Privacy Policy

Created on 10 December, 2025 • 31 views • 3 minutes read

Privacy Policy - HeyOS & HEY Suite Products

(HeyOS, HeyProof, HeyFileDrop, HeyMetrica, HeyBionic, HeyChecker, HeyToolKit, and all HEY-branded platforms)

Last updated: 10th Dec 2025

1. Data Controller

The Data Controller for all HEY-branded platforms is:

Start Me Hub Srl

Via Galasso da Carpi 1

62100 Macerata (MC) - Italy

VAT: IT01935510436

Email: support@heyos.net

This Privacy Policy applies to all services operating within the HEY Suite, including HeyOS, HeyProof, HeyFileDrop, HeyMetrica, HeyBionic, HeyChecker, HeyToolKit, and any future HEY-branded tools.

2. Personal Data We Collect

2.1 Data You Provide

  1. Name, email address, account credentials
  2. Billing and invoicing information (company name, VAT, address)
  3. Content you upload or generate within the platform
  4. Support requests and direct communications

2.2 Automatically Collected Data

  1. IP address, device identifiers
  2. Browser type, operating system, language
  3. Usage logs, event data, widget interactions
  4. Cookies and similar tracking technologies

2.3 Third-Party Data (Optional Integrations)

Only when you explicitly connect them, such as:

  1. Payment services
  2. Analytics integrations
  3. Social media or external tools

We process only what is necessary for the requested functionality.

3. Legal Basis for Processing (GDPR)

  1. Art. 6(1)(b) GDPR - Contract performance
  2. To create your account, deliver HEY services, provide support.
  3. Art. 6(1)(c) GDPR - Legal obligation
  4. For accounting, tax, and regulatory compliance.
  5. Art. 6(1)(f) GDPR - Legitimate interest
  6. To ensure security, prevent abuse, improve user experience.
  7. Art. 6(1)(a) GDPR - Consent
  8. For marketing, cookies, optional integrations, and non-essential tracking.

4. How We Use Personal Data

We use personal data to:

  1. Operate and improve HeyOS and HEY Suite services
  2. Manage subscriptions, payments, and billing
  3. Enable widgets, analytics, proof pop-ups, and integrations
  4. Provide customer support
  5. Send service-related notifications
  6. Monitor security and enforce compliance
  7. Optimize platform performance and stability

We do not sell personal data.

5. Data Sharing & Processors

We share data only with GDPR-compliant Data Processors, including:

  1. Hosting and server providers
  2. Payment processors (Stripe, Paddle, LemonSqueezy, etc.)
  3. Email delivery platforms
  4. Analytics services
  5. Customer support systems

All processors operate under a Data Processing Agreement (DPA).

Data may also be shared when legally required (court orders, government authorities).

6. International Transfers

If data is transferred outside the EU/EEA, we use:

  1. EU Commission Standard Contractual Clauses (SCCs)
  2. Additional safeguards when necessary

We ensure equivalent GDPR-level protection.

7. Data Retention

We retain data only as needed:

  1. Account data: until you delete your account
  2. Billing & tax data: 10 years (Italian law)
  3. Logs & analytics: typically 6-24 months
  4. Customer support communications: up to 24 months

After retention periods expire, data is securely deleted or anonymized.

8. Your GDPR Rights

You may request:

  1. Access to your personal data
  2. Rectification of inaccurate data
  3. Deletion ("right to be forgotten")
  4. Restriction of processing
  5. Objection to legitimate-interest processing
  6. Data portability
  7. Withdrawal of consent at any time

To exercise these rights, contact: support@heyos.net

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

9. Cookies & Tracking

HEY platforms may use:

  1. Strictly necessary cookies
  2. Functional cookies
  3. Analytics cookies (with consent)
  4. Third-party cookies (only if integrations are enabled)

Cookie preferences can be managed via your browser or our cookie banner.

A dedicated Cookie Policy is available and supplements this document.

10. Security Measures

To protect your data, we implement:

  1. SSL/TLS encryption
  2. Firewall and access-control systems
  3. Encrypted backups
  4. Regular security testing and monitoring
  5. Role-based administrative access
  6. Infrastructure redundancy

No online service can be 100% secure, but we follow industry best practices.

11. Third-Party Integrations

Depending on the HEY product you use, integrations may include:

  1. Analytics and tracking tools
  2. Notification and proof widgets
  3. External login systems
  4. Payment services
  5. Social and sharing tools

Integrations are always optional and require consent or explicit activation.

12. Children's Data

HEY Suite services are not intended for individuals under 16.

We do not knowingly collect data from minors.

13. Changes to This Policy

We may update this Privacy Policy to reflect:

  1. Legal requirements
  2. Platform changes
  3. New services in the HEY Suite

We will notify users of significant changes via email or in-app notices.

The latest version is always available on our website.

14. Contact Information

For any questions regarding this Privacy Policy or your personal data:

Start Me Hub Srl

Via Galasso da Carpi 1

62100 Macerata (MC) - Italy

Email: support@heyos.net