Version 2026-09-30
Draft, pending legal review. Bracketed items in [square brackets] are still to be filled in.
This explains what personal data HertzReach, operated by [company legal name] and powered by ElevenHertz ("we", "us"), handles and why.
Your account data (your name, email address, password, workspace and billing details): we decide how this is used, and we are responsible for it.
Your contacts' data (the names, phone numbers, emails and notes you upload, and the messages and calls with them): you decide why and how it is used, and we process it on your behalf to provide the service. You are responsible for having a lawful basis and any consent needed to hold and contact these people.
To provide, secure and support the service; to send you service emails (invitations, password resets, verification); to bill you; to detect and prevent abuse; and to meet legal obligations. We do not sell personal data.
Only providers needed to run the service, under obligations to protect it: our messaging and voice provider (to deliver messages and calls), our email provider (for service emails), and our hosting and database providers [names to be confirmed]. We may disclose data where the law requires it.
Passwords are stored hashed, provider credentials are encrypted, and each customer's data is kept separate from others'. We keep data while your account is active and for a reasonable period after, then delete it, unless we must keep it for legal reasons [retention period to be confirmed].
Depending on where you live, you may be able to access, correct, export or delete your data. Contact us at [contact email]. If you are one of our customers' contacts, please contact that business first, as they control your data; if you reply STOP to a message, the sender must stop messaging you.
If we change this policy, the version above changes. Questions or requests: [contact email], [postal address].