# Privacy

What Heard of You collects, where it lives (an inbox and a spreadsheet), no tracking cookies, no selling data, and how to ask for deletion.

By Dasha. Updated October 31 2026. https://heardofyou.io/privacy

Plain-English draft. Have a lawyer review before relying on it.

We collect as little as we can, keep it in boring places, never sell it, and delete it when you ask. Here is the full version.

## What we collect

| What | When | Why |
|---|---|---|
| Your name and email address | When you request a check, audit or project, or write to us | To send you your results, invoices and replies |
| Your product name and website | Same | To run the check |
| What you sell, who buys it, your competitors, your price range, your buyer questions | If you give them to us | To write better questions |
| Which page you viewed, the page you came from, any campaign tags in the link, your country, and whether you are on a phone or a computer | Every page view | To see which pages help and whether AI assistants and search engines send people here. We do not record your IP address, and nothing here identifies you |
| Which automated crawlers (for example OpenAI's, Anthropic's or Perplexity's) fetched which pages, and when | Every crawler visit | To check that AI assistants can read the site. Crawler visits are not about any person |
| The AI answers we log about your product | Every check and re-check | They are the report. They include competitor names and cited sources |
| A list of your real customers' names and emails | Only if you choose the review deliverable in a project | To send, once, the review request you approved |
| Payment details | When you pay an invoice | Handled by the payment provider named on the invoice. We do not see or store full card numbers |
| How you heard about us | If you tell us | Because "an AI assistant suggested you" is something we want to know |

We do not collect anything from your visitors or customers through your website. We do not ask for passwords or logins to your accounts.

## What we do not do

- **No tracking cookies.** This website sets no cookies at all. Our analytics are our own and cookieless. Each page view is recorded with the page, the page you came from, any campaign tags, your country and your device type, and nothing else. Your browser keeps a random tab id in its own memory while the tab is open, so we can count visitors rather than clicks. It is never written to a cookie, never shared, and disappears when you close the tab. We do not record IP addresses, and we cannot recognise you on a return visit.
- **No selling or renting data.** Ever.
- **No marketing email at launch.** You get your results, a receipt if you paid, and replies to what you asked. Nothing else unless you ask for it. If we start a newsletter, it will be opt-in, with an unsubscribe link and a postal address, as the law requires.
- **No use of your customer list for anything but the one request you approved.** We delete it when the project ends.

## Where your data lives

At launch, in three places:

1. **Our email inbox** at hello@heardofyou.io, on Google Workspace.
2. **A spreadsheet** of checks, answers and re-checks, on Google Workspace.
3. **A small database** hosted by Supabase (US East). It holds the requests sent through the website forms, the cookieless page-view counts described above, and the crawler log.

A small serverless function hosted on Vercel delivers requests from the website forms to the inbox. The same function saves the request to the database, so nothing is lost if an email fails.

## Who else sees it

To run a check, we type your product name, website and buyer questions into ChatGPT (OpenAI), Gemini (Google), Claude (Anthropic) and Perplexity. Those companies receive the questions under their own terms. We do not give them your email or your customer list.

Payments are processed by the provider named on your invoice (for example Stripe or your bank). Google, Vercel and Supabase host the inbox, spreadsheet, forms and database. We use no advertising networks and no data brokers.

## How long we keep it

- Free check data: until you ask us to delete it, or 24 months after your last contact, whichever is first.
- Audit and project data, including saved answers: 24 months after the project ends, so we can answer re-checks and claims under the guarantee. Then deleted.
- Customer lists for review requests: deleted when the project ends.
- Invoices and payment records: 7 years, because US tax rules require it.
- Page-view and crawler records: 13 months in detail, then only monthly totals.

## Your choices

Email hello@heardofyou.io and ask, and we will:

- send you a copy of everything we hold about you;
- correct anything that is wrong;
- delete everything except the invoice records we are required to keep.

We will confirm within 2 working days and complete the request within 30 days. If you are in a place with specific privacy rights (for example the EU, UK or California), you have at least these rights. We honour them for everyone.

## Children

This service is for businesses and is not aimed at anyone under 18.

## Changes

If this page changes, the date at the top changes with it. If a change matters to you, for example if we ever add cookies or start a newsletter, we will say so plainly here.

## Contact

hello@heardofyou.io. Dasha reads it herself.
