HEROX legal
Privacy Policy
Last updated: 19 August 2026
What we collect
HEROX stores the email address you provide, country, assessment answers, calculated scores, report, subscription and payment references, access and operational metadata. We do not store payment-card details; Paddle processes payment information.
Why we use it
We use this data to calculate your result, create and deliver your report, maintain membership access, manage subscription status, prevent abuse, process refunds, support customers and understand aggregate product performance. Marketing email is separate and requires consent.
AI processing
After confirmed payment, the answers and deterministic HEROX signals required to create your initial report are sent to the configured AI provider. When you submit eligible monthly check-ins, the initial and current self-reported scores may be sent for a bounded progress interpretation. AI cannot alter your scores.
Processors and transfers
We use providers such as Paddle for subscription payments, Resend for transactional email, an AI provider for paid interpretation, and hosting/database providers. Their processing may occur outside your country under their applicable safeguards.
Retention and your choices
We retain purchased reports and transaction records while needed to provide access and meet legal obligations. You may request access, correction or deletion where applicable through Support. Some subscription and transaction records may need to be retained.
Private links
Result links act like passwords. Keep them private. We use hashed or cryptographically signed access tokens and reasonable technical controls, but no online system can guarantee absolute security.