This Privacy Policy explains how Heartbeat Intelligence (“Heartbeat,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit heartbeatintel.com, use the Intelligence Exchange, create an account, subscribe to publishers, publish content, or otherwise use our services (collectively, the “Service”).
By using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.
Our Terms of Service at https://www.heartbeatintel.com/terms govern use of the Service. Capitalized terms used but not defined here have the meanings given in those Terms.
1. Who We Are
Heartbeat Intelligence operates an intelligence exchange platform that helps users structure data, publish curated intelligence, and subscribe to publisher offerings.
Contact for privacy questions, rights requests, and notices:
- Email: human@heartbeatintel.com
2. Scope
This Policy applies to personal information we process in connection with:
- The public website and Exchange;
- Accounts, sign-in, and workspace features;
- Subscriber purchases and Publisher monetization;
- Customer support and communications; and
- Related online services we operate under the Heartbeat brand.
It does not apply to:
- Third-party websites or services linked from the Service;
- Publishers’ independent processing of information outside Heartbeat; or
- Publicly available information that does not identify you.
3. Information We Collect
3.1 Information you provide
We may collect:
| Category | Examples |
|---|---|
| Account information | Email address, name or display name, profile details, authentication codes, account preferences |
| Publisher profile information | Biography, title, organization, expertise tags, profile images, public-facing publisher materials |
| User Content | Uploaded data, documents, lists, articles, research, taxonomies, notes, and related metadata |
| Billing and transaction information | Subscription selections, purchase history, billing email, tax forms or tax identifiers for publishers, payout details |
| Communications | Support messages, feedback, opt-out notices, and correspondence with us |
| Marketing preferences | Subscription or unsubscribe choices for optional communications |
Payment card details are generally processed by our payment processor (currently Stripe) and are not stored by Heartbeat in full. We may receive limited payment metadata such as last four digits, card brand, billing country, payment status, and Stripe customer or subscription identifiers.
3.2 Information collected automatically
When you use the Service, we and our providers may automatically collect:
- Device and browser information (IP address, user agent, language, time zone);
- Usage data (pages viewed, features used, clicks, referral URLs, session timing);
- Approximate location derived from IP address;
- Log and diagnostic data; and
- Cookies, local storage, pixels, and similar technologies.
3.3 Information from third parties
We may receive information from:
- Payment processors such as Stripe (payment confirmation, dispute/chargeback data);
- Identity or email verification services used for sign-in codes;
- Analytics and infrastructure providers;
- Publishers or Subscribers, where they provide information about a transaction or dispute; and
- Publicly available sources, where relevant to fraud prevention, compliance, or service integrity.
3.4 Sensitive information
Please do not submit sensitive personal information (such as government ID numbers, precise health data, or biometric templates) unless we expressly request it for a stated purpose and you have a lawful basis to provide it.
Do not upload personal data about others unless you have the right to do so and it is necessary for your use of the Service.
4. How We Use Information
We use personal information to:
- Provide and operate the Service, including accounts, publishing, subscriptions, workspace access, and support;
- Process payments, renewals, refunds, chargebacks, and publisher payouts;
- Authenticate users and secure accounts (including email verification codes);
- Display Publisher Content and make it available to authorized Subscribers;
- Personalize discovery, recommendations, and Exchange browsing where offered;
- Communicate about transactions, security, product updates, and policy changes;
- Send marketing communications where permitted, with an option to unsubscribe;
- Monitor, prevent, and investigate fraud, abuse, security incidents, and Terms violations;
- Analyze and improve performance, reliability, and product features;
- Create aggregated or de-identified statistics that do not reasonably identify you;
- Comply with law, respond to lawful requests, and enforce our agreements; and
- Protect the rights, safety, and property of Heartbeat, users, and others.
We do not use Private Content to train publicly available third-party foundation models. We may use automated systems and service providers to host, process, secure, index, format, and recommend content as needed to operate the Service.
5. Legal Bases (Where Applicable)
If you are in a jurisdiction that requires a legal basis for processing (for example, the EEA/UK), we process personal information based on:
- Contract — to provide the Service you request;
- Legitimate interests — such as security, fraud prevention, product improvement, and communications, balanced against your rights;
- Consent — where required (for example, certain cookies or marketing); and
- Legal obligation — where we must retain or disclose information to comply with law.
You may withdraw consent where processing is consent-based, without affecting prior lawful processing.
6. How We Share Information
We do not sell personal information for money. We may share information as follows:
6.1 Service providers
We share information with vendors that help us operate the Service, including:
- Payment processing (Stripe);
- Cloud hosting and storage;
- Email and messaging delivery;
- Analytics and logging;
- Customer support tools; and
- Security and fraud-prevention providers.
These providers may process information only as needed to perform services for us and under contractual confidentiality and security obligations.
6.2 Publishers and Subscribers
If you subscribe to a Publisher, we may share limited Subscriber information with that Publisher (such as email, display name, subscription status, and plan timing) so the Publisher can deliver the offering and manage the relationship.
Publishers may receive aggregated view or engagement metrics for their content.
Public Publisher profiles and published Publisher Content are visible to other users and may be indexed or shared outside the Service.
Publishers are independent parties. Their use of information they receive is also subject to applicable law and any separate publisher obligations in our Terms. Heartbeat is not responsible for a Publisher’s independent practices outside the Service.
6.3 Business transfers
If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction, subject to appropriate confidentiality protections.
6.4 Legal and safety disclosures
We may disclose information if we believe in good faith that disclosure is reasonably necessary to:
- Comply with law, regulation, legal process, or governmental request;
- Enforce our Terms or other agreements;
- Detect, prevent, or address fraud, security, or technical issues; or
- Protect the rights, property, or safety of Heartbeat, users, or the public.
6.5 With your direction or consent
We may share information when you ask us to, or when you intentionally make information public through the Service.
7. Cookies and Similar Technologies
We use cookies and similar technologies to:
- Keep you signed in;
- Remember preferences (such as theme);
- Measure traffic and feature usage;
- Secure the Service; and
- Improve performance.
You can control cookies through your browser settings. Blocking some cookies may limit Service functionality.
Where required by law, we will request consent for non-essential cookies and provide a way to manage preferences.
8. Private Content and Published Content
Private Content is content you have not elected to publish or share. We process it to provide hosting, processing, security, support, and related Service functions.
Published Content (including Publisher Content you make available on the Exchange) may be viewed by Subscribers or the public, depending on your settings and the offering. Once published or shared, others may copy, store, or redistribute it outside Heartbeat’s control.
You are responsible for ensuring you have rights to upload and publish content, including personal data about third parties.
9. Data Retention
We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including:
- Providing the Service and maintaining accounts;
- Processing subscriptions, payouts, taxes, and disputes;
- Complying with legal, accounting, and audit requirements;
- Resolving disputes and enforcing agreements; and
- Maintaining security and preventing fraud.
Retention periods vary by data type. For example:
- Account and billing records may be kept for the life of the account plus a period required for tax, accounting, or legal compliance;
- Support correspondence may be kept for a reasonable operational period;
- Logs and security records may be kept for shorter operational windows unless needed longer for investigations; and
- Backups may persist for a limited time after deletion from active systems.
When information is no longer needed, we delete, de-identify, or aggregate it.
10. Security
We use administrative, technical, and organizational measures designed to protect personal information, including encryption in transit, access controls, and monitoring.
No method of transmission or storage is completely secure. You are responsible for protecting access to your email account, verification codes, devices, and Account credentials. Notify us promptly at human@heartbeatintel.com if you suspect unauthorized access.
11. Your Rights and Choices
Depending on your location, you may have rights to:
- Access the personal information we hold about you;
- Correct inaccurate information;
- Delete information, subject to legal and operational exceptions;
- Object to or restrict certain processing;
- Portability of certain information;
- Withdraw consent where processing is based on consent; and
- Opt out of marketing emails.
How to exercise rights
Email human@heartbeatintel.com with your request and the email associated with your Account. We may need to verify your identity before responding.
We will respond within the time required by applicable law. We may deny requests where an exception applies (for example, retaining records needed for billing, security, fraud prevention, or legal compliance).
Marketing opt-out
You can unsubscribe from marketing emails using the link in those emails or by contacting us. We may still send transactional, billing, security, and legal notices.
Account and subscription controls
You may update certain Account information through available Account settings. Canceling a subscription or deleting an Account may be handled through Account controls or by emailing human@heartbeatintel.com. Cancellation and deletion do not automatically erase all historical records we must retain.
12. California and Other U.S. State Privacy Rights
If you are a resident of California or another U.S. state with a comprehensive privacy law, you may have rights to know, access, correct, delete, and obtain a portable copy of certain personal information, and to appeal a denied request.
Categories collected
Over the past 12 months, we may have collected the categories described in Section 3, including identifiers, commercial information, internet/network activity, approximate geolocation, professional information (for publishers), and user-generated content.
Sources, purposes, and disclosures
Sources, purposes, and disclosures are described in Sections 3–6.
“Sale” / “sharing” / targeted advertising
We do not sell personal information for monetary consideration. We also do not knowingly share personal information for cross-context behavioral advertising. If that changes, we will update this Policy and provide required opt-out mechanisms.
Sensitive personal information
We do not use or disclose sensitive personal information for purposes that require a right to limit under California law, except as needed to provide the Service or as otherwise permitted by law.
Non-discrimination
We will not discriminate against you for exercising privacy rights.
Authorized agents
You may designate an authorized agent where permitted by law. We may require proof of authorization and identity verification.
13. International Users and Transfers
The Service may be operated from the United States and other countries. If you access the Service from outside the United States, you understand that your information may be transferred to, stored in, and processed in the United States or other jurisdictions that may have different data-protection laws than your home country.
Where required, we use appropriate transfer safeguards such as contractual protections with service providers.
You are responsible for determining whether your use of the Service is lawful in your jurisdiction.
14. Children’s Privacy
The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children under 18. If we learn that we have collected such information, we will delete it. Contact human@heartbeatintel.com if you believe a minor has provided personal information.
15. Third-Party Links and Services
The Service may link to third-party sites or integrate third-party tools (including Stripe checkout). Their privacy practices are governed by their own policies. We encourage you to review those policies before providing information to third parties.
16. Automated Decision-Making
We may use automated tools for fraud prevention, security, content ranking, recommendations, or operational moderation. These tools are generally used to operate and protect the Service and do not, by themselves, produce legal effects comparable to credit decisions. If that changes in a way that triggers additional notice or opt-out rights, we will update this Policy.
17. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last Updated” date will reflect the latest revision. For material changes, we will provide additional notice as required by law (for example, by email or in-product notice).
Continued use of the Service after an update becomes effective means you acknowledge the revised Policy, except where affirmative consent is required by law.
18. Contact Us
For privacy questions, rights requests, complaints, or notices:
- Heartbeat Intelligence
- Email: human@heartbeatintel.com