Privacy Policy

What we collect

Account info you provide (name, email, organization name), workspace content you upload (animal records, volunteer contacts, medical notes, supply data), and standard technical logs (IP address, browser, timestamps).

How we use it

To provide and improve the Service, facilitate subscription payments through our reseller, send transactional email, and respond to support requests. We do not sell your data.

Legal basis for processing

We process personal data on the following bases: (a) performance of a contract — to provide the Service you signed up for; (b) legitimate interests — to secure the Service, prevent fraud, and improve the product; (c) legal obligation — to comply with tax, accounting, and other applicable law; and (d) consent — where required, for example for optional communications.

Subprocessors and payment processing

We share limited personal data with the following categories of recipients:

• Paddle.com Market Ltd ("Paddle") — Merchant of Record. Paddle is the reseller of our subscriptions and acts as the Merchant of Record for all orders. When you purchase a subscription, Paddle collects and processes your billing details, payment method, billing address, and tax information directly, and handles invoicing, tax compliance, chargebacks, and refunds. Paddle's handling of that data is governed by Paddle's Privacy Notice.
• Hosting and infrastructure. Supabase (database and authentication) and Cloudflare (application hosting and edge network).
• Professional advisers (legal, accounting) and authorities where required by law.

Security

Data is transmitted over TLS and stored in access-controlled databases with row-level security enforced per workspace. Only members of your workspace can see your workspace data.

Retention

Workspace data is retained for as long as your subscription is active. On cancellation you may export your data; we delete workspace data within 60 days of account closure unless you ask us to keep it or we are required to retain it by law.

Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, as well as restriction of or objection to processing, data portability, and withdrawal of consent. You also have the right to lodge a complaint with your local data protection authority. Email us and we will respond within 30 days.

Cookies

We use only the cookies necessary to keep you signed in. We do not run third-party advertising trackers.

Contact

Privacy questions: support@hopebridge.online (Trista Cummings).