Privacy Policy

Information we handle

• Accounts and access: name, email address, account identifier, client workspace membership, permissions, and authentication sessions. Clerk provides authentication and handles passwords; HedRoom does not store your password in its application database.
• Client work: campaign performance and advertising spend received from Meta, reports, tasks, project timelines, documents, and creative files supplied by clients or their agency. These are available to authorized workspace users and administrators.
• Device and service information: IP addresses and request information processed by our hosting and security providers, operational logs, account-change audit records, and app preferences. If you enable notifications, we store an Apple push token linked to your account, along with app/device registration information.
• Feedback: the message you submit, your account email, app version, device model, and iOS version. When a screenshot is available, the feedback form includes it by default. You can turn it off before sending. Nothing is submitted until you send the report; the screenshot may contain information visible on your screen.

How we use information

We use this information to authenticate users, enforce workspace access, deliver campaign reports and documents, manage client work, send requested notifications, respond to support requests, diagnose faults, and maintain the security and reliability of the service.

Campaign data describes advertising managed for clients. The iOS app does not use an advertising identifier or track you across other companies’ apps and websites. We do not sell personal information.

Providers and sharing

We use Clerk for identity and sign-in, Cloudflare for delivery and network security, and hosting, database, backup, file-storage, and issue-management services to operate HedRoom. These include Railway for standby hosting and Pomoi for uploaded files and optional feedback screenshots. Feedback is recorded in our issue-management system for the people maintaining the service.

Apple delivers push notifications and provides TestFlight distribution and its associated diagnostics. Meta supplies campaign information; creative files submitted for advertising may be sent to Meta as part of campaign management. Using HedRoom does not make your personal account a public advertising profile.

Providers receive information needed for their role. Their handling of information is also governed by their applicable privacy and data-protection terms. Processing may take place outside your country. We may also disclose information when required by law or necessary to protect users and the service.

Cookies, local storage, and device permissions

The website uses cookies and browser storage for sign-in and preferences such as language. Blocking authentication cookies can prevent sign-in. The iOS app stores authentication state and may keep a local dashboard snapshot and widget data to display previously loaded information.

Face ID and device-passcode checks are performed by iOS. HedRoom receives the authentication result, never your biometric data or device passcode. Notification permission is optional; you can change it in iOS Settings without losing access to the app. You can sign out and manage account sessions in Settings.

Retention and deletion

Account and client-work information is retained to provide the service and maintain the client relationship. You can request access, correction, account deletion, or deletion of personal information by emailing [email protected]. We may need to verify your identity and the workspace you are authorized to manage.

Removing an account revokes its access; it does not automatically delete a client’s shared campaign history, documents, audit trail, or previously submitted feedback. Uploaded files and feedback attachments do not currently expire automatically. Tell us which information your request concerns so we can address these records as well.

Some information may need to be retained for legal obligations, dispute resolution, security, or other authorized workspace users. Backup copies may remain until the applicable backup retention cycle ends. We will explain any limits that apply to your request rather than promise immediate deletion of every copy.

Your choices and contact

You can edit available account details in Settings, turn off push notifications in iOS, and leave screenshots out of feedback. To withdraw consent for optional processing or exercise privacy rights available in your jurisdiction, contact [email protected]. Some processing is necessary to provide an authenticated client portal.

HedRoom is intended for agency clients and their authorized team members, not for children. If you believe a child has supplied personal information, contact us so we can investigate and address it.

We will update this page when our practices change and revise the date above. Material changes will be communicated through the service or an appropriate account contact.