Privacy Policy
Heatpass is a Wrinkledot LLC product. This page says what we keep about you, why, and who else sees it.
Effective · Last updated
Your account
Your name, email and company name. You sign in with a one-time code we email you, which works for 10 minutes; we keep only a scrambled copy of each code, and delete it after 2 days. We use these to sign you in and run your account. When you sign up, we record that you accepted the Terms, and when.
If you sign in with Google, Google sends us your name, your email and whether Google has verified it, and an id for your Google account, which we keep so we recognize you next time. We don't get your Google password or anything else from your Google account.
Your work in Heatpass
What you add while you work: pipeline stages, notes, details you record about a restaurant (such as a contact you met there), the cities you pick, and the screen you were on so you can pick up where you left off. Only people on your team's account can see it. We don't use it for anything else and we don't share it.
Trials
To keep the free trial fair, we count how many restaurants' contact details you open each day and during the trial. We check that only one trial starts per company email domain each week, and that check keeps a scrambled code of the domain (not the domain itself) for 7 days, then deletes it. If you sign up with a personal email address such as Gmail, the trial opens fewer contact details. We may also check that a trial isn't restarted from the same device or the same network: for that we keep a scrambled code of a random id your browser stores and of the first part of your internet address (the network, not your exact address), for 7 days, then delete them.
Exports
When you download a file, we record what was exported, when, by whom and from which internet address (kept for 13 months). Each file is marked as yours. We do this to count your plan's export rows and to stop our data being copied in bulk.
Payments
Stripe handles payments. We never see or store your card number. We keep your plan, its status and your billing dates, any payment disputes, and a record of the boxes you ticked before paying (the words, the Terms version and when).
Emails
We email you about your account: your sign-in codes, a note when your account is signed in to from somewhere new or its email changes, and billing emails such as plan confirmations, payment problems, renewal reminders and changes to your plan. If a teammate invites you, we email you the invite. Cloudflare delivers them for us. We don't send marketing email.
Security records
To keep accounts safe, we count sign-in code requests and wrong codes by email and by network (a scrambled code of your internet address that changes every day), keep those counts for 2 days, and stop requests when there are too many. We also count how many pages of restaurants each signed-in person loads per minute, and each person can be signed in on at most 2 devices at once. On the sign-in page, Cloudflare checks that you're a person and not a bot.
For each sign-in we note the country and the network it came from (the internet provider, not your address), so we can email you when you sign in from somewhere new. We keep that list until you delete your account.
The restaurant data
Heatpass lists restaurants from public sources: open map data, government open data (business licenses and inspections), and restaurants' own public websites, which we read politely and only where their robots.txt allows. It describes businesses, not you. To have a listing removed, or to report one as wrong, a copyright problem or abuse, use Report or remove or write to privacy@heatpass.app. We take a listing down within 10 business days, or within 72 hours for a judge or other protected official, and answer other reports within 2 business days. We keep the email you give us to reply to, and what you write, until we close your request, then delete them 90 days later.
Who else sees your data
Only the services that run Heatpass for us: Cloudflare (hosting, email delivery and the sign-in check) and Stripe (payments). If you sign in with Google, Google knows you did. Map images load from OpenFreeMap, which sees your internet address when a map loads. We don't sell your data, and we don't use it for ads.
Keeping and deleting
We keep your data while your account is open. You can delete your account and your work on your Account page, or ask us at privacy@heatpass.app. So that deleting and signing up again can't restart the free trial, we keep a scrambled code of the deleted account's email, and of any email you changed away from (not the emails themselves), for 90 days, then delete it. Some records stay after a deletion request because the law requires them: billing and tax records (your plan, what you paid and when), kept as long as tax law requires, usually up to 7 years. Stripe, our payment processor, keeps the payment records and card details; we keep the plan and payment history that goes with them. We never see your card number. The record that you accepted the Terms (your email, the Terms version and when) is kept for as long as we might need to show it, usually up to 7 years, then deleted.
What you note about a restaurant you saw in person (“You saw”) is private to your account and deleted with it. If you report a listing as wrong, we use the report to recheck and fix that listing; other customers never see it. A note you add to a report is kept while your account exists. Deleting your account deletes the note and unlinks the report from you; the rest of the report stays as information about the business.
When a trial or plan ends, your account and your work stay until you delete the account.
Children
Heatpass is for business use by adults. It isn't meant for anyone under 18, and we don't knowingly collect their information.
Changes
If we change this page in a way that matters, we'll email account owners at least 14 days before it takes effect. Small edits only move the “Last updated” date.
Contact
Wrinkledot LLC, 502 W 7th St, Ste 100, Erie, PA 16502, United States. Privacy questions and requests: privacy@heatpass.app. Anything else: support@heatpass.app.
See also: Terms of Service