Privacy Policy

1. Information We Collect

When you create an account or use our services, we may collect the following types of information:

• Account Information: Email address, name, and authentication credentials managed through our identity provider (Clerk).
• Workspace Data: Events, entities, trackables, metrics, funnels, attribution touchpoints, alerts, reports, connector records, API request logs, and workspace activity.
• Governance And Proof Data: DecisionObjects, AuthorityGrants, ContextContracts, attestation metadata, EnforcementReceipts, proof trails, export receipts, and outcome ledger entries.
• Technical Data: IP addresses, browser type, and device information collected automatically through server logs.

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Headless Analytics platform
• Process and store events, trackables, connector records, governance records, proof trails, and export receipts you send through our APIs
• Communicate with you about your account and service updates
• Monitor and prevent fraudulent or unauthorized access
• Comply with legal obligations

3. Data Ownership & Storage

You retain full ownership of the event, connector, trackable, governance, proof, and outcome data you send to HeadlessAnalytics. We act as a data processor on your behalf. Data is encrypted in transit and at rest where supported by the underlying providers. Your data is never sold to third parties.

4. Data Retention

Workspace data is retained according to your subscription plan and configured retention settings. You may request deletion of your data at any time by contacting us at privacy@headlessanalytics.com. Upon account deletion, associated data is deleted according to our operational deletion schedule and any legal or compliance retention obligations.

5. Third-Party Services

We use third-party services to operate the platform, including authentication, database, hosting, payment, communications, connector, and infrastructure providers. Optional exports to services such as warehouses, data lakes, webhook destinations, GraphNative-compatible endpoints, and SovereignProof-compatible endpoints are initiated by you or your configured systems.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict processing of your data
• Export your data in a portable format