Privacy Policy

Ali el Aiat, of Wilaya Tetouan 93000, Morocco, operates HopVisor. We are the controller for the personal data we collect about users of our product and our site — that is, we decide what is collected and why.

For privacy questions, contact hopvisor@gmail.com.

We collect only what the service needs to work:

• Account details — your email address, and your sign-in credentials or Google account identifier. Used to create and secure your account and to sign you in.
• Subscription state — your plan, your Paddle customer identifier, and your renewal dates. Used to give you the access you have paid for.
• Usage counters — how many filter runs you have used in the current period. Used to apply the free-tier allowance and to show your remaining balance.
• Technical data — IP address, browser and device information, and server logs. Used to keep the service secure, prevent fraud and abuse, and diagnose faults.
• Support messages — anything you send us. Used to answer you.

We do not collect or store your card details. Payment information goes directly to our payment provider, described in section 4.

• Performance of a contract — running your account, providing the service, and handling your subscription.
• Legitimate interests — keeping the service secure, preventing fraud and abuse, and improving the product. We balance these against your rights.
• Consent — where we ask for it, such as optional marketing. You can withdraw consent at any time.
• Legal obligation — where we are required to retain records, for example for tax or accounting.

We do not sell your personal data. We share it only with providers who help us run the service:

• Paddle.com Market Ltd — our merchant of record. Paddle independently collects and controls your payment data for the sale of the product, subscription management and payments, and tax compliance and invoicing.
• Supabase — hosts our database and handles authentication.
• Cloudflare — serves and protects the website.
• Professional advisers — legal and accounting advisers, where genuinely needed.
• Authorities — where the law requires it, or to protect rights and safety.

Our providers operate globally, so your data may be processed outside your country, including in the United States. Where a transfer leaves the UK or EEA, it is covered by an adequacy decision or by standard contractual clauses with the provider concerned.

We keep account and subscription data for as long as your account is open, and for a period afterwards where we need it to meet legal, tax or accounting obligations. Server logs are kept for a short operational period. When data is no longer needed it is deleted or anonymised.

Subject to the law that applies to you, you may request access to your data, correction of it, erasure of it, restriction of or objection to how we process it, and a portable copy of it. You may also withdraw consent where we relied on it.

Write to hopvisor@gmail.com and we will respond within one month, extendable where the law allows. If you are in the UK or EEA and you are unhappy with our response, you may complain to your local data protection authority.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls that limit who can reach production data, and row-level security in our database so one account cannot read another account’s records. No system is perfectly secure, but we take this seriously.

We use only essential cookies. They keep you signed in and keep your session secure, and the service cannot work without them, so no consent banner is shown for them. We do not use advertising cookies. Our payment provider may set its own cookies during checkout, governed by Paddle’s privacy notice. You can clear or block cookies in your browser, but doing so will sign you out.