This Privacy Policy describes how Allebrum LLC, doing business as Hoppa (“Allebrum,” “Hoppa,” “we,” “us,” or “our”), collects, uses, and shares information when you visit our websites, sign up for or use the hosted Hoppa service (the “Service”), or otherwise interact with us.
Our mailing address is: Allebrum LLC, 2281 Lava Ridge Court, Suite 200, Roseville, CA 95661, USA. You can reach us at [email protected].
This policy covers the hosted (cloud) edition of Hoppa and our marketing websites. If you self-host the open-source edition of Hoppa on your own infrastructure, we do not receive or process the data in your installation, and this policy does not apply to it.
1. Information we collect
Information you provide to us
- Account information. When you sign up we collect your name, work email address, a password (stored only in hashed form), and your workspace name.
- Billing information. Payments are processed by Stripe, Inc. Your card details are entered directly into Stripe’s payment form and sent to Stripe — we never see or store your full card number. We retain a Stripe customer reference, billing status, and transaction history.
- Customer content. Data you and your team enter into the Service — projects, tasks, time entries, invoices, client and contact records, files, and messages (“Customer Content”). You control this content; we process it only to provide the Service.
- Communications. If you contact us by email or through our contact form (hosted by Fillout), we collect the information you choose to send us.
Information collected automatically
- Usage and device data. We collect logs and analytics such as IP address, browser type and user agent, pages viewed, feature usage, and error reports. We use PostHog for product analytics and error monitoring.
- Cookies and similar technologies. We use cookies and browser storage that are necessary to operate the Service (for example, keeping you signed in) and to understand how the Service is used. We do not use third-party advertising cookies.
Information from connected services
- QuickBooks Online and other integrations. If you choose to connect a third-party service such as Intuit QuickBooks Online, we receive the data described in Section 3 below, only with your authorization.
2. How we use information
- To provide, operate, maintain, and secure the Service;
- To create and manage your account, workspace, and subscription, including free trials, billing, and payment collection;
- To respond to support requests and communicate with you about the Service (e.g., billing notices, security alerts, and service updates);
- To monitor performance, debug problems, and improve the Service;
- To detect, prevent, and respond to fraud, abuse, or security incidents; and
- To comply with legal obligations.
We do not sell your personal information, and we do not use Customer Content to train machine-learning models or for advertising.
3. QuickBooks Online integration
Hoppa offers an optional integration with Intuit QuickBooks Online. If you connect your QuickBooks Online account:
- Authorization. The connection is established through Intuit’s OAuth 2.0 authorization flow. We never see or store your Intuit username or password. We store the OAuth access and refresh tokens Intuit issues, encrypted, and use them solely to make the API calls you have authorized.
- Data we access. Depending on the features you use, we access and synchronize accounting data such as customers, invoices, payments, items/services, and time activities between your Hoppa workspace and your QuickBooks Online company.
- How we use it. Data obtained from Intuit is used only to provide the integration features you request (for example, creating invoices in QuickBooks from Hoppa time entries, or keeping client records in sync). We do not sell data obtained through Intuit’s platform, do not use it for advertising, and do not share it with third parties except the service providers that host and operate the Service (Section 4).
- Disconnecting. You can disconnect the integration at any time from your workspace settings or from your Intuit account settings. When you disconnect, we stop accessing your QuickBooks data and delete the stored OAuth tokens. You may also ask us to delete previously synchronized QuickBooks data by contacting [email protected].
4. How we share information
We share personal information only in the following circumstances:
- Service providers. We use vendors who process data on our behalf to run the Service: Stripe (payment processing), PostHog (product analytics and error monitoring), Fillout (contact form), Google Fonts (font delivery), and our cloud hosting and database providers. Each is bound to use the data only to provide services to us.
- Within your workspace. Content and activity in a workspace is visible to other members of that workspace according to the permissions your workspace administrators configure, including any client-portal views you choose to share.
- Legal requirements. We may disclose information if required by law, subpoena, or other legal process, or where we believe disclosure is necessary to protect the rights, safety, or property of our users, the public, or Allebrum.
- Business transfers. If Allebrum is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction; we will notify you of any change in ownership or use of your personal information.
We do not sell or rent personal information to third parties, and we do not share it with third parties for their own marketing.
5. Data retention
We retain your account information and Customer Content for as long as your account is active. After cancellation or termination, we delete or de-identify Customer Content within 90 days, except where a longer retention period is required by law (for example, billing and tax records). Backup copies are purged on a rolling schedule. You can request earlier deletion at any time by contacting us.
6. Security
We take reasonable administrative, technical, and physical measures to protect your information, including encryption in transit (TLS), encryption of stored credentials and OAuth tokens, hashed passwords, access controls, and least-privilege access for our personnel. No method of transmission or storage is 100% secure; if we learn of a security breach affecting your personal information, we will notify you as required by applicable law.
7. Your rights and choices
- Access, correction, and deletion. You may access and update most account information from your workspace settings, and you may request a copy, correction, or deletion of your personal information by emailing [email protected].
- Cancellation. You may cancel your subscription at any time; see Section 5 for what happens to your data afterward.
- Integrations. You may disconnect QuickBooks Online or any other connected service at any time (Section 3).
- Emails. Transactional emails (billing, security) are part of the Service; you may opt out of any marketing emails using the unsubscribe link in the message.
8. California privacy rights
If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA (“CCPA”), may give you additional rights: the right to know the categories and specific pieces of personal information we collect, use, and disclose; the right to request deletion or correction of your personal information; the right to opt out of the sale or sharing of personal information; and the right not to be discriminated against for exercising these rights.
The categories of personal information we collect are described in Section 1: identifiers (name, email, IP address), commercial information (subscription and transaction history), and internet activity (usage and device data). We collect them for the business purposes described in Section 2 and disclose them only as described in Section 4. We do not sell personal information and do not share it for cross-context behavioral advertising.
To exercise any of these rights, email [email protected] or write to us at the address above. We will verify your request using the email address associated with your account and respond within the time required by law. You may designate an authorized agent to make a request on your behalf.
9. Children
The Service is intended for business use and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it.
10. Where data is processed
We are based in the United States and process data on servers located in the United States. If you use the Service from outside the U.S., you understand that your information will be transferred to and processed in the U.S., where privacy laws may differ from those in your jurisdiction.
11. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by a prominent notice in the Service before the changes take effect. The “Effective date” above reflects the latest revision.
12. Contact us
Questions or requests about this policy or your personal information:
- Email: [email protected]
- Mail: Allebrum LLC (dba Hoppa), 2281 Lava Ridge Court, Suite 200, Roseville, CA 95661, USA