Hessian privacy & data

we are the data controller of the personal information we hold about you in connection with the Site and our marketing

Account and contact information — name, email, OAuth identifiers (e.g. GitHub, Google), profile picture, company name, role, and communication preferences.

Correspondence and communications — the content of emails, support tickets, and other messages you send us.

Technical and usage information — IP address, browser, device, language, time zone, approximate geographic location, pages viewed, referring URLs, time spent, and links clicked.

Payment information — billing details and payment-card metadata (full card details are handled directly by our payment processor and not stored by us).

provide, administer, secure, improve, and develop our services and the Site

send marketing communications about Hessian (with your consent where required, or on the basis of our legitimate interests in marketing to existing customers and business contacts)

analyze how the Site is used and measure the effectiveness of our marketing

comply with legal obligations and to establish, exercise, or defend legal claims

After your account ends, we keep your personal information and customer data for 90 days to allow you to export it, then delete or anonymize it

We may retain de-identified, anonymized, and aggregated data indefinitely.

Hessian is established in the United States. Your personal information may be transferred to, stored in, and processed in the United States and other countries where our service providers operate.

For transfers from the EEA, the UK, or Switzerland to a country without an adequacy decision, we rely on the EU Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable).

A current list of our subprocessors is available on request.

Where we process personal information on behalf of our customers as part of providing the Hessian Service, we act as a data processor; those terms are in our Data Processing Addendum .

To exercise your rights, email privacy@hessian.sh .

you may have rights to access, correct, delete, restrict, port, or object to our processing of your personal information

to withdraw consent at any time (without affecting prior processing)

California residents have the right to know, delete, correct, opt out of "sale" or "sharing", and not be discriminated against for exercising rights.

We don't sell your personal information.