Legal

Privacy Policy

Effective date: June 1, 2026

Heplon ("we", "us", "our") operates the heplon.com website and the Heplon platform. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our service.

1. Data we collect

Information you provide

  • Account information: Email address, name, and company name when you sign up or request early access.
  • Communications: Messages you send us via email or through the platform.

Information collected automatically

  • Usage data: Pages visited, features used, and interaction patterns.
  • Device data: Browser type, operating system, and IP address.

2. How we use your data

  • To provide and maintain our service.
  • To communicate with you about your account or our services.
  • To improve and develop new features.
  • To comply with legal obligations.

3. Data sharing

We do not sell your personal data. We may share data with:

  • Service providers who assist in operating our platform (hosting, analytics, email delivery), bound by data processing agreements.
  • Legal authorities when required by law or to protect our rights.

4. Data retention

We retain your data for as long as your account is active or as needed to provide our services. You may request deletion of your data at any time by contacting us.

5. Your rights (GDPR)

If you are in the European Economic Area, you have the right to:

  • Access, correct, or delete your personal data.
  • Object to or restrict processing of your data.
  • Data portability: receive your data in a structured, machine-readable format.
  • Withdraw consent at any time.
  • Lodge a complaint with a supervisory authority.

6. Cookies

We use the following types of cookies:

  • Essential cookies: Required for the operation of our website. These cannot be disabled.
  • Analytics cookies: We use Google Analytics to understand how visitors use our site. These cookies (such as _ga and _ga_*) collect anonymized data about pages visited and interactions. Analytics cookies are only set after you give your consent.
  • Embedded video: If you click play on the YouTube video embedded on our site, YouTube may set cookies or use similar local-storage technologies in your browser. No such cookies are set until you click play. See section 7 for details.

You can accept or decline analytics cookies when you first visit the site, and change your preference at any time via the "Cookie settings" link in the footer. If you decline, no analytics cookies are stored and no personal data is sent to any third party.

7. Embedded content (YouTube)

Our website embeds a video hosted on YouTube, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), with its parent Google LLC located in the United States.

To minimise data sharing, we use YouTube's privacy-enhanced mode (youtube-nocookie.com) and a click-to-play mechanism: no YouTube iframe is loaded and no connection to Google's video servers is established until you actively click the play button. When you click play, your IP address, browser information, and referring URL are transmitted to Google, and YouTube may set cookies or use similar local-storage technologies in your browser. The video preview image is loaded from Google's servers (img.youtube.com) when the page loads, which also transmits your IP address to Google.

Because Google may transfer data to servers in the United States, such transfers take place on the basis of the EU Commission's adequacy decision for the EU-U.S. Data Privacy Framework and, where applicable, Standard Contractual Clauses.

Legal basis: our legitimate interest in presenting product information in video form (Art. 6(1)(f) GDPR) for the thumbnail preview, and your consent (Art. 6(1)(a) GDPR) for playback, given by clicking the play button. You can object to the processing or withdraw consent at any time; if you do not click play, no iframe is loaded.

Further information is available in Google's privacy policy at policies.google.com/privacy.

8. Security

We implement industry-standard security measures to protect your data, including encryption in transit and at rest. However, no method of transmission over the Internet is 100% secure.

9. Changes to this policy

We may update this policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the effective date.

10. Contact

If you have questions about this privacy policy or your data, contact us at hello@heplon.com.