Privacy Policy

Effective: February 24, 2026. Last updated: March 5, 2026.

This policy explains what data No Headcount LLC ("we," "us," "our") collects, how we use it, and your rights. We keep it straightforward.

What we collect

• Account information: Your email address when you sign up.
• Content data: Projects, tasks, time entries, and session notes you create in your workspace.
• Usage data: Which features you use, timestamps, and general interaction patterns. This helps us improve the product.
• Technical data: IP address, browser user-agent string, and referring page URL. Used for rate limiting, security, and ad conversion measurement.
• Marketing attribution data: UTM parameters (source, medium, campaign, content, term) from the URL when you sign up. Used to understand which marketing channels lead to signups.
• Billing information: Payment processing is handled entirely by Lemon Squeezy, our merchant of record. We only receive your subscription status and billing cycle dates. We do not see or store your credit card number.

What we do NOT collect

We do not collect or store:

• Passwords or API keys for any external service.
• Credentials for your email, calendar, or other tools.
• Content from your external services (Gmail, Slack, etc.).

External integrations (email, calendar, etc.) run through your own tools and connectors. We never make connections to third-party services on your behalf.

How we use your data

• Provide the service: Store your workspace data, maintain session persistence, deliver briefings and coaching.
• Process billing: Manage your subscription status and communicate with Lemon Squeezy for payment processing.
• Communicate with you: Send account-related emails, onboarding sequences, and product updates through Kit (ConvertKit).
• Improve the product: Analyze usage patterns to make the service better. We do not use your content data to train AI models.

Third-party services

We use the following third-party services:

• Lemon Squeezy: Payment processing and billing (merchant of record). Lemon Squeezy privacy policy.
• Kit (ConvertKit): Email communication and subscriber management. We share your email address, UTM attribution data, and usage statistics with Kit to deliver onboarding emails and product updates. Kit privacy policy.
• Meta (Facebook): Ad conversion measurement. When you sign up, we send a hashed (SHA-256) version of your email address, your IP address, browser user-agent, and the page URL to Meta via their Conversions API. This is used to measure ad performance and is matched against Meta's user base. The Meta Pixel on our marketing site also collects browsing data via cookies. Meta privacy policy.
• Google Fonts: Web fonts loaded from Google's servers. Your IP address and browser information are sent to Google when fonts load. Google privacy policy.
• Hosting provider: Server infrastructure for the workspace.

Cookies and analytics

We use the Meta Pixel on our marketing site for ad conversion tracking. This helps us understand which ads lead to signups. The pixel sets cookies in your browser to track page views and conversion events. We also send conversion data directly from our server to Meta (Conversions API) for more accurate measurement. We do not use any other tracking cookies beyond those required for the service to function (such as authentication).

Your rights

You have the right to:

• Access your data at any time through the service.
• Correct inaccurate information in your account or workspace.
• Export your workspace data in JSON format at any time.
• Delete your account and all associated data.

To exercise any of these rights, email privacy@noheadcount.com. We will respond within 30 days.

Data retention

Your data is retained for as long as your account is active. If you cancel your subscription, your data remains accessible in read-only mode on the free tier.

If you request account deletion, your data becomes inaccessible immediately. It is permanently deleted from our active systems within 30 days and from backups within 60 days.

Security

We take reasonable measures to protect your data:

• Data is encrypted at rest.
• All data in transit is protected with HTTPS/TLS.
• Access to production systems is restricted and logged.

California residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used.
• Request deletion of your personal information.
• Opt out of the "sharing" of your personal information for cross-context behavioral advertising.

We share hashed email addresses, IP addresses, and browsing data with Meta for ad measurement purposes. Under CCPA, this may constitute "sharing" of personal information. To opt out, email privacy@noheadcount.com with the subject line "Do Not Share My Information" and we will exclude your data from Meta conversion tracking.

Email communications

When you sign up for No Headcount, you will receive product onboarding emails, feature updates, and occasional tips. These are sent through Kit (ConvertKit). Every email includes an unsubscribe link. You can unsubscribe at any time without affecting your account access.

Children

No Headcount is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. For material changes, we will notify you by email at least 30 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

Contact

Questions about this privacy policy? Email us at privacy@noheadcount.com.