HeraclesIQ
Log in Start free
Privacy

HeraclesIQ Privacy Policy

Last updated: April 15, 2026

HeraclesIQ is operated by DEJ Technologies LLC. This Privacy Policy explains how we collect, use, disclose, and protect information when you use HeraclesIQ websites, web applications, and related mobile or client applications (collectively, the “Services”).

HeraclesIQ is a real estate analysis software product. It helps users analyze rental, flip, BRRRR, and related investment scenarios, save deals, compare projections, export reports, and manage subscriptions.

1. Information We Collect

Account and authentication information

This may include your email address, user ID, password hash, account timestamps, session records, and authentication state. Passwords are hashed before storage. We do not store your plain-text password.

Profile and preferences

This may include display name, full name, company name, role or title, default market, timezone, onboarding status, and default projection assumptions.

Property, calculator, deal, and scenario data

This includes information you enter into HeraclesIQ, such as property addresses, location anchors, deal titles, scenario names, purchase prices, rents, financing assumptions, rehab costs, holding costs, taxes, insurance, HOA costs, utilities, vacancy assumptions, sale assumptions, refinance assumptions, and market override selections.

Generated analysis data

This may include projections, metrics, comparisons, dashboard summaries, CSV exports, and PDF exports generated through the Services.

Billing and subscription information

We may collect and store billing-related metadata such as Stripe customer ID, subscription ID, price ID, subscription status, plan type, billing period dates, and cancellation status.

Payment card information is processed by Stripe, our payment processor. HeraclesIQ does not collect or store payment card data on its own servers. We receive limited billing-related information from Stripe, such as subscription status, plan details, and Stripe customer or subscription identifiers.

Communications data

This may include your email address, support messages, transactional email type, delivery status, provider message IDs, and related error information.

Analytics, device, and log data

This may include IP address, forwarded IP address, user agent, browser, operating system, device type, request path, response status, latency, request ID, authentication state, plan information, page URL, page title, page path, event names, and related diagnostic information.

Signup attribution data

This may include UTM source, medium, campaign, referrer, landing path, and captured timestamp.

2. How We Collect Information

3. How We Use Information

We may also use attribution and analytics information to understand how users find and use HeraclesIQ.

4. How We Disclose Information

We may disclose information to service providers and vendors that help us operate HeraclesIQ, including providers for hosting, database infrastructure, payment processing, email delivery, analytics, and market or public-data enrichment.

Stripe

We use Stripe for hosted Checkout, billing, subscription management, and related payment services. Stripe processes payment card information directly. HeraclesIQ stores limited billing and subscription metadata, not payment card data.

Email providers

We use providers such as Resend to send transactional emails.

Analytics providers

If enabled in a given deployment, we may use Google Analytics for web analytics and PostHog for certain product analytics. Google requires sites using Google Analytics to disclose that use and how it collects and processes data.

Market and public-data services

We may disclose property address or location-related inputs to third-party services or public-data sources used to generate market context, geocoding, flood, crime, census, or similar analysis inputs.

Internal operational handling

Certain operational alerts, such as signup or billing-related internal notifications, may include limited user and subscription metadata for internal business operations.

Legal and business transfers

We may disclose information if required by law, to protect rights or security, or in connection with a merger, acquisition, financing, bankruptcy, or sale of assets.

5. Cookies, Analytics, and Similar Technologies

HeraclesIQ uses cookies and similar technologies for authentication, session continuity, product analytics, attribution, and service improvement.

We may use an authentication cookie to keep web users signed in. We may also use browser local storage, session storage, mobile SecureStore, and mobile AsyncStorage to store session-related, attribution-related, and cached application data on your device.

If enabled, Google Analytics may receive page and event information, including page paths, titles, URLs, and certain signed-in account identifiers configured by HeraclesIQ. Google requires disclosure of this use in site privacy notices.

If enabled, PostHog may receive product analytics events from the mobile app.

HeraclesIQ reviews consent and preference controls where required by applicable law. U.S. state privacy rules continue to expand, and cookie and analytics obligations should be reviewed against final launch jurisdictions and configuration.

6. Data Retention

We retain personal information for as long as reasonably necessary to provide the Services, maintain accounts, preserve saved analyses, comply with legal obligations, resolve disputes, enforce agreements, and protect the security and integrity of the Services.

Some records, such as sessions, may expire automatically after a defined period. Other retention periods may depend on account activity, legal requirements, or operational needs.

7. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These may include password hashing, session controls, hosted payment processing, and access controls.

However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. The FTC has emphasized that businesses should make accurate, non-misleading statements about their privacy and security practices.

8. Your Rights and Choices

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of certain personal information, and you may have additional rights relating to certain processing activities.

You may be able to update some account and preference information directly through the Services. For privacy requests, contact us using the information below.

You may also be able to manage certain cookie or analytics settings through your browser, device, Google Analytics controls, or future HeraclesIQ preference tools.

9. Children’s Privacy

HeraclesIQ is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can review and address the issue.

10. Third-Party Services

HeraclesIQ may use third-party services such as:

This list may change as the Services evolve.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and post the updated version on the Services.

12. Contact Us

For privacy questions or requests, contact:

DEJ Technologies LLC / HeraclesIQ
Email: privacy@heraclesiq.com