Privacy Policy

Free tools on heynews.co

When you use a calculator at heynews.co/tools, you give us your email address and the numbers you enter. We use them to email you your results and to add you to the HeyNews newsletter. Getting the results includes that subscription, and every issue has an unsubscribe link. Customer.io sends the results email and keeps a record of the send. beehiiv holds your newsletter subscription. Cloudflare Turnstile checks the form for automated abuse, which involves your IP address and browser signals. To limit how many emails one address can receive, we keep a one-way hash of your address for up to two days. We do not add your address to our analytics tools.

Inboxbid (inboxbid.lol):

HeyNews LLC operates inboxbid.lol, a permanent bidding leaderboard for email newsletters. This Privacy Policy covers inboxbid.lol as well as heynews.co. Payments made on inboxbid.lol are billed by HeyNews LLC and appear on card statements as "HEYNEWS* INBOXBID". The paragraphs below describe what inboxbid.lol collects in addition to the rest of this Policy. This Inboxbid section takes effect when this version is published.

Payments. Card payments on inboxbid.lol are processed by Stripe through Stripe Checkout. We never receive or store your card number. Stripe gives us an email address entered during checkout, including for an unfinished Checkout session when Stripe returns that address to us. If you leave before giving Stripe an email address, the Inboxbid cancel page lets you give the address directly to us. We send abandoned-checkout addresses to Customer.io for follow-up and do not store cancel-page submissions in the Inboxbid database. We use email to send receipts, support payments, and follow up on unfinished checkouts. We keep a record of every checkout attempt and every settled payment, including the amount, the rank claimed, and any later refund or dispute. If you ask us not to use your address for follow-up, write to privacy@heynews.co.

Listing content is public. The name, description, website address and logo you supply for a listing are published publicly on the board and are readable by anyone, including search engines and AI crawlers. Do not put information in those fields that you are not willing to publish.

A listing is permanent. It can be outranked by a higher bid, but it is never removed and there is no self-serve delete. A settled bid is a payment record we are required to keep for tax and accounting purposes, so a request for erasure cannot reverse a payment or unpublish the fact that it happened. Where the law gives you a right of erasure, we will act on it for the personal data we hold alongside a listing, such as the payer email address and active receipt access credentials. An authorized payer can request reviewed corrections to listing details through the private receipt. The listing remains permanent, and a requested change is not automatic. Write to privacy@heynews.co to make a privacy request.

Receipts and cookies. Your private receipt can be opened in two ways. The browser that completes checkout receives a short-lived receipt cookie after the Stripe return is verified for that browser. We also email a single-use recovery link. Opening that link on any browser exchanges it for a new short-lived receipt cookie. The links and cookies are strictly necessary for receipt access, are not used for advertising, and expire.

Review and click counts. We review listings for eligibility and may hide one from public view; the board and its published metadata disclose that review. We also count outbound clicks on each listing, totalled per listing per day, so that whoever paid for a seat can see the traffic it delivered. That count records no visitor identity.

Service providers for inboxbid.lol. We use Cloudflare for hosting, the database and file storage, Stripe for payments, Customer.io for receipt and follow-up email and for browser analytics, DataFast for analytics including reporting of AI crawler visits, and AlterLab together with OpenRouter to read the public page a listing links to and draft a description of it. For the Customer.io analytics stream, inboxbid.lol stores a persistent random identifier in your browser's local storage and sends it to Customer.io with page paths, scrubbed referrers and allowlisted product events. Customer.io also receives the request's IP address and user agent. Each provider processes information only on our behalf and for those purposes.

Newsletter Hosting: data we process for our customers

When HeyNews LLC hosts a newsletter publication, the publisher decides why and how its subscribers' data is used. The publisher is the controller and HeyNews LLC is its processor. If you subscribe to a newsletter we host, the publisher's own privacy notice applies to you, and you should send privacy requests to the publisher. If you write to us, we will pass your request on.

For our customers we process subscribers' email addresses and names, the subscription source and time, consent records, email delivery events (sent, delivered, bounced, complained, opened and clicked), the IP address and browser details recorded with opens, clicks and site visits, and the result of an address verification check. We use this data only to host the publication, send its email, protect deliverability, and handle bounces and complaints. We do not sell it, and we do not use it for our own marketing.

Our sending system keeps the content of each email for up to 3 days and its raw delivery events for up to 60 days. It keeps each subscriber's send history (delivered, bounced, complained, opened and clicked) while the publisher's account is active. Server backups are kept for up to 7 days. When Newsletter Hosting ends, we delete the publication and its subscriber data as our Terms of Service describe.

The providers who help us run Newsletter Hosting are listed at heynews.co/subprocessors. Our Data Processing Agreement is at heynews.co/dpa.