Privacy policy

Last updated · Edition 7

What changed since edition 4

10 lines added, 5 removed

  1. Removed: This policy explains how Hermetica, provided by Shin Bet Solutions ("we"), handles personal data. For your own account we are the controller. For the contacts you put into Hermetica and message through it, you are the controller and we act as your processor.
  2. Added: We collect what running your account needs: who you are, your workspace content, the keys of the providers you connect, and usage and security logs.
  3. Added: For the contacts you message through Hermeticor, you decide and we process on your behalf.
  4. Added: We never sell personal data or use customer data to train models.
  5. Added: Provider keys are encrypted, card details stay with Stripe, and you can access, export or delete your data at any time.
  6. Added: This policy explains how Hermeticor, provided by Shin Bet Solutions ("we"), handles personal data. For your own account we are the controller. For the contacts you put into Hermeticor and message through it, you are the controller and we act as your processor.
  7. What we collect
  8. Account data: your name, email address, workspace memberships and roles. Your password, second factors and sign-in sessions are held by Atlas (below).
  9. Account data is kept while your account exists. Workspace data is kept until you delete it or the workspace; consent and suppression records are kept as long as the law needs them as proof. When a workspace is deleted, its data is erased after a grace period.
  10. Your rights
  11. Removed: Depending on where you live you may access, correct, export, restrict or delete your personal data, and object to processing. Use the "Your privacy rights" form linked in the app footer; it reaches every system we use. If you are a contact of a Hermetica customer, ask that customer first; we will help them answer you.
  12. Added: Depending on where you live you may access, correct, export, restrict or delete your personal data, and object to processing. Use the "Your privacy rights" form linked in the app footer; it reaches every system we use. If you are a contact of a Hermeticor customer, ask that customer first; we will help them answer you.
  13. Changes
  14. We announce material changes at least 30 days in advance. Questions: ask in the community or use the support chat in the app.
  15. Entity
  16. Purpose
  17. Removed: Location
  18. Cookie Munch
  19. Cookie consent and privacy requests: your consent choices (with a random visitor id) and, when you file a request, the email address it concerns.
  20. Support chat, loaded only when you open it. If you are signed in it receives your name and email; it holds your messages and the page you were on.
  21. Referalli
  22. Removed: The referral program for Hermetica subscriptions, only with the marketing cookie category: your account id, the referral code you arrived with and any credit earned.
  23. Added: The referral program for Hermeticor subscriptions, only with the marketing cookie category: your account id, the referral code you arrived with and any credit earned.
  24. Seolyticize
  25. Page-view counts on our public pages only, never inside the app, only with the statistics cookie category. No cookies; addresses are sent without their query string.
  26. Added: Watchtower
  27. Added: Error and performance monitoring of Hermeticor, on our own servers: server traces and logs with emails, numbers and message content removed; browser timings only with statistics consent.
  28. Stripe
  29. Payments and subscriptions: your billing details and the usage we report for billing, not your contacts or messages.
  30. Hosting provider
  31. Removed: The virtual server Hermetica runs on (managed with Coolify): the database, uploaded files and backups.
  32. Added: The virtual server Hermeticor runs on (managed with Coolify): the database, uploaded files and backups.

These 9 sub-processors as JSON

In plain English

  • We collect what running your account needs: who you are, your workspace content, the keys of the providers you connect, and usage and security logs.

  • For the contacts you message through Hermeticor, you decide and we process on your behalf.

  • We never sell personal data or use customer data to train models.

  • Provider keys are encrypted, card details stay with Stripe, and you can access, export or delete your data at any time.

The document

This policy explains how Hermeticor, provided by Shin Bet Solutions ("we"), handles personal data. For your own account we are the controller. For the contacts you put into Hermeticor and message through it, you are the controller and we act as your processor.

What we collect

  • Account data: your name, email address, workspace memberships and roles. Your password, second factors and sign-in sessions are held by Atlas (below).

  • Workspace data: contacts, consent records, suppressions, lists, segments, campaigns, journeys, templates, messages and their delivery events, forms, and the audit log. You or your integrations provide it.

  • Provider credentials: keys and tokens for the providers you connect. They are encrypted at rest and never returned by the API, written to logs or put in audit entries.

  • Tracking data: if you install the browser or mobile SDK or use tracked links, opens, clicks, page views and events from your contacts.

  • Usage and security data: API request logs, sign-ins, IP addresses, browser details and security events.

  • Billing data: plan, usage and invoices. Card details are handled by Stripe and never reach our servers.

Why we use it

To provide and secure the service, to send the messages you ask for through your providers, to enforce consent and suppression, to bill you, to support you, and to improve the product in aggregate. We do not sell personal data and do not use customer data to train models.

Sub-processors

We use these providers as processors, each only for the purpose listed. The table is kept current by Forumulate from the services connected to these pages plus the ones we list, and each change is announced at least 30 days before it takes effect.

Your sending providers

The sending providers you connect (for example Amazon SES, SendGrid, Twilio) receive what is needed to deliver your messages. They are your own providers under your own agreements with them, not our sub-processors.

Retention

Account data is kept while your account exists. Workspace data is kept until you delete it or the workspace; consent and suppression records are kept as long as the law needs them as proof. When a workspace is deleted, its data is erased after a grace period.

Your rights

Depending on where you live you may access, correct, export, restrict or delete your personal data, and object to processing. Use the "Your privacy rights" form linked in the app footer; it reaches every system we use. If you are a contact of a Hermeticor customer, ask that customer first; we will help them answer you.

Changes

We announce material changes at least 30 days in advance. Questions: ask in the community or use the support chat in the app.

Sub-processors

Entity

Purpose

Cookie Munch

Cookie consent and privacy requests: your consent choices (with a random visitor id) and, when you file a request, the email address it concerns.

Atlas

Sign-in, accounts and sessions: your email, name, password hash, second factors, sessions, and the IP address and browser of each sign-in.

Forumulate

Hosts these pages (guides, API reference, legal, blog, community, status, changelog). If you sign in to the community it holds your name, email and posts; closing your account removes you.

Chatly

Support chat, loaded only when you open it. If you are signed in it receives your name and email; it holds your messages and the page you were on.

Referalli

The referral program for Hermeticor subscriptions, only with the marketing cookie category: your account id, the referral code you arrived with and any credit earned.

Seolyticize

Page-view counts on our public pages only, never inside the app, only with the statistics cookie category. No cookies; addresses are sent without their query string.

Watchtower

Error and performance monitoring of Hermeticor, on our own servers: server traces and logs with emails, numbers and message content removed; browser timings only with statistics consent.

Stripe

Payments and subscriptions: your billing details and the usage we report for billing, not your contacts or messages.

Hosting provider

The virtual server Hermeticor runs on (managed with Coolify): the database, uploaded files and backups.

All documents