Heroku

Privacy Policy

This Privacy Policy describes how Heroku ("we", "us", "our") collects, uses and protects personal information across the heroku.tech website and the services described on it. We keep the footprint deliberately small: we process personal information only where it serves a clear purpose, and we never sell it.

1. Information We Collect

Information you provide. When you submit a comment, contact request or newsletter signup, we process the details you provide: your name, work email address, company and message content. Comments also store a timestamp and the page you commented on. Email addresses attached to public comments are never displayed or published.

Information collected automatically. Like most websites, we process standard technical logs generated by requests to our servers: IP address, user-agent, referring URL and requested resources. These logs are used for stability, security and debugging, and are retained on a short rolling window. We do not use them to build advertising profiles.

Client account data. For contracted data services, account and delivery configuration details are processed under the terms of the relevant service agreement, which governs in the event of any conflict with this policy.

2. How We Use Information

We use submitted information to: display your comment on the page you submitted it to; respond to your contact request and route it to the right team; operate the newsletter subscription you requested; and protect the site against abuse. Where privacy law requires a lawful basis, we rely on your consent (when you voluntarily submit a form) and on legitimate interests (for the secure and reliable operation of the site).

We do not sell personal information, we do not share it with third parties for their marketing, and we do not use it for automated decision-making or profiling.

We share personal information only with the service providers that help us operate the site — hosting, email delivery and similar infrastructure — under contractual confidentiality and data-processing terms. We may additionally disclose information where required by law or to protect the rights, property and safety of Heroku, our users and the public.

4. Retention

Comments remain on the page they were submitted to until you ask us to remove them. Contact inquiries and related correspondence are retained for up to 24 months so we can maintain a record of the engagement. Newsletter subscriptions are retained until you unsubscribe. Technical logs are retained on a short rolling window consistent with operational need.

5. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete or export personal data we hold about you, to object to or restrict certain processing, and to withdraw consent at any time. To exercise any of these rights, contact privacy@heroku.tech and reference the email address you used; we respond within 30 days. If you are in the EEA or UK, you also have the right to lodge a complaint with your local supervisory authority.

6. International Transfers

We operate from the United States and maintain offices in the United Kingdom and Singapore, so personal information may be processed in any of these locations. Where personal data is transferred out of the EEA or UK, we rely on recognized safeguards such as the EU Standard Contractual Clauses.

7. Children

This site is not directed at children under 16, and we do not knowingly process data from children. If you believe a child has submitted data here, contact privacy@heroku.tech and it will be removed.

8. Changes and Contact

We may update this policy as our practices evolve; the revision date above reflects the latest version. Questions about this policy or our data practices can be sent to privacy@heroku.tech or by mail to 525 Market Street, Suite 2600, San Francisco, CA 94105.