# Privacy policy — Hellofew

> A machine-readable summary. The operative document is the HTML page at
> https://hellofew.com/legal/privacy, and it governs. Nothing here is a substitute for reading it.

Entity: Hellofew, Bengaluru, India.
Contact: adarsh@hellofew.com. Privacy: adarsh@hellofew.com.
Last updated: 2026-09-11.

## Retention

| Data | Kept for |
|---|---|
| Account and workspace records | For as long as the account exists |
| ICP and drafts | For as long as the account exists |
| Prospect records (name, headline, employer, public profile) | While the lead is active, then 12 months |
| Provider payloads fetched from LinkedIn | 30 days |
| Activity ledger (what was sent, when, to whom) | 24 months |
| Warning and error logs | 14 days |
| Resolved incidents | 90 days |
| Aggregate daily counters (no personal data) | Indefinitely |
| Suppression list (do-not-contact) | Indefinitely, by design |
| Backups | 30 days |

## Never stored

- Your LinkedIn password
- Your LinkedIn two-factor codes
- Your LinkedIn session cookies
- Your card number or bank details

## Roles

For customer account data we are the controller. For the data of people a
customer contacts, the customer is the controller and we are the processor.

## Removal

Anyone contacted through Hellofew can ask to be removed, by replying to the
message or emailing adarsh@hellofew.com. They are added to a global
do-not-contact list within one working day. Global means across every customer,
not only the one who contacted them. That list is the one thing retention never
deletes, because deleting it would re-expose the person who asked to be left
alone.

## Sub-processors

- **Hetzner Online GmbH** — Hosting: application servers and the database. Sees: All service data. Germany 🇩🇪.
- **Unipile** — Holds the LinkedIn session and performs LinkedIn actions on the customer's behalf. Sees: LinkedIn credentials and session, profile data of the customer and the people they contact. France 🇫🇷.
- **Anthropic** — Large language model inference: writing ICPs and outreach drafts. Sees: Public web page text, prospect profile fields, and the drafts generated from them. United States 🇺🇸.
- **Dodo Payments** — Subscription billing and merchant of record. Sees: Name, email, billing address, payment details. United States / global.
- **Resend** — Transactional email: sign-in, alerts, digests. Sees: Email address, message content. United States 🇺🇸.
- **Cal.com** — The booking calendar on the marketing site, for the intro call. Sees: Name, email and timezone given when booking; IP address and browser of visitors who load the calendar. United States 🇺🇸.
