Privacy
Policy

The controller of personal data collected via the HeyBack.me platform is:

We process your personal data for the following purposes:

In accordance with GDPR, our data processing is based on the following legal bases:

• •Contract execution: processing necessary for the provision of the HeyBack.me service (account management, affiliation).
• •Legitimate interest: service improvement, security, fraud prevention, statistics.
• •Consent: marketing communications, non-essential cookies (you can withdraw your consent at any time).
• •Legal obligation: data retention required by law.

HeyBack.me does not sell your personal data. We may share your data in the following cases:

• •Affiliate partners: anonymized tracking data (click ID, timestamp) may be transmitted to commercial partners for commission validation. No directly identifying personal information (name, email) is transmitted without your explicit consent.
• •Technical providers: hosting (servers), analytics tools, transactional email services — these providers process your data only on our behalf and under our instructions.
• •Legal obligations: in case of legal obligation or request from a competent judicial or administrative authority.
• •Rights protection: in case of dispute or to protect our rights and those of our users.

As MarketingRevolution LLC is a US company, your personal data is processed and stored in the United States. For users residing in the European Union (EU) or European Economic Area (EEA), this transfer is carried out in compliance with applicable rules.

Transfers to the United States are governed by:

• •Standard Contractual Clauses (SCCs) approved by the European Commission, and/or
• •The EU-US Data Privacy Framework, where applicable.

You can obtain information about the safeguards in place by contacting us at privacy@heyback.me.

In accordance with GDPR (for EU/EEA users), you have the following rights:

If you believe your rights are not being respected, you have the right to lodge a complaint with your local data protection authority (e.g., CNIL in France).

HeyBack.me implements appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction or disclosure. These measures include:

• •Encryption of data in transit (HTTPS/TLS)
• •Password hashing (bcrypt)
• •Restricted data access to authorized persons only
• •Access monitoring and logging
• •Regular system updates and security patches

However, no system is infallible. In case of a data breach likely to result in a high risk to your rights and freedoms, we will inform you within the timeframes required by applicable regulations.

The HeyBack.me platform is intended for users aged at least 18 years. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, contact us immediately at privacy@heyback.me. We will delete this data as soon as possible.

If you reside in California, the California Consumer Privacy Act (CCPA) grants you specific rights:

• •Right of access : know the categories of data collected and their purposes.
• •Right to erasure : request deletion of your personal data.
• •Right to object : opt out of the sale of your data (HeyBack.me does not sell your data).
• •Consent: you will not suffer any discrimination for having exercised your CCPA rights.

To exercise these rights, contact us at privacy@heyback.me.

This privacy policy may be modified at any time to reflect legal developments or changes in our practices. The last update date is indicated at the top of this document. In case of substantial modification, we will inform you by email or via the platform.