Does HawkOpen read the content of my emails?
Yes, as far as the functions you use need it: HawkOpen’s software sends your emails, adds tracking where it is switched on, checks incoming mail for replies and, if you read mail in HawkOpen’s inbox, loads your messages to show them to you. Reply detection itself reads only the headers of unread messages, such as sender, subject and reply identifiers, not the message text.
In which country or region is my data stored?
The draft data processing agreement (DPA) that every customer accepts names the European Union as the place of storage: Amazon Web Services, region eu-south-2 in Spain. It is still a draft awaiting legal review, and its list of sub-processors is marked as to be confirmed before publication.
What personal data does HawkOpen store, and does it keep the text of my emails?
Depending on the features you use: account and mailbox connection data, message and recipient data, classified opens and clicks, replies, campaign outcomes, documents you submit, and security and audit records. HawkOpen’s server also receives the full text of each email it tracks or sends, because it builds the tracked copy from it.
HawkOpen has not published one retention period for all of this; it depends on the type of data, the plan and legal or audit limits. The account owner can download or delete the account data with the account privacy tools.
Related questions: Does HawkOpen read the content of my emails? · How long does HawkOpen keep my data, including after I cancel? · Can I export all my data from HawkOpen?
Can I export all my data from HawkOpen?
Yes. The account owner can download an export of the account data as a file from the account privacy tools.
The file is in JSON, a structured text format that other programs can read. People who received your emails have their own privacy page, where they can download the tracking data about their address.
Related questions: How do I delete my HawkOpen account and my data? · How can a recipient see the tracking data about them or have it erased?
How do I delete my HawkOpen account and my data?
Request deletion in the account privacy tools: confirm with your password and the phrase DELETE MY ACCOUNT. HawkOpen deletes the account after a waiting period of at most 30 days, and you can cancel the request until then.
Before that, cancel an active subscription and hand over the ownership of any team you own. Records that must be kept for legal or audit reasons can limit what is deleted.
The browser extension is removed on your browser’s extensions page. Removing a connected mailbox in HawkOpen also asks Google or Microsoft to withdraw HawkOpen’s access.
Related questions: Can I export all my data from HawkOpen? · How long does HawkOpen keep my data, including after I cancel? · How do I cancel my HawkOpen subscription?
Does HawkOpen use my data to train AI models?
No. HawkOpen’s code does not train AI models and does not send your data to external AI services. Open and click verdicts come from fixed, named rules, and document analysis is plain text extraction with fixed rules.
Each verdict lists the codes of the rules that produced it, so you can see why an event was classified the way it was.
Related questions: Does HawkOpen sell or share my data, or use it for advertising? · What personal data does HawkOpen store, and does it keep the text of my emails?
Does HawkOpen use cookies on its website?
The public pages, legal pages and the signature generator set no analytics or advertising cookies. After you sign in, HawkOpen uses a secure session cookie to keep you signed in.
The signature generator works inside your browser and does not send what you type to HawkOpen. If you block the session cookie, you cannot stay signed in.
Related questions: What is the difference between a tracking pixel and a cookie? · Does HawkOpen sell or share my data, or use it for advertising?
Can I get a data processing agreement (DPA) with HawkOpen?
Yes. A data processing agreement (DPA, Article 28 GDPR) is one of the contract documents every customer accepts, on every plan, with one tick box together with the Terms, the Privacy Policy and the Message Tracking Terms; tracking stays locked until the current version is accepted. The DPA is still a draft awaiting legal review and is marked as such.
The draft names you as controller and HawkOpen’s operator, TriStiX S.L., as processor, and it states the place of storage (AWS region eu-south-2, Spain) and the sub-processors, marked as to be confirmed before publication. There is still no independent security assessment or penetration test summary. If your company needs the final version or these documents before connecting a mailbox, wait for them or ask HawkOpen through the contact details on its Terms / Imprint page.
Related questions: Which subprocessors does HawkOpen use? · In which country or region is my data stored? · What must a company do when it uses an email tracking tool: privacy notice, consent, contract with the provider?
Which subprocessors does HawkOpen use?
The draft data processing agreement (DPA) that every customer accepts lists them: Amazon Web Services EMEA SARL (hosting, database, file storage and system email, region eu-south-2 in Spain), Cloudflare (DNS and protection of all public addresses, including tracking requests) and Stripe Payments Europe (payments). The draft marks this list as to be confirmed before publication.
The DPA is still a draft awaiting legal review, and the public privacy page does not name these providers yet. If this matters for your contracts, read the draft DPA in the app before you connect a mailbox, and wait for the final version if you need a confirmed list.
Related questions: In which country or region is my data stored? · Can I get a data processing agreement (DPA) with HawkOpen?
How long does HawkOpen keep my data, including after I cancel?
HawkOpen has not published one retention period: it depends on the type of data, the plan, the account’s configuration and legal or audit limits. If you delete your account, HawkOpen erases it after a waiting period of at most 30 days.
Cancelling a subscription does not delete the account: the account moves to the Free plan. To have the data erased, request account deletion in the account privacy tools.
Related questions: How do I delete my HawkOpen account and my data? · What personal data does HawkOpen store, and does it keep the text of my emails?
Which law governs the HawkOpen contract, and where are disputes heard?
Spanish law, under the draft Terms of Service that every customer accepts (still awaiting legal review). For business customers the Spanish courts named in the Terms have exclusive jurisdiction; consumers keep the protection of the mandatory rules of their country and may sue and be sued in the courts where they live. HawkOpen is operated by TriStiX S.L., a company in Spain.
Mandatory consumer rights, such as the 14-day right of withdrawal in the EU, apply regardless of these clauses.
Only the English version of the Terms is binding; the versions in the other six languages are translations.
Related questions: Does HawkOpen have a service level agreement (SLA)? · Do I have a 14-day right to withdraw from a HawkOpen purchase in the EU or the UK? · Where are HawkOpen’s privacy notice, terms and imprint, and are they final?
Where are HawkOpen’s privacy notice, terms and imprint, and are they final?
The footer of every HawkOpen page links to Privacy, Terms / Imprint and Cookies, in English, Polish, German, Spanish and French. These pages describe the current controlled build; the production privacy notice will be reviewed for the final hosting, providers and countries before launch.
The website pages have no Portuguese or Italian version yet. The contract documents every customer accepts in the app (Terms of Service, Privacy Policy, data processing agreement and Message Tracking Terms) are drafts awaiting legal review, available in all seven languages; only the English version is binding. The legal pages also name the operator and its VAT ID.
Related questions: Which company operates HawkOpen, and where is it based? · Which law governs the HawkOpen contract, and where are disputes heard?
Does HawkOpen have a service level agreement (SLA)?
No. HawkOpen has not published a service level agreement or an uptime guarantee. The draft Terms say HawkOpen does not guarantee uninterrupted operation unless a separate service level is agreed for a paid plan, and the Free plan comes without a guaranteed availability level.
HawkOpen is in a controlled launch, so plan for occasional interruptions and keep your original emails in your own mailbox.
Related questions: Which law governs the HawkOpen contract, and where are disputes heard?
Which company operates HawkOpen, and where is it based?
HawkOpen is made and operated by TriStiX S.L., a company in Spain. Its VAT ID is shown in the footer of every HawkOpen page.
The company’s registered details are on the Terms / Imprint page. Where the company is based does not say where the data is stored; the hosting region is not published yet.
Related questions: In which country or region is my data stored? · Where are HawkOpen’s privacy notice, terms and imprint, and are they final?