1. Scope of this Privacy Policy
This Privacy Policy applies to Heron Data’s products and services, including applicable mobile and desktop applications (collectively, the “Services”), www.herondata.io and other Heron Data websites (collectively, the “Websites”) and other interactions (e.g., customer service inquiries, user conferences, etc.) you may have with Heron Data. If you do not agree with the terms, do not access or use the Services, Websites, or any other aspect of Heron Data’s business.
This Privacy Policy does not apply to any third-party applications or software that integrate with the Services through the Heron Data platform (“Third-Party Services”), or any other third-party products, services or businesses. In addition, a separate agreement governs delivery, access, and use of the Services (the “MSA”), including the processing of any data submitted through the Services (“Service Data”). The organization (e.g., your employer or another entity or person) that agreed to the MSA (“Customer”) controls its instance of the Services and any associated Service Data (the “Customer Instance”).
2. Information Heron Data Collects and Receives
Heron Data may collect, generate, and receive Service Data and other information and data (“Other Information”; Service Data and Other Information collectively “Information”) in a variety of ways:
Service data. Customers and individuals granted access to a Customer Instance by a Customer (“Authorized Users”) may submit Service Data to Heron Data when using the Services.
Account information. To create or update a Heron Data account, you or a Customer (e.g., your employer) supply Heron Data with an email address, domain and/or similar account details. In addition, Customers that purchase a paid version of the Services provide Heron Data (or its payment processors) with billing details such as credit card information, banking information and/or a billing address.
Usage information
- Services metadata. When an Authorized User interacts with the Services, metadata is generated that provides additional context about the way Authorized Users interact with the Services. For example, Heron Data logs what Third Party Services are connected with the Services (if any).
- Log data. As with most technology services delivered over the Internet, our servers automatically collect information when you access or use our Websites or Services and record it in log files. This log data may include the Internet Protocol (IP) address, the address of the web page visited before using the Website or Services, browser type and settings, the date and time the Services were used, information about browser configuration and plugins, language preferences and cookie data.
- Device information. Heron Data collects information about devices accessing the Services, including type of device, what operating system is used, device settings, application IDs, unique device identifiers and crash data. Whether Heron Data collects some or all of this information often depends on the type of device used and its settings.
- Location information. Heron Data receives information from you, your Customer and other third parties that may help Heron Data approximate your location. Heron Data may, for example, use a business address submitted by your employer, or an IP address received from your browser or device to determine approximate location.
- Cookie information. Heron Data uses cookies and similar technologies in our Websites and Services to help us collect Other Information.
Third-Party Services. A Customer may develop the capability to connect Third-Party Services to its Customer Instance. Third-Party Services are software services that integrate with Heron Data Services, and a Customer can permit its Authorized Users to enable and disable these integrations for its Customer Instance. Heron Data may also develop and offer Heron Data applications that connect the Services with a Third-Party Service.
Contact information. An Authorized User is required to provide some contact information (e.g., an email address) when making an account on the Services.
Third-party data. Heron Data may receive data about organizations, industries, lists of companies that are customers, Website visitors, marketing campaigns and other matters related to our business from affiliates and subsidiaries, our partners, or others.
Additional information provided to Heron Data. Heron Data receives Other Information when submitted to our Websites or in other ways, such as if you participate in a focus group, contest, activity or event, apply for a job, enroll in an educational program hosted by Heron Data or a vendor, request support, interact with our social media accounts or otherwise communicate with Heron Data.
3. How Heron Data Uses Information
Service Data will be used by Heron Data in accordance with the applicable MSA, Customer’s use of Services functionality, and as required by applicable law. Heron Data is a processor of Service Data and Customer is the controller.
In addition, Heron Data uses Information in furtherance of our legitimate interests in operating our Services, Websites, and business. More specifically, Heron Data uses Information:
- To provide, update, maintain and protect our Services, Websites, and business.
- As required by applicable law, legal process, or regulation.
- To communicate with you by responding to your requests, comments, and questions.
- To develop and provide additional features.
- To send emails and other communications.
- For billing, account management, and other administrative matters.
- To investigate and help prevent security issues and abuse.
If Information is aggregated or de-identified so that it is no longer reasonably associated with an identified or identifiable natural person, Heron Data may use it for any business purpose.
4. Data Retention
Heron Data will retain Service Data in accordance with the applicable MSA, Customer’s use of Services functionality, and as required by applicable law. Heron Data may retain Other Information for as long as necessary for the purposes described in this Privacy Policy.
5. How Heron Data Shares and Discloses Information
This section describes how Heron Data may share and disclose Information.
- Displaying and operating the Services.
- Third-party service providers and partners.
- Third-Party Services.
- Corporate affiliates.
- During a change to Heron Data’s business.
- Aggregated or de-identified data.
- To Comply with Laws.
- To enforce our rights, prevent fraud, and for safety.
- With consent.
6. Security
Security is critical to Heron Data’s mission, and Heron Data takes security of data seriously. Heron Data uses industry-standard technical and organizational measures to protect Information from loss, misuse, and unauthorized access or disclosure.
7. Age Limitations
To the extent prohibited by applicable law, Heron Data does not allow use of our Services and Websites by anyone younger than 16 years old.
8. Changes to This Privacy Policy
Heron Data may change this Privacy Policy from time to time. Laws, regulations, and industry standards evolve, which may make those changes necessary.
9. Data Protection Officer
To communicate with our Data Protection Officer, please email privacy@herondata.io.
10. Identifying the Data Controller and Processor
Data protection law in certain jurisdictions differentiates between the “controller” and “processor” of information. In general, Customer is the controller of Service Data. In general, Heron Data is the processor of Service Data and the controller of Other Information.
11. Your Rights
Individuals located in certain countries have certain statutory rights in relation to their personal data. Subject to any exemptions provided by law, you may have the right to request access to Information, as well as to seek to update, delete or correct this Information.
12. Your California Privacy Rights
This section provides additional details about the personal information Heron Data collects about California consumers and the rights afforded to them under the California Consumer Privacy Act or “CCPA.”
13. Data Protection Authority
To the extent permitted by law, you also have the right to (i) restrict Heron Data’s use of Information that constitutes your Personal Data and (ii) lodge a complaint with your local data protection authority.
14. Contacting Heron Data
Please feel free to contact Heron Data if you have any questions about this Privacy Policy or Heron Data’s practices.