Privacy policy

HopBack is made by White Rabbit Graphic Design Limited, a New Zealand company ("White Rabbit"), a design agency with studios at 292 Broadway, Newmarket, Auckland 1023, New Zealand and 1901 Avenue of the Stars, Los Angeles, CA 90067, USA. When this policy says "we", it means White Rabbit operating HopBack. When it says "you", it means whoever is reading: an agency or freelancer with a HopBack account, or a client who has been sent a review link.

Questions about this policy go to support@hopback.io.

If you are a reviewer and want a comment removed, ask the agency that sent you the link, since it is their workspace. If that does not work, email us and we will help.

From account holders

• Name, email address and password (stored as a hash, never in plain text), or the Google or Microsoft identity you sign in with. Used to run your account.
• Workspace and team details: workspace name, the people you invite and their roles.
• The reviews you create: URLs, uploaded images, PDFs and videos, staging credentials you choose to store, rounds, approvals, tags and priorities.
• Billing details handled by Stripe: your plan, invoices and the last four digits of the card. We never see or store the full card number.
• Settings you choose: reminder schedules, reply-to addresses, Slack or Microsoft Teams connections, MCP keys (stored as a hash).
• Support email you send us.

From reviewers

• The display name you type when you first comment, remembered in your browser for the session.
• Your comments, replies, approvals and the time you made them.
• Files you attach to a comment, up to 25 MB each.
• The email address the agency enters for reminders, if they use that feature. We use it only to send the reminders they configure.

From everyone

• Server logs: IP address, browser type, the pages requested and when. Kept for up to seven days for security and debugging, then discarded.
• The cookies that keep an account holder signed in. HopBack runs no analytics or advertising trackers on the app, and it strips third-party trackers from the client sites it loads for review.

The marketing site at hopback.io uses Google Analytics to count visits and see which pages people read. It sets Google's _ga cookies, which last up to two years, and the data is processed by Google. We use it in aggregate only, we do not use it for advertising, and visitors in regions that require consent are asked before it loads. The app itself runs no analytics.

• To run HopBack: show reviews, deliver comments, send the notifications and reminders you set up, process payments and provide support.
• To keep it safe: rate-limit sign-ins, investigate abuse, back up the database.
• To tell account holders about the product: release notes and occasional product news to the account email. Every email has an unsubscribe link.

We do not sell personal information. We do not share review content with advertisers. We do not send your reviews or your clients' comments to any AI provider, and we do not train models on them. The only AI connection is the one an Agency-plan account holder makes themselves through MCP, which is read-only and revocable.

We use a small number of providers to run HopBack. Each one handles only what it needs.

The database and file storage run on Supabase in Singapore (Southeast Asia). The app runs on Vercel in the US East region, and live sync runs on Fly.io in Singapore. Wherever you are, your data is transferred to and stored in Singapore and the United States. Connections are encrypted in transit with TLS, the database and storage volumes are encrypted at rest, and staging-site passwords are encrypted a second time by the app before they are stored.

• Reviews, comments and files stay as long as the workspace exists.
• Deleted reviews sit in the recycle bin for 30 days, then a daily job removes them permanently, files included.
• When you delete a workspace or close your account, its reviews, comments and files are removed after a 14-day grace period. The workspace is read-only in the meantime, and you can cancel the deletion from the banner.
• Invoices are kept for as long as tax law requires, which is seven years in New Zealand and the United States.
• Server logs are kept for up to seven days.
• The database is backed up every day and each backup is kept for seven days, then rolls off. Uploaded files are not part of those backups; they are stored redundantly by our storage provider and removed on the schedule above.

Wherever you are, you can ask us what we hold about you, ask us to correct it, or ask us to delete it. Account holders can do most of this themselves in Settings: edit the profile, delete the workspace, close the account. There is no self-serve export; ask us and we will send you your data.

If you are in New Zealand, the Privacy Act 2020 gives you the right to access and correct your information. If you are in the EU or UK, the GDPR and UK GDPR give you the rights to access, rectification, erasure, restriction, portability and objection, and the right to complain to your supervisory authority. If you are in California, the CCPA gives you the right to know, delete and opt out of sale; we do not sell personal information.

Email support@hopback.io and we reply within three business days.

HopBack is a business tool. It is not directed at children under 16 and we do not knowingly collect their information. If you think a child has left a comment on a review, tell the agency that owns it or email us.

We will post the new version here with a new date at the top. If a change matters to how we use your information, we will email account holders before it takes effect.

Email support@hopback.io, or write to White Rabbit Graphic Design Limited at either address above.