# HawkOpen — Questions and answers (English)
> Short, checked answers about email tracking, read receipts, campaigns, documents and signatures, plans, privacy and the law. Each answer says what the product does today.
> This information is general and concerns the features of HawkOpen (TriStiX S.L.). It is not individual legal advice or an assessment of whether a specific campaign or document complies with the law. Customers make their own decisions about their activities and, where needed, consult a qualified specialist. This does not limit any rights they have under mandatory law.
URL: https://hawkopen.com/en/faq
JSON: https://hawkopen.com/en/faq.json
Checked: 2026-11-13
## Your data
What HawkOpen reads in your mailbox, which data it handles and where it is stored.
URL: https://hawkopen.com/en/faq/data-privacy
### Does HawkOpen read the content of my emails?
URL: https://hawkopen.com/en/faq/data-privacy/does-hawkopen-read-my-emails
Yes, as far as the functions you use need it: HawkOpen’s software sends your emails, adds tracking where it is switched on, checks incoming mail for replies and, if you read mail in HawkOpen’s inbox, loads your messages to show them to you. Reply detection itself reads only the headers of unread messages, such as sender, subject and reply identifiers, not the message text.
To do this HawkOpen needs access to your mailbox. Gmail connects with Google’s full mail permission, the one Google requires for IMAP and SMTP; Outlook connects with IMAP and SMTP permissions; other mailboxes with their own IMAP and SMTP login.
The privacy page lists the data HawkOpen may handle depending on the features you use, such as message and recipient metadata, open and click observations, replies and documents you submit. The account privacy tools let the account owner export or delete account data.
Related questions: [In which country or region is my data stored?](https://hawkopen.com/en/faq/data-privacy/where-is-my-data-stored), [Is an email tracker extension safe to use?](https://hawkopen.com/en/faq/security/is-email-tracker-extension-safe)
Checked: 2026-11-11
### In which country or region is my data stored?
URL: https://hawkopen.com/en/faq/data-privacy/where-is-my-data-stored
The draft data processing agreement (DPA) that every customer accepts names the European Union as the place of storage: Amazon Web Services, region eu-south-2 in Spain. It is still a draft awaiting legal review, and its list of sub-processors is marked as to be confirmed before publication.
HawkOpen is made by TriStiX S.L., a company in Spain. The public privacy page does not name the hosting region yet; it says the final list of providers, the hosting region and the transfer safeguards will be published before the production services are switched on.
If the hosting location matters for your contracts, read the draft DPA in the app before you connect a mailbox, and wait for the final version if you need a confirmed one.
Related questions: [Does HawkOpen read the content of my emails?](https://hawkopen.com/en/faq/data-privacy/does-hawkopen-read-my-emails), [Does HawkOpen have security certifications?](https://hawkopen.com/en/faq/security/does-hawkopen-have-security-certifications)
Checked: 2026-11-12
### What personal data does HawkOpen store, and does it keep the text of my emails?
URL: https://hawkopen.com/en/faq/data-privacy#what-personal-data-does-hawkopen-store
Depending on the features you use: account and mailbox connection data, message and recipient data, classified opens and clicks, replies, campaign outcomes, documents you submit, and security and audit records. HawkOpen’s server also receives the full text of each email it tracks or sends, because it builds the tracked copy from it.
HawkOpen has not published one retention period for all of this; it depends on the type of data, the plan and legal or audit limits. The account owner can download or delete the account data with the account privacy tools.
Related questions: [Does HawkOpen read the content of my emails?](https://hawkopen.com/en/faq/data-privacy/does-hawkopen-read-my-emails), [How long does HawkOpen keep my data, including after I cancel?](https://hawkopen.com/en/faq/data-privacy#how-long-does-hawkopen-keep-my-data), [Can I export all my data from HawkOpen?](https://hawkopen.com/en/faq/data-privacy#export-my-hawkopen-data)
Checked: 2026-11-11
### Can I export all my data from HawkOpen?
URL: https://hawkopen.com/en/faq/data-privacy#export-my-hawkopen-data
Yes. The account owner can download an export of the account data as a file from the account privacy tools.
The file is in JSON, a structured text format that other programs can read. People who received your emails have their own privacy page, where they can download the tracking data about their address.
Related questions: [How do I delete my HawkOpen account and my data?](https://hawkopen.com/en/faq/data-privacy#delete-my-hawkopen-account), [How can a recipient see the tracking data about them or have it erased?](https://hawkopen.com/en/faq/recipients#how-can-a-recipient-get-or-erase-their-tracking-data)
Checked: 2026-11-11
### How do I delete my HawkOpen account and my data?
URL: https://hawkopen.com/en/faq/data-privacy#delete-my-hawkopen-account
Request deletion in the account privacy tools: confirm with your password and the phrase DELETE MY ACCOUNT. HawkOpen deletes the account after a waiting period of at most 30 days, and you can cancel the request until then.
Before that, cancel an active subscription and hand over the ownership of any team you own. Records that must be kept for legal or audit reasons can limit what is deleted.
The browser extension is removed on your browser’s extensions page. Removing a connected mailbox in HawkOpen also asks Google or Microsoft to withdraw HawkOpen’s access.
Related questions: [Can I export all my data from HawkOpen?](https://hawkopen.com/en/faq/data-privacy#export-my-hawkopen-data), [How long does HawkOpen keep my data, including after I cancel?](https://hawkopen.com/en/faq/data-privacy#how-long-does-hawkopen-keep-my-data), [How do I cancel my HawkOpen subscription?](https://hawkopen.com/en/faq/pricing/how-do-i-cancel-my-subscription)
Checked: 2026-11-11
### Does HawkOpen use my data to train AI models?
URL: https://hawkopen.com/en/faq/data-privacy#is-my-data-used-to-train-ai
No. HawkOpen’s code does not train AI models and does not send your data to external AI services. Open and click verdicts come from fixed, named rules, and document analysis is plain text extraction with fixed rules.
Each verdict lists the codes of the rules that produced it, so you can see why an event was classified the way it was.
Related questions: [Does HawkOpen sell or share my data, or use it for advertising?](https://hawkopen.com/en/faq/data-privacy#does-hawkopen-sell-or-share-my-data), [What personal data does HawkOpen store, and does it keep the text of my emails?](https://hawkopen.com/en/faq/data-privacy#what-personal-data-does-hawkopen-store)
Checked: 2026-11-11
### Does HawkOpen sell or share my data, or use it for advertising?
URL: https://hawkopen.com/en/faq/data-privacy#does-hawkopen-sell-or-share-my-data
HawkOpen’s privacy page lists what its code uses data for: the product functions you request, account administration, security, fraud prevention, diagnostics and privacy requests. Selling data and advertising are not among them, and HawkOpen’s public pages set no advertising cookies.
Like any online service, HawkOpen relies on service providers to run it. The final list of those providers, the hosting region and the safeguards for data transfers will be published before the production services are switched on.
Related questions: [Which subprocessors does HawkOpen use?](https://hawkopen.com/en/faq/data-privacy#which-subprocessors-does-hawkopen-use), [Does HawkOpen use my data to train AI models?](https://hawkopen.com/en/faq/data-privacy#is-my-data-used-to-train-ai)
Checked: 2026-11-11
### Does HawkOpen use cookies on its website?
URL: https://hawkopen.com/en/faq/data-privacy#does-hawkopen-use-cookies
The public pages, legal pages and the signature generator set no analytics or advertising cookies. After you sign in, HawkOpen uses a secure session cookie to keep you signed in.
The signature generator works inside your browser and does not send what you type to HawkOpen. If you block the session cookie, you cannot stay signed in.
Related questions: [What is the difference between a tracking pixel and a cookie?](https://hawkopen.com/en/faq/how-works/tracking-pixel-vs-cookie), [Does HawkOpen sell or share my data, or use it for advertising?](https://hawkopen.com/en/faq/data-privacy#does-hawkopen-sell-or-share-my-data)
Checked: 2026-11-11
### Can I get a data processing agreement (DPA) with HawkOpen?
URL: https://hawkopen.com/en/faq/data-privacy#can-i-get-a-data-processing-agreement
Yes. A data processing agreement (DPA, Article 28 GDPR) is one of the contract documents every customer accepts, on every plan, with one tick box together with the Terms, the Privacy Policy and the Message Tracking Terms; tracking stays locked until the current version is accepted. The DPA is still a draft awaiting legal review and is marked as such.
The draft names you as controller and HawkOpen’s operator, TriStiX S.L., as processor, and it states the place of storage (AWS region eu-south-2, Spain) and the sub-processors, marked as to be confirmed before publication. There is still no independent security assessment or penetration test summary. If your company needs the final version or these documents before connecting a mailbox, wait for them or ask HawkOpen through the contact details on its Terms / Imprint page.
Related questions: [Which subprocessors does HawkOpen use?](https://hawkopen.com/en/faq/data-privacy#which-subprocessors-does-hawkopen-use), [In which country or region is my data stored?](https://hawkopen.com/en/faq/data-privacy/where-is-my-data-stored), [What must a company do when it uses an email tracking tool: privacy notice, consent, contract with the provider?](https://hawkopen.com/en/faq/legal-eu#what-must-a-company-do-when-using-a-tracking-tool)
Checked: 2026-11-12
### Which subprocessors does HawkOpen use?
URL: https://hawkopen.com/en/faq/data-privacy#which-subprocessors-does-hawkopen-use
The draft data processing agreement (DPA) that every customer accepts lists them: Amazon Web Services EMEA SARL (hosting, database, file storage and system email, region eu-south-2 in Spain), Cloudflare (DNS and protection of all public addresses, including tracking requests) and Stripe Payments Europe (payments). The draft marks this list as to be confirmed before publication.
The DPA is still a draft awaiting legal review, and the public privacy page does not name these providers yet. If this matters for your contracts, read the draft DPA in the app before you connect a mailbox, and wait for the final version if you need a confirmed list.
Related questions: [In which country or region is my data stored?](https://hawkopen.com/en/faq/data-privacy/where-is-my-data-stored), [Can I get a data processing agreement (DPA) with HawkOpen?](https://hawkopen.com/en/faq/data-privacy#can-i-get-a-data-processing-agreement)
Checked: 2026-11-12
### How long does HawkOpen keep my data, including after I cancel?
URL: https://hawkopen.com/en/faq/data-privacy#how-long-does-hawkopen-keep-my-data
HawkOpen has not published one retention period: it depends on the type of data, the plan, the account’s configuration and legal or audit limits. If you delete your account, HawkOpen erases it after a waiting period of at most 30 days.
Cancelling a subscription does not delete the account: the account moves to the Free plan. To have the data erased, request account deletion in the account privacy tools.
Related questions: [How do I delete my HawkOpen account and my data?](https://hawkopen.com/en/faq/data-privacy#delete-my-hawkopen-account), [What personal data does HawkOpen store, and does it keep the text of my emails?](https://hawkopen.com/en/faq/data-privacy#what-personal-data-does-hawkopen-store)
Checked: 2026-11-11
### Which law governs the HawkOpen contract, and where are disputes heard?
URL: https://hawkopen.com/en/faq/data-privacy#which-law-governs-hawkopen-terms
Spanish law, under the draft Terms of Service that every customer accepts (still awaiting legal review). For business customers the Spanish courts named in the Terms have exclusive jurisdiction; consumers keep the protection of the mandatory rules of their country and may sue and be sued in the courts where they live. HawkOpen is operated by TriStiX S.L., a company in Spain.
Mandatory consumer rights, such as the 14-day right of withdrawal in the EU, apply regardless of these clauses.
Only the English version of the Terms is binding; the versions in the other six languages are translations.
Related questions: [Does HawkOpen have a service level agreement (SLA)?](https://hawkopen.com/en/faq/data-privacy#is-there-a-service-level-agreement), [Do I have a 14-day right to withdraw from a HawkOpen purchase in the EU or the UK?](https://hawkopen.com/en/faq/pricing/eu-14-day-withdrawal-right), [Where are HawkOpen’s privacy notice, terms and imprint, and are they final?](https://hawkopen.com/en/faq/data-privacy#where-are-hawkopen-legal-documents)
Checked: 2026-11-12
### Where are HawkOpen’s privacy notice, terms and imprint, and are they final?
URL: https://hawkopen.com/en/faq/data-privacy#where-are-hawkopen-legal-documents
The footer of every HawkOpen page links to Privacy, Terms / Imprint and Cookies, in English, Polish, German, Spanish and French. These pages describe the current controlled build; the production privacy notice will be reviewed for the final hosting, providers and countries before launch.
The website pages have no Portuguese or Italian version yet. The contract documents every customer accepts in the app (Terms of Service, Privacy Policy, data processing agreement and Message Tracking Terms) are drafts awaiting legal review, available in all seven languages; only the English version is binding. The legal pages also name the operator and its VAT ID.
Related questions: [Which company operates HawkOpen, and where is it based?](https://hawkopen.com/en/faq/data-privacy#who-operates-hawkopen), [Which law governs the HawkOpen contract, and where are disputes heard?](https://hawkopen.com/en/faq/data-privacy#which-law-governs-hawkopen-terms)
Checked: 2026-11-12
### Does HawkOpen have a service level agreement (SLA)?
URL: https://hawkopen.com/en/faq/data-privacy#is-there-a-service-level-agreement
No. HawkOpen has not published a service level agreement or an uptime guarantee. The draft Terms say HawkOpen does not guarantee uninterrupted operation unless a separate service level is agreed for a paid plan, and the Free plan comes without a guaranteed availability level.
HawkOpen is in a controlled launch, so plan for occasional interruptions and keep your original emails in your own mailbox.
Related questions: [Which law governs the HawkOpen contract, and where are disputes heard?](https://hawkopen.com/en/faq/data-privacy#which-law-governs-hawkopen-terms)
Checked: 2026-11-12
### Which company operates HawkOpen, and where is it based?
URL: https://hawkopen.com/en/faq/data-privacy#who-operates-hawkopen
HawkOpen is made and operated by TriStiX S.L., a company in Spain. Its VAT ID is shown in the footer of every HawkOpen page.
The company’s registered details are on the Terms / Imprint page. Where the company is based does not say where the data is stored; the hosting region is not published yet.
Related questions: [In which country or region is my data stored?](https://hawkopen.com/en/faq/data-privacy/where-is-my-data-stored), [Where are HawkOpen’s privacy notice, terms and imprint, and are they final?](https://hawkopen.com/en/faq/data-privacy#where-are-hawkopen-legal-documents)
Checked: 2026-11-11