Draft for legal review. This text must be reviewed by counsel before Heedwire launches publicly.

Subprocessors

Last updated October 28, 2026

These are the companies that process data for Heedwire, what each one does and where. How we handle personal data is in the privacy policy.

Providers we use

ProviderWhat it does
UpCloudUpCloud LtdServers and the database that hold accounts and workspace data.Where: Sweden (Stockholm)
CloudflareCloudflare, Inc.DNS, network protection and the encrypted tunnel to our servers; the bot check on sign-in and the demo form; hosting of heedwire.com; storage of encrypted database backups and of screenshots of competitors' pages (R2); receiving the emails competitors send to your workspace's addresses, and those your team forwards as field notes, and passing them to our servers (Email Routing; not stored there).Where: Global network; backups and screenshots stored in the EU
Amazon Web ServicesSending email (Amazon SES): sign-in links, invitations, alerts, digests and briefs.Where: Sweden (Stockholm)
ResendResend, Inc.Backup email delivery, used only if we switch away from Amazon SES.Where: EU (Ireland)
AnthropicAnthropic, PBCAI analysis: write-ups of changes, briefs, recommendations and answers in Ask. It receives public page content, your company's name, website and description, and the questions you ask, never your name or email address. For field notes your team forwards by email, it receives the email's subject and text (which may name the people in it) to write the note without their personal details.Where: United States
scrape.doPackend, LLCReading public pages from sites that turn our crawler away, and taking screenshots of them. It receives only the addresses of public pages, nothing about you.Where: United States
Stripe and LinkStripe, Inc. and its affiliates, including Sold through Link, LLCPayments for paid plans. Link is the seller of record: it charges you, handles VAT and sales tax, fraud checks and disputes, and sends receipts and invoices. Stripe and Link also use this data under their own privacy policy.Where: EU and United States
PostHogPostHog, Inc.Product analytics, when switched on. In the app: the pages members open and the actions they take, linked to an internal account ID and the workspace's plan, never a name or email address. On heedwire.com: anonymous page views and call-to-action clicks, without cookies, under an ID that lasts one page. Retention: to be confirmed (PostHog project setting).Where: EU (Germany, PostHog EU Cloud)
MigaduMigadu-Mail GmbHOur mailboxes: the messages you send to an @heedwire.com address, such as support or privacy requests.Where: France (company in Switzerland)

On our website

Used on heedwire.com only, for visitors who allow it in the cookie banner; never in the app. The cookies are listed in the privacy policy.

ProviderWhat it does
GoogleGoogle Ireland Limited, with Google LLCGoogle Analytics 4 and Google Tag Manager on heedwire.com, loaded only after a visitor allows analytics or marketing cookies: the pages read, how the visitor arrived, device and browser type and an approximate location (from the IP address, which isn't stored), under a random ID in a cookie. Kept for 14 months. Nothing from the app.Where: EU and United States (EU–US Data Privacy Framework)

Services you choose to connect

These receive data only when you or an admin turn them on, and work under your own agreement with them.

ProviderWhat it does
GoogleSigning in with Google, if you choose it: Google confirms who you are and shares your name, email address and picture.Terms: Google's own terms
SlackChanges posted to the channel you pick, and what your team does with their buttons, once an admin adds the Slack app.Terms: Your agreement with Slack
HubSpotCompetitors on deals and the deal-record card, once an admin connects HubSpot.Terms: Your agreement with HubSpot

Changes

When we add or replace a provider, we update this page and its date. Questions: privacy@heedwire.com.