Privacy Policy
Effective date: 1 September 2026
Last updated: 1 September 2026
1. Who We Are
Headwind s.r.o. ("we," "us," or "our") operates Headwind (the "Service"), a service that lets users join a pre-launch waitlist and, when available, track selected companies and receive alerts about significant negative company news.
Headwind s.r.o. is the controller of the personal information described in this Policy.
Contact: support@getheadwind.com
Business location: Bratislava, Slovakia
Website: getheadwind.com
2. Information We Collect
We collect only the information reasonably needed to operate and protect the Service.
| Category | Examples | Purpose |
|---|---|---|
| Waitlist information | Email address | Reserve your place, contact you about access or launch, and manage the waitlist |
| Account information | Email address and account identifier | Create, authenticate, and maintain your account when account access is available |
| Preferences | Companies or ticker symbols you follow and alert-severity settings | Provide the monitoring and alerts you request |
| Communications | Information you include when contacting us | Respond to requests and provide support |
| Service records | Alert status, delivery status, security records, and error or application logs | Operate, secure, diagnose, and improve the Service |
| Network and device information | IP address, request metadata, browser or device information | Deliver and secure the Service, prevent abuse, and diagnose problems |
| Advertising measurement | Browser and device identifiers, network information, the page address, and the fact that you viewed the page, viewed pricing, opened the waitlist form, or joined the waitlist | Measure and optimize our advertising, only if you accept advertising cookies |
When you submit the waitlist form, we use your IP address to create a keyed, non-reversible identifier for rate limiting. We store the identifier rather than the IP address itself in the waitlist database. Hosting and network providers may separately process IP addresses and request metadata as part of delivering and securing the website.
You are not legally required to provide this information. However, without the information needed for a requested feature, we may not be able to add you to the waitlist, create an account, or send alerts.
3. Company News and Automated Analysis
The Service obtains company-news information from third-party news or financial-data sources. This may include headlines, summaries, publication details, links, ticker symbols, and company information.
Automated systems, which may include artificial intelligence, analyze this company and news information to determine whether an article may be negative and significant. This analysis is designed not to include your identity, email address, or account profile. Your preferences are applied separately to determine whether an alert should be sent to you.
This analysis is not used to make decisions about your eligibility for employment, credit, housing, insurance, education, or another matter that produces legal or similarly significant effects concerning you.
4. How and Why We Use Personal Information
We use personal information to:
- manage the waitlist and contact people who asked to hear about access or launch;
- create and maintain accounts;
- store watchlists and alert preferences;
- send requested alerts and service communications;
- provide support;
- protect the Service, enforce rate limits, prevent abuse, and troubleshoot errors;
- measure and optimize our advertising, if you accept advertising cookies;
- comply with law and enforce our agreements; and
- maintain and improve the reliability of the Service.
Where the GDPR, UK GDPR, or another law requires a legal basis, we rely on:
| Purpose | Legal basis |
|---|---|
| Manage the waitlist and send requested waitlist updates | Your consent |
| Create an account, store preferences, and provide requested alerts | Performance of a contract or steps taken at your request before entering a contract |
| Security, abuse prevention, service reliability, and troubleshooting | Our legitimate interests in operating and protecting the Service |
| Comply with legal requirements | Compliance with a legal obligation |
| Send optional promotional communications | Your consent where required |
| Advertising measurement and optimization | Your choice in the cookie banner, which you can change at any time |
You may withdraw consent to waitlist or promotional emails at any time by contacting support@getheadwind.com or using an unsubscribe method included in the message.
5. How We Share Information
We do not sell personal information for money.
Advertising cookies are active until you reject them. While they are active, Meta Platforms receives the advertising-measurement information described in Sections 2 and 8 and may use it to measure and optimize our advertising. Under some laws, including California law, this may be treated as "sharing" for cross-context behavioural advertising or as a "sale". Once you reject, this information is no longer sent. You can reject or withdraw at any time through Cookie settings at the bottom of any page.
We disclose personal information only as needed to providers that help us with:
- website and application hosting;
- database storage and authentication;
- email delivery;
- security, monitoring, job processing, and technical operations; and
- customer support.
These providers may process information only to provide services to us and are subject to applicable contractual and legal protections.
We may also disclose information when required by law, to protect the rights or safety of users or the Service, as part of a business transaction such as a merger or sale, or at your direction or with your consent.
6. International Transfers
Some providers may process information outside the country where you live. Where transfer restrictions apply, we use a legally recognized mechanism, such as an adequacy decision, standard contractual clauses, or another valid safeguard. You may contact us for more information about safeguards relevant to your information.
7. Retention
We retain personal information only while it is needed for the purposes described above:
| Data | Retention approach |
|---|---|
| Waitlist email | Until it is no longer needed to manage pre-launch access, or until you unsubscribe or request deletion |
| Waitlist rate-limit identifier | Used for a ten-minute rate-limit window; expired records are removed during subsequent cleanup |
| Account and preference data | For the life of the account, then deleted or de-identified unless continued retention is legally required |
| Alert and delivery records | While needed to deliver alerts, prevent duplicate delivery, troubleshoot problems, or meet legal requirements |
| Support communications and operational logs | While reasonably needed to resolve the matter, secure and operate the Service, or meet legal requirements |
| Advertising cookie choice | Stored only in your browser and expires after 180 days, after which we ask again |
Deleted information may remain in restricted backups until those backups are overwritten through the ordinary backup cycle. Providers may also retain limited records according to their own security, legal, and operational requirements.
8. Cookies and Similar Technologies
We use advertising cookies and similar technologies from Meta Platforms (the Meta Pixel) to measure whether our advertising leads people to join the waitlist. We use no other non-essential analytics, no session-replay tools, and no tag manager. Network and hosting systems may use strictly necessary technologies to deliver and protect the Service.
Your choice. The Meta Pixel is active until you reject it. A banner explains the choice, and Cookie settings at the bottom of every page lets you accept or reject at any time. When you reject or withdraw, we stop sending events, ask Meta to revoke its consent signal, and delete the Meta cookies we can access for this website. Your choice is stored only in your browser, expires after 180 days, and is never written to our database. If the stored choice is missing, expired, or unreadable, we ask again.
What Meta may receive while the Pixel is active. Browser and device identifiers, network information including your IP address, the address of the page you are on, and a small number of explicit events: that you viewed the homepage, that you scrolled to pricing, that you opened the waitlist form, and that you joined the waitlist. Measurement runs only on the public homepage; legal pages, sign-in, and any future account pages are excluded. We have turned off Meta's automatic advanced matching and automatic event detection.
What Meta never receives from us. Your email address, any hash of it, your watchlist, ticker symbols, account details, or any financial information. The waitlist works exactly the same whether you accept, reject, or block Meta entirely.
Purpose. Advertising measurement and optimization only.
Meta Platforms is a recipient of this information and acts for its own purposes as well as ours. It may process the information outside the country where you live, including in the United States. See Section 6 and Meta's own privacy materials for details.
If we introduce account sessions, other analytics, or further non-essential technologies, we will update this Policy and provide any choices required by law before using them.
9. Security
We use reasonable administrative, technical, and organizational measures intended to protect personal information, including access controls and restricted server-side access. No storage or transmission method is completely secure, so we cannot guarantee absolute security.
10. Your Rights
Depending on where you live, you may have the right to request access to, correction of, deletion of, restriction of, or a portable copy of your personal information. You may also have the right to object to certain processing, withdraw consent, or appeal a refusal of a request.
To exercise a privacy right, contact support@getheadwind.com. We may need to verify your identity and will respond within the period required by applicable law. We will not unlawfully discriminate against you for exercising a privacy right.
If the GDPR or UK GDPR applies, you may lodge a complaint with the data-protection authority where you live or work or where you believe an infringement occurred. In Slovakia, this is the Office for Personal Data Protection of the Slovak Republic. In the United Kingdom, this is the Information Commissioner's Office.
11. Children
The Service is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided personal information, contact support@getheadwind.com.
12. Changes to This Policy
We may update this Policy when the Service, our practices, or legal requirements change. We will publish the updated version with a revised “Last updated” date and provide additional notice when required by law.
13. Contact Us
Questions and requests can be sent to:
Headwind s.r.o.
Bratislava, Slovakia
Email: support@getheadwind.com
Website: getheadwind.com