Last Updated: June 4, 2026

Herospace (“we,” “us,” or “our”) operates the website herospace.com. We are committed to protecting your privacy and ensuring you have a secure experience when visiting our website or communicating with us.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our contact forms, or interact with our digital platforms.

Please read this Privacy Policy carefully. By accessing or using our website, you agree to the practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access the site or submit information through our forms.

1. Information We Collect

We collect information that you voluntarily provide to us when you fill out forms on our website or communicate with us directly.

A. Personal Information Provided by You

When you submit an inquiry through our Smart Contact Form, we collect the following personal details:

Name (First and last name)
Email Address
Organization / Company Name
Phone Number (Optional)
Job Role / Relationship (e.g., Small Business, Nonprofit, Civic Org)
Project Context (e.g., specific services requested, project description, timeline, and budget range)
Message Details (Any custom message text or project details you submit)

B. Automatically Collected Technical Data

When you navigate our website, we automatically collect certain technical information:

IP Address: Used for security auditing, rate limiting, and spam prevention.
Usage Details: Pages visited, duration of visits, original referrer URL (how you arrived at our site), browser type, and operating system.
Cookies: Small text files placed on your browser to enhance site performance and remember user preferences.

2. How We Use Your Information

We use the information we collect for specific, legitimate business purposes, including:

Responding to Inquiries: To review, validate, and respond to your project requests or questions.
Service Personalization: To understand which services or case studies interest you, allowing us to provide highly relevant responses.
Website Performance & Security: To protect our site from spam, fraud, and abuse (using automated honeypots, rate limiters, and submission-speed checks).
Analytics and Optimization: To monitor traffic patterns and user behavior so we can improve our content, layouts, and services.

3. Third-Party Services & Data Sharing

We do not sell, rent, or trade your personal information to third parties. We share data only with trusted service providers who help us operate our website and run our business.

A. Email Processing (Brevo)

We route transactional contact form notifications through Brevo (formerly Sendinblue), a third-party email delivery service.

Scope: The details you submit in the contact form are sent to Brevo to compile and route the notification to our team.
Privacy: Brevo is GDPR-compliant and bound by data processing agreements to keep your information secure and private.

B. Analytics and Tag Management (Google Analytics 4 & Google Tag Manager)

We use Google Analytics (GA4) and Google Tag Manager (GTM) to understand website usage:

PII Protection: Our tracking implementation is strictly configured to ensure that no Personally Identifiable Information (PII) (such as names, emails, company names, or messages) is sent to Google Analytics or Google Tag Manager.
Anonymization: We utilize IP anonymization and safe metadata parameters (source_type, interest, audience, cta, referer) to analyze site conversions anonymized.

4. Data Security and Spam Prevention

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

Encryption: Our website uses Secure Sockets Layer (SSL/TLS) encryption (HTTPS) to secure all data transmissions.
Spam Protection: We use non-intrusive security checks (honeypots, rate-limiting, and form interaction validation) to block automated submissions. Your IP address is hashed locally to log form attempts without archiving raw IP logs permanently.

5. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy:

Contact Form Submissions: Retained for the duration of our business communication or project scoping.
Security Logs: Delivery metadata (excluding personal form fields) is kept for up to 30 days for security auditing and debugging.

6. Your Privacy Rights (GDPR / CCPA / CalOPPA Compliance)

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request that we correct any inaccurate or incomplete personal information.
Right to Erasure (Right to Be Forgotten): You can request that we delete your personal data from our systems.
Right to Opt-Out: You can opt-out of cookies and non-essential analytical tracking at any time.

To exercise any of these rights, please contact us at hello@herospace.com.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or compliance with new legal requirements. Any updates will be posted on this page with an updated “Last Updated” date.

8. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Herospace
Email: hello@herospace.com
Website: herospace.com