Privacy Policy

Information We Collect

This policy covers heffos.com and app.heffos.com, where you create your Heffos account. When you sign up, we collect the details you enter: your company name, your name, work email address, company size, industry, phone number and country, and your password — which we store only as an Argon2 hash.

Once Heffos is installed, the Heffos agent on your server reports technical facts to app.heffos.com about every 30 seconds: the host name, operating system and versions, CPU, memory, disk and network usage, and for each workspace its address, version and health-check result. It never sends the content of your workspaces.

The content of your workspaces — pages, issues, files, customer records — is stored on your server. We do not receive it, and we cannot see it unless you give us access, for example to help with a support request.

• When a workspace sends a password-reset email through our mail relay, we process the recipient’s email address, name and the reset link, only to deliver that message.
• When you write to us, we keep your message and our reply.

How We Use Your Information

We use your information to create and run your account, issue install tokens, keep your servers visible and up to date, deliver password-reset emails, and answer your questions. We use the agent’s technical reports to spot servers and workspaces that need attention.

We send you product updates and occasional offers only if you agreed to receive them, and you can withdraw that consent at any time. We may also use information to keep our services secure, to prevent abuse and to meet our legal obligations.

Cookies and Similar Technologies

heffos.com sets no cookies and uses no analytics or advertising tools. It remembers the language you chose in your browser’s local storage; that setting never leaves your device.

app.heffos.com uses only what is needed to keep you signed in. You can clear this data in your browser at any time; you will then need to sign in again.

Sharing Your Information

We do not sell your personal data. We share it only with service providers that host app.heffos.com and deliver our email, under contracts that bind them to our instructions; when the law requires it; or as part of a merger or acquisition, in which case this policy continues to protect your data.

Data Security

Passwords are stored only as Argon2 hashes. Connections to our services are encrypted, the agent on each server authenticates with its own key, and our mail relay sends only password-reset messages that lead to the workspace they belong to.

Your workspaces live on your server, so the protection of that server — and its backups — is in your hands. There is no copy of your workspace content on our side to restore from.

Your Privacy Rights

Under the GDPR and similar laws, you have the right to:

• access the personal data we hold about you and receive a copy;
• correct inaccurate data and have your data erased;
• restrict or object to our processing, and withdraw consent at any time;
• receive your data in a portable format;
• lodge a complaint with a data protection supervisory authority.

To use any of these rights, write to hello@heffos.com. We answer within one month.

International Transfers

We aim to process personal data within the European Economic Area. Where a service provider processes it elsewhere, we rely on an adequacy decision or the European Commission’s standard contractual clauses.

Children’s Privacy

Heffos is a service for businesses and is not directed to children under 16. We do not knowingly collect their personal data; if you believe we have, contact us and we will delete it.

Changes to This Policy

We may update this policy as Heffos changes. We will update the date at the top of the page and, for significant changes, tell account holders by email before they take effect.

Contact Us

Questions about this policy or your data? Write to hello@heffos.com.