Privacy Policy
What personal data HappyFetch processes, why, for how long, and your rights. Draft, pending legal review.
[Legal entity pending registration] ("HappyFetch", "we") is the controller for the personal data described here. Contact: hello@happyfetch.net.
Data about our customers#
| Data | Why | Legal basis |
|---|---|---|
| Name, email, password hash, workspace membership | To run your account | Contract |
| Payment details | Handled by Stripe; we see the last digits and the country, never full card numbers | Contract |
| API keys | We store only a hash of each key | Contract |
| Request logs: time, endpoint, status, IP address, user agent, credits | Billing, support, security and abuse prevention | Contract, legitimate interest |
| Security audit log: logins, key and member changes, billing changes | Security and accountability | Legitimate interest |
| Emails we send you | Delivery and troubleshooting | Contract |
| Whether you want the monthly "What's new" email, and when you said so | Sending it only to people who asked | Consent |
How you found us, at sign-up: campaign tags in the link you followed (such as utm_source and an ad click id), the website that sent you, the first page you saw on our site, and your answer to "How did you hear about us?" (optional) |
Knowing which channels bring customers, so we spend on the right ones | Legitimate interest |
This website sets no cookies and stores nothing in your browser for tracking. Our analytics (PostHog, hosted in the EU) count page views and clicks without cookies and without identifying you. In the console and the API we record product events, such as signing up, a first API call or a purchase, under your user id, never your name or email. When you follow a link to sign up, the campaign tags of the link that brought you travel along in the sign-up link itself. The console uses a strictly necessary session cookie to keep you logged in.
Data about others in company results#
Company results come from LinkedIn company pages and web search results, and are about companies. Occasionally a result contains personal data, for example a sole trader's trade name or a business phone number. If you are such a person, you can ask us at hello@happyfetch.net to remove it, and we reply within 30 days.
Data about people you look up#
A person lookup returns a short summary of the LinkedIn profile a customer sends: name, location, the start of the About text, employers, schools and follower count. We keep it for 30 days after its last lookup, then delete it. If it's about you, email us at hello@happyfetch.net and we delete what we hold about you within 30 days.
How long we keep it#
| Data | Kept for |
|---|---|
| Raw request logs | 90 days, removed a month at a time, so up to about 120 days |
| Person profiles that customers looked up | 30 days after the last lookup |
| Contents of emails we sent | 7 days |
| Ledger, payment records and invoices | 7 years, as Dutch fiscal law requires |
| Account data | Until you ask us to close your account, then removed within 30 days, except records we must keep |
Who processes it for us#
- Stripe, for payments.
- Our email delivery provider.
- Our hosting provider. [To confirm which providers once hosting is chosen.]
- PostHog, our analytics provider, hosted in the EU.
Where a provider transfers data outside the EEA, it does so under the European Commission's standard contractual clauses or an adequacy decision.
Your rights#
You can ask for access to your data, correction, deletion, restriction, portability, or object to processing based on legitimate interest. Write to hello@happyfetch.net. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.