Privacy policy

This policy explains what personal data Heedwire processes, why, and the choices you have. Heedwire is provided byDigitona AB (company registration number 559146-4382, Ringvägen 50 B, 118 67 Stockholm, Sweden), which is responsible for the personal data described here.

What we collect

• Account data: your name, email address and, if you sign in with Google, your Google profile name and picture.
• Workspace data: the competitors and pages you track, your company description, and how you use the product (for example which changes you read or archive).
• Competitors' emails: when your team gives a competitor its own Heedwire address, the newsletters and emails sent to it (sender, subject, content) are kept with that competitor until you remove it or the workspace. Heedwire never opens their links or loads their images unless someone on your team chooses to.
• Forwarded emails (field notes): when someone on your team forwards an email to the workspace's field-notes address, we read it to file a short note on the competitor it mentions, leaving out signatures, contact details and the quoted thread where we can. Forwarded mail can hold other people's personal data (a prospect's name or phone number): we keep the note, not the email. The message itself, its sender and subject are deleted as soon as the note is filed or discarded, and in any case 30 days after it arrived. We check the sender's address against your workspace's members to say who reported it.
• Billing data: paid plans are sold through Link, Stripe's checkout. Card or bank details, billing address and tax details are entered with Stripe and never reach us. From Stripe we keep only your workspace's Stripe customer and subscription IDs, and the plan, its status and when the current period ends.
• Product analytics: which pages of the product you visit and which actions you take (for example opening a change, marking it useful, or starting a subscription), linked to an internal account ID and your workspace's plan — not to your name or email. We use this only to understand and improve how Heedwire is used. It is processed by PostHog in its EU cloud (Germany), when switched on.
• Website analytics on heedwire.com: anonymous page views and clicks on its calls to action, sent without cookies under an ID that lasts one page (PostHog); nothing is sent if your browser sends Global Privacy Control or Do Not Track. Only if you allow analytics in the site's cookie banner, Google Analytics also records the pages you read, how you arrived (referring site and campaign tags), your device and browser type, and your approximate location derived from your IP address, under the random ID in its cookies. Google Analytics data is kept for 14 months (the retention we have set), then deleted. See Cookies.
• Digest recipients: when a workspace sends a stakeholder digest, the email addresses it adds (often colleagues without an account), whether each one was sent to, and whether the person unsubscribed. We use them only to send that digest. The emails carry no tracking; the digest's web page counts visits per day without knowing who. The workspace must be allowed to email the people it adds.

What we don't do

• We don't sell personal data or use it for advertising.
• We don't record your sessions or capture what you type. The app sets no analytics or advertising cookies; the website sets Google Analytics cookies only if you allow them.
• On the app's public pages, shared links and unsubscribe pages we count anonymous page visits only, without links or tokens.
• Shared links and webhooks never include your personal data.

Cookies

The app sets only the cookies signing in and your language need. The website (heedwire.com) sets one cookie to remember your choice, and Google Analytics cookies only if you allow analytics in its cookie banner. Until you choose, nothing on the website is loaded from Google or sent to it. Analytics and marketing cookies are used only with your consent (Swedish Electronic Communications Act, chapter 9 section 28; GDPR article 6(1)(a)).

The website's banner offers two optional categories, neither on unless you turn it on: analytics (Google Analytics) and marketing (letting Google use your visit to measure and personalise ads; we run no ads today, so this sets no cookies). You can change or withdraw your choice at any time with “Cookie settings” at the foot of every page of heedwire.com. Withdrawing deletes the Google Analytics cookies. If your browser sends Global Privacy Control or Do Not Track, the website treats it as “Reject all” until you choose otherwise. We ask again after 12 months, or sooner if what a category covers changes.

Google Analytics is provided by Google Ireland Limited, which may transfer data to Google LLC in the United States under the EU–US Data Privacy Framework. Google doesn't log or store IP addresses for Google Analytics; it uses them only to derive an approximate location.

Payments

When you buy a plan, Stripe's affiliate Sold through Link, LLC (“Link”) sells it to you as the seller of record, and Stripe processes the payment. For that purchase Stripe and Link collect and use your payment, billing and tax details for their own purposes as well (such as payments, tax, fraud prevention and their legal obligations), under their own privacy policy. Link also emails you receipts, invoices and payment notices, and you can manage your purchase and ask Link to delete its data on link.com. Deleting that data there also cancels your subscription.

Service providers

We use a small set of providers to run Heedwire: hosting and the database in Sweden, network protection and encrypted backups in the EU, email delivery, AI analysis, page fetching, payments and, when it is switched on, product analytics; on the website, Google Analytics for visitors who allow it. The list of subprocessors names each one, what it does and where it processes data.

Your rights

You can download a copy of your personal data at any time from Settings → Profile → Download my data; export files are kept for 7 days and then deleted. To access, correct or delete your data otherwise, write to privacy@heedwire.com. For the payment data Stripe and Link hold, use the contact details in their privacy policy; we can't change or delete it for you.