Privacy policy.

Information we collect

We collect two categories of information. The first is what you actively share with us — your name, work email, company, message content, and any files you attach when you complete a form on this site, book a discovery call, subscribe to The Brief, or apply for an open role. If you engage us for a paid engagement, we also collect the contract, invoicing, and delivery information required to run the relationship.

The second is what your browser and our infrastructure automatically records — IP address, coarse geo location, device and browser identifiers, and the pages you visit on our site. We use this to keep the site available and to understand which content is useful.

How we use it

To reply to the note you sent us, run the engagement you asked for, and keep you informed about the work we're doing together.

To operate and improve the marketing site — troubleshooting, analytics, and the editorial decisions we make about which briefs to publish.

To send you The Brief if you subscribed. You can unsubscribe from any issue with the link at the bottom of the email, and we honour that within one business day.

Third-party services we rely on

Formspree receives the contents of every form submission on this site so we can act on it. Calendly runs the discovery-call booking flow on the Contact page. Both process data on our behalf under their respective data-processing terms.

We host the site on Vercel and use Cloudflare as our edge network. We use standard business email, calendaring, and document-collaboration tooling (Google Workspace and Microsoft 365) for internal work. We do not sell, rent, or share your personal information with third parties for their independent marketing.

Data retention

Prospect notes and Calendly invitations are retained for as long as the relationship remains active, plus a further 24 months. Newsletter subscriber records are retained until you unsubscribe.

Records associated with paid engagements are retained for the term of the engagement plus the period our regulatory or contractual obligations require — typically seven years for financial records.

Your rights

Depending on where you live, you may have rights to access, correct, delete, port, or object to certain processing of your personal information. If you'd like to exercise any of these, write to privacy@headify.com from the email address you originally used to contact us, and we'll respond within 30 days.

If you are in the EEA, the UK, Switzerland, California, or India, additional local rights may apply — including the right to lodge a complaint with your local data-protection authority.

Security

We take reasonable and appropriate steps to protect personal information from loss, misuse, unauthorised access, disclosure, alteration, and destruction. Employee access is scoped to what's necessary for the work. Client data handling is described in more detail on our Trust page.

Children

Headify does not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete the record.

Changes

When we update this policy we update the 'Last updated' date at the top. If we make material changes we will surface them to active prospects and clients over email.

How to reach us

Send questions or requests to privacy@headify.com or write to Headify, 2916 East Bryce Lane, Phoenix, AZ 85050, USA. Our authoritative site is https://headify.in.