your Personal Information, to any person or entity that acquires all or substantially all of the business, stock or assets of, or is merged with Hevo. We may also transfer or assign such information in the course of corporate divestitures, mergers, acquisitions, bankruptcies, dissolutions or similar transactions or proceedings, provided that the recipient of such information will continue to be bound by the terms of this Policy.