Privacy policy

Data controller

For processing related to the operation of Hokopi, account administration, security and the commercial relationship, the data controller is Abdelkarim MEHIAOUI, a sole trader operating under the Hokopi trading name, who can be contacted at contact@hokopi.com.

Data we process

Depending on your use of the service, Hokopi may process:

• account and contact data, such as an email address and name when provided;
• organisation, business, team, role and permission data;
• business data entered or imported into the service, such as suppliers, products, prices, recipes, costs, orders, receipts and analytics data;
• information needed for billing and subscription management;
• technical data, security logs and information needed for support.

Purposes and legal bases

We process this data to create and administer accounts, provide the service, manage access rights, respond to support requests, secure the platform, prevent abuse, manage billing and meet applicable legal obligations.

Depending on the purpose, processing is based on performance of a contract, compliance with a legal obligation or Hokopi’s legitimate interest, especially regarding security and fraud prevention.

Your organisation’s business data

When a customer organisation enters data in Hokopi about its staff, suppliers, contacts or other people, that organisation generally determines the purposes of the processing. Hokopi then processes the data to provide the service, on the customer organisation’s instructions. Data subjects should first contact that organisation to exercise their rights concerning this business data.

Recipients and processors

Access to data is limited to authorised Hokopi personnel and, where necessary, its technical service providers. The main infrastructure is hosted in the European Union by Hetzner Online GmbH in Germany.

Hokopi may use Resend to send transactional emails and Stripe to process payments when these features are used. These providers process only the data needed for their services. Some email-related processing may involve a transfer to the United States, subject to the safeguards applicable to the relevant provider.

Retention periods

Account data and business data are retained for the duration of the relationship with the relevant organisation. They are then deleted or anonymised in accordance with recovery, security, backup and applicable legal requirements. Billing data is retained for the period required by accounting and tax regulations.

Your rights

You may request access to, rectification, erasure, restriction, objection to or portability of your data, subject to applicable law. For processing for which Hokopi is the controller, contact us at contact@hokopi.com. You may also lodge a complaint with the CNIL, the French data protection authority.

Cookies and local storage

Hokopi does not use advertising trackers. The website and application may use local storage that is strictly necessary for authentication, security or remembering user-requested preferences, such as a language preference. If trackers requiring consent are added, this policy and the consent-management mechanism will be updated before they are activated.

Security and updates

Hokopi implements appropriate technical and organisational measures to protect data. This policy may change to reflect changes to the service or the law; the last-updated date will then be amended.