Privacy Policy
Last updated 4 November 2026
This policy explains what personal data Heardex collects, why, who it is shared with and what you can do about it. Heardex is operated by Raxit Singh, India, who is responsible for your data. Contact: support@heardex.com.
What we collect
- Account details: your email address, your name if you give it, and, if you sign in with Google, the basic profile Google shares (name, email, picture).
- Workspace content: product and competitor names, keywords, settings, saved views and notes you add, and who is a member of each workspace.
- Connections you choose to add: for example a GitHub or Discord connection. Their access tokens are stored encrypted.
- Billing details: your plan, subscription status and Dodo Payments customer id. Card details are entered on Dodo Payments’ checkout and never reach us.
- Technical data: sign-in sessions, IP address and browser information in server logs, kept for security and fixing errors.
- Public mentions: public posts that contain your keywords, collected from public sources. They can include the author’s public username and what they wrote.
Why we use it
- To provide Heardex: run your account, search for your keywords, store and sort mentions, and send the reports you ask for.
- To take payment and manage your subscription.
- To keep Heardex secure, prevent abuse and fix problems.
- To email you about your account, billing and important changes. We don’t send marketing email without your consent.
We do this because it is needed to provide the service you signed up for, and, for security and abuse prevention, because we have a legitimate interest in it. We don’t sell personal data and don’t use it for advertising.
Who we share it with
Only with the services that run Heardex, each for its own part:
- Supabase: database and sign-in.
- Vercel: hosting the website and app.
- Dodo Payments: checkout, subscriptions, invoices and tax, as merchant of record.
- Google (Gemini API): AI sorting and summaries of mentions.
- Resend: sending account and report emails.
- Search providers (such as API Direct, Serper and TikHub): they receive your keywords, not your account details, to search public sites.
Some of these services store data outside India, including in the United States and the European Union. We may also disclose data where the law requires it.
How long we keep it
We keep your data while your account exists. Stored mentions are kept for the history your plan includes. When you delete your account in Settings → Account, the workspaces you own and their data are deleted. Billing records are kept by Dodo Payments for as long as tax law requires.
Cookies
Heardex uses only the cookies it needs: to keep you signed in and to remember which workspace and product you last opened. Your light or dark theme is kept in your browser’s storage. There are no advertising or tracking cookies.
Your rights
You can see and change most of your data in the app, export reports as CSV, and delete your account at any time. You can also email us to ask for a copy of your data, a correction, deletion, or to object to how we use it. We reply within 30 days. Depending on where you live, including under India’s Digital Personal Data Protection Act and the GDPR, you can also complain to your data protection authority.
If you wrote a public post that Heardex has collected and want it removed from Heardex, email us with a link to it.
Security
Data is encrypted in transit, connection tokens are encrypted at rest, and each workspace’s data is kept apart by database access rules. No system is perfectly secure; if a breach affects you, we will tell you.
Children
Heardex is not for anyone under 18, and we don’t knowingly collect their data.
Changes
We will update this page when our practices change, and email account owners about significant changes.