We use the information needed to run accounts, research, security, support, and billing. Stripe handles payment-card details. HeyDrew does not sell personal information for money or use it for third-party behavioral advertising in the current beta.
1. Information We Collect
Depending on how you use the Service, we may collect:
- Your email address and authentication information
- Two-factor-authentication status
- Ticker-search inputs you submit
- Saved research history associated with your account
- Subscription status and search-credit balances
- Stripe customer, subscription, and billing-event identifiers
- Customer-support messages you send us
- Whether you consented to product-improvement review of support conversations
- First-party product events such as checkout starts and categorized research failures
- Aggregated site-traffic measurements
- Device, browser, IP address, request, security, error, and infrastructure logs
- Browser session or local-storage data needed to keep you signed in
2. How We Use Information
We use this information to provide, maintain, and secure the Service; process subscriptions and search-pack purchases; respond to support requests; detect and prevent fraud or abuse; and comply with legal obligations. We retain information only as reasonably needed for these purposes, including service delivery, security, transactions, dispute resolution, fraud prevention, and legal compliance. Some records may need to be retained longer for security, transaction, legal, or dispute-related purposes even after you stop using the Service.
3. Service Providers
We work with service providers to operate the Service, including:
- Authentication providers
- Billing and payment processors
- Automated research and customer-support processors
- Paper-market and brokerage-data providers
- Hosting and infrastructure providers
These providers process information on our behalf as necessary to deliver the Service. We may identify specific providers when required by law or in response to a valid privacy request.
4. Payment Information
Stripe processes subscription and search-pack payments. HeyDrew stores Stripe-generated customer, subscription, transaction, plan, status, and credit-ledger identifiers. HeyDrew does not store full payment-card or bank-account details in its own application database.
5. No Sale of Personal Information; No Third-Party Advertising
HeyDrew does not sell personal information for money. The current beta version of the Service does not use personal information for third-party behavioral advertising.
5A. Product and Traffic Measurement
HeyDrew uses limited first-party product events and privacy-focused aggregated traffic analytics to measure account creation, checkout completion, research reliability, and conversion. Product analytics events do not store email addresses, ticker symbols, raw error text, IP addresses, or full browser fingerprints. We do not place third-party advertising pixels or build cross-site advertising profiles.
6. Research Reuse
Research may be reused internally for up to seven days when new deterministic freshness and market checks pass. The shared research cache does not contain the requesting user’s identity. Your personal search history remains associated with your account separately from the shared cache.
7. Support Conversations and Product Improvement
Support conversations may be reviewed for product-improvement purposes only if you affirmatively select the product-improvement consent option in your account. Regardless of that selection, support messages may still be processed as needed for support delivery, security, abuse prevention, or legal compliance.
8. Security
We use reasonable measures intended to protect information handled by the Service. No method of transmission or storage is completely secure, and we cannot guarantee absolute security of your information.
9. Your Choices
You may request access to, correction of, or deletion of your personal information through the signed-in support tool or by emailing support@heydrew.io. Some information may need to be retained even after a deletion request for security, transaction, legal, or dispute-related reasons, as described above.
10. Children
The Service is not directed to individuals under 18 years of age, and we do not knowingly collect personal information from children under 18.
11. Changes to This Notice
We may update this Privacy Notice from time to time. Material changes will be reflected by an updated effective date.
12. Contact
Use the signed-in support tool or email support@heydrew.io.