Combination Logo

Privacy Policy

Your privacy is essential to us. This Privacy Policy explains what data Heynds collects, why we process it, which providers we collaborate with, and what your rights are.

1. Data Controller

The data controller for the data described in this policy is Heynds. To date, no additional legal entity or postal address is published on this site. For any questions regarding the confidentiality or processing of your data, you can contact us at support@heynds.com.

2. Our General Approach

We design Heynds according to the principle of data minimization: we limit the information processed to the strict necessary to operate our service. When using our artificial intelligence features, our architecture is designed to minimize the retention of generated or submitted content, although this does not constitute an absolute legal guarantee in all use cases.

3. Data Collected, Purposes, and Legal Bases

Depending on your use of the site or service, we process different categories of data based on specific legal bases, in accordance with the GDPR:

1. Account and contact data, such as your email or identifiers: processed to provide you with the service and ensure customer support. The legal basis is the performance of the contract.

2. Payment and billing information: processed to manage your subscriptions or purchases. The legal bases are the performance of the contract and compliance with our legal obligations, particularly accounting and tax-related.

3. Technical and navigation data, such as browser, device, or IP address: processed to ensure the security and proper functioning of the site. The legal basis is our legitimate interest.

4. Audience analysis data: processed to understand website usage and measure its performance. The legal basis is your consent or our legitimate interest, depending on the applicable tracker configuration.

4. Content Sent to AI Features

When you use Heynds' AI features, the content you submit is transmitted via OpenRouter.

To protect your data, Heynds is configured to limit these requests exclusively to OpenRouter endpoints marked Zero Data Retention (ZDR). According to OpenRouter's documentation, these endpoints are designed not to retain your prompts or generations, thereby preventing your data from being used to train AI models.

However, certain technical data may be subject to documented temporary exceptions, such as an implicit memory cache at the datacenter level. Furthermore, OpenRouter may process certain metadata necessary for the operation of its service, particularly for security, billing, or account management. We invite you to consult the ZDR documentation and OpenRouter's privacy policy for more details.

5. Main Subprocessors and Providers

To offer you our service, we use trusted providers, selected for their adherence to security and confidentiality standards. Our main subprocessors are:

1. OpenRouter: AI request routing and application of the Zero Data Retention policy.

2. PostHog: website analysis only, to improve the browsing experience. No PostHog tracking is performed within the Heynds product itself. Privacy policy: posthog.com/privacy.

3. Resend: sending transactional emails and service-related communications. Privacy policy: resend.com/privacy-policy.

4. Polar: secure processing of payments and billing information. Privacy policy: polar.sh/legal/privacy.

6. International Transfers

Some of our providers are located or process data outside the European Economic Area. When this occurs, we ensure that these transfers are governed by appropriate legal mechanisms, such as European Commission adequacy decisions or the signing of Standard Contractual Clauses.

7. Data Security and Retention

We implement reasonable technical and organizational measures to protect your data against unauthorized access, loss, or alteration.

We retain your data only for as long as necessary for the purposes for which it was collected. For example, your account data is kept as long as you are an active user. Billing data may be retained longer to satisfy our applicable legal and tax obligations.

8. Your Rights

In accordance with applicable regulations, including the GDPR, you have the following rights regarding your personal data:

1. Right of access: obtain a copy of the data we hold about you.

2. Right to rectification: correct inaccurate or incomplete data.

3. Right to erasure: request the deletion of your data, within the limits provided by law.

4. Right to object and restriction: restrict or object to certain processing.

5. Right to data portability: receive certain data in a structured, machine-readable format.

To exercise these rights, contact us at support@heynds.com. If, after contacting us, you believe your rights are not being respected, you can file a complaint with the competent supervisory authority, particularly the CNIL in France.

9. External Links

Our site may contain links to third-party sites. We do not control their privacy practices and encourage you to consult their own policies directly.

10. Contact

For any questions related to privacy, the processing of your data, or to exercise your rights, you can contact us at: support@heynds.com.

Last updated: March 24, 2026.