Privacy, in plain English.
Last updated October 2026.
Who's responsible for your data.
Hello Revenue is operated by Hello Emma AB (org.nr 559194-6974), Norrköping, Sweden, which is the data controller for the personal data described here. For questions or requests about your data, write to the contact address shown at the bottom of this page.
What we collect about you.
Your account details (name, email, sign-in records), the product and company information you give us, the campaign content we build with you, performance data from the ad platforms you connect, and billing records. Card numbers never touch our systems; payment details go directly to our payment processor.
What we do with it.
We use your data to run the service: analyzing your product, generating and running campaigns, measuring how they perform, supporting you, and billing you. We don't sell personal data, and we don't use your data to advertise anyone else's products.
Who processes data for us.
A small set of processors help us run the service: authentication (Clerk), payments (Stripe), email delivery (Resend), hosting in the EU (Railway, Amsterdam region), the edge network that serves the pages and tracking we host (Cloudflare), meeting scheduling on pages that book calls (Calendly), the ad platforms you choose to connect (Meta, Google), and the AI infrastructure that powers campaign generation. Each processes data only to provide its function to us.
Google user data.
If you connect Google Calendar, we read only the free/busy times on your main calendar, so a booking page never offers a time you're busy. We also create the one event for each booking made through Hello Revenue, and delete it if that booking is cancelled or moved. We never read, list or change your other events, and we store only the IDs and Meet links of the events we created. Access tokens are encrypted. We don't sell this data, use it for advertising, or use it to train AI. Hello Revenue's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Visitors to pages we run for our customers.
When we host a landing page or tracking for a customer, data about visits and sign-ups on those pages (such as a lead's name and email) belongs to that customer; we process it on their behalf to run and measure their campaigns. If you submitted your details on one of those pages, the business you gave them to is your point of contact for them.
People who read our investor deck.
We used to show the deck we share with investors about our own funding round at /investors on our site. That page is gone, and nothing more is recorded there; we now share the deck only by a private link, with people we know. What the page recorded while it was up, we keep: which slides each reader read, how long they spent on each, how often they came back, and what they tried in its model, against an identifier their browser kept for our site, with the address of the page, the page that sent them there, their browser's name and version, and a one-way hash of their network address. No advertising platform's identifiers were kept with any reading. For a reader who gave us their name and email there, asked us for an audit, or opened a personal link we sent them, that reading is tied to them, with the audit they asked for and, if they said yes to updates on the round, the words they agreed to and when. We use it only for this round: to follow up with the people who read the deck, to send an audit someone asked for, and to send updates on the round to those who said yes. We keep it while it serves the round, and when you write to us asking, we erase your details and your reading of the deck.
Where your data lives.
Our core systems run in the EU. The pages and tracking we host are served through a global edge network so they load quickly everywhere, and some processors operate globally; where data leaves the EU, it does so under the safeguards the GDPR requires.
Your rights.
You can ask for a copy of your data, have it corrected or deleted, restrict or object to how it's processed, and take it elsewhere. Write to us and we'll handle it. If you're not satisfied with how we did, you can complain to your data protection authority. In Sweden, that's IMY.
How long we keep things.
Account data for as long as your account is active, and after that only what we're legally required to keep, such as bookkeeping records. Campaign and tracking data follows the customer account it belongs to.
Cookies and pixels on our site.
The site needs a few essential cookies to work. Beyond those, and only with your consent, our own pages use a small set of measurement pixels (such as Meta's) so we can measure our own marketing the way we measure our customers'. The consent banner is where you decide, and essential-only is a complete choice.
When this notice changes.
We post changes here, and for meaningful changes we email you.