This policy explains what personal data [legal name not configured] ("HopLogs", "we") collects when you use HopLogs, why, how long we keep it, who we share it with, and the choices and rights you have. Contact us about privacy at [contact email not configured] or [postal address not configured].
What we collect
| Data | Why | Legal basis |
|---|---|---|
| Your email address and name | To create your account, sign you in, and email you about the Service | Contract |
| Sign-in records: time, IP address, browser and device | To keep your account secure and investigate abuse | Legitimate interests |
| Billing details: legal name, billing address, tax ID, and payment status from Stripe | To charge you, issue invoices and meet tax obligations | Contract, legal obligation |
| What you monitor and the results: targets, check settings, measurements, screenshots, status pages | To provide the Service | Contract |
| Alert contacts you add: email addresses, chat or webhook endpoints | To send the alerts you asked for | Contract |
| Support messages | To answer you | Contract, legitimate interests |
| Marketing preferences | To send product news only if you opted in | Consent |
We do not collect card numbers: Stripe handles payment details. We do not sell personal data, and we do not use third-party advertising or tracking scripts.
Who we share it with
We use the service providers listed on our sub-processors page to run the Service (for example Stripe for payments and SendGrid for email), under contracts that limit their use of the data. We may disclose data when the law requires it, or to protect the rights and safety of our users and the Service.
International transfers
Our providers may process data outside your country. Where the law requires, we rely on appropriate safeguards such as standard contractual clauses.
How long we keep it
- Account data: while your account is open.
- After service ends: for the retention period shown in the app (normally seven days), then deleted.
- Invoices, payment and tax records: as long as tax and accounting laws require (normally seven years), reduced to what those laws need.
- Sanctions screening records: ten years, as United States law requires.
- Security logs: up to two years.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to restrict or object to its use, and to withdraw consent. You can do much of this yourself in the customer app; for anything else, write to [contact email not configured]. We answer within the time the law sets (30 days under the GDPR, 45 days under the CCPA). You may also complain to your local data protection authority.
Security
We protect data with encryption in transit and at rest for the most sensitive fields, access controls, audit logging and regular reviews. See our security page.
Children
The Service is not directed to children under 16, and we do not knowingly collect their data.
Changes
We will publish changes here with their effective date and email you about material changes.