Privacy Policy

Last updated: May 20, 2026

1. Who We Are

HeyOffice! is a real-time team chat application for Pipedrive, operated by Myndr, based in the Netherlands. This policy explains how we collect, use, and protect your information when you use our Service.

2. What We Collect

When you install and use HeyOffice!, we collect the following information through Pipedrive's OAuth integration: your name, email address, Pipedrive user ID, company ID, and profile picture URL. We also store the chat messages you send through the Service, including message text, timestamps, and channel associations. For billing purposes, we collect the number of active users in your Pipedrive account. If you enable push notifications, we store your browser push subscription endpoint.

3. How We Use Your Information

We use your information exclusively to operate the Service: delivering and storing your chat messages, authenticating your identity, sending @mention notifications via push or email, processing subscription billing through Stripe, and syncing your Pipedrive user count for per-seat billing. We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not read, analyse, or mine your chat messages.

4. Third-Party Services

We use the following third-party services to operate HeyOffice!: Pipedrive (authentication and user data via OAuth), Stripe (payment processing — we never store your card details), and standard web infrastructure providers for hosting. Each of these services has its own privacy policy governing their handling of your data.

5. Data Storage and Security

Your data is stored on servers located in the European Union. All data in transit is encrypted via TLS/SSL. Chat messages are transmitted over encrypted WebSocket connections (WSS). Push notification keys are encrypted using the VAPID protocol. We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, or destruction.

6. Data Isolation

All data is strictly isolated by Pipedrive company account. Users can only access messages from their own company. There is no cross-company data access. Conversations on a deal, contact, or organisation are visible only to members of your Pipedrive account.

7. Data Retention

We retain your chat messages and account data for the duration of your active subscription. If your subscription is cancelled, we retain your data for 30 days to allow reactivation. After this period, your data may be permanently deleted. You may request earlier deletion by contacting us.

8. Your Rights

Under the General Data Protection Regulation (GDPR), you have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, request a portable copy of your data, object to or restrict processing of your data, and withdraw consent at any time. To exercise any of these rights, contact us at the address below.

9. Cookies

HeyOffice! uses only essential session cookies required for authentication. We do not use tracking cookies, analytics cookies, or advertising cookies.

10. Children's Privacy

The Service is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes via email or through the Service. The "last updated" date at the top of this page indicates when the policy was last revised.

12. Contact

For privacy-related questions or to exercise your data rights, contact us at support@heyoffice.com.