Privacy Policy

Last updated: 17 August 2026

1. Introduction

Hoppa (“we,” “our,” or “us”) is committed to protecting your privacy. Hoppa is a product of HandyHop, a sole proprietorship registered in the Netherlands under KVK number 91394066 and VAT number NL004888439B24. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you use our invoicing software platform (the “Service”).

2. Categories of data we process

Hoppa processes different kinds of information for different roles. We distinguish between:

1) Data submitted by the Hoppa account holder, such as:

  • Account details (email address, name if provided, password hash)
  • Organisation and company details (company name, business email, address, KVK number, VAT number where provided, IBAN/BIC where provided)
  • Invoice branding and preferences (logo, language, footer text, default VAT settings)
  • Support messages you send to Hoppa
  • Subscription and billing choices you make inside Hoppa

2) Data the account holder enters about their own customers and invoices, such as:

  • Customer or contact details (names, emails, addresses, KVK/VAT where entered)
  • Invoice and offer contents (line items, amounts, dates, notes, payment status)
  • Payment history recorded in Hoppa for those invoices

3) Technical and operational data generated when operating the Service, such as:

  • Authentication and session information needed to keep you signed in securely
  • Trial start and end dates, subscription plan and status fields stored for your organisation
  • A minimal trial-eligibility record (see section 6)
  • Security and technical logs produced by the application and hosting environment while providing the Service

4) Payment data handled by payment providers (not stored by Hoppa as complete card or bank-payment credentials):

  • Hoppa stores subscription and connection status, provider identifiers (such as subscription IDs or Mollie connection tokens encrypted at rest), and invoice payment references needed to operate the Service
  • Card details and other payment-method credentials for subscriptions or customer invoice payments are handled by the relevant payment provider on their hosted pages or systems

Hoppa does not currently operate website analytics, advertising cookies, behavioural profiling of website visitors, session-replay tools, or a product-event analytics system that records anonymous browsing behaviour on the public website.

Our hosting provider may process technical connection data (for example IP addresses in server or platform logs) as part of delivering and securing the website. Hoppa does not use that data for marketing analytics.

3. How we use personal data

We use personal data to:

  • Provide, maintain, and secure the Service (including authentication and sessions)
  • Create and send invoices, offers, reminders, and related emails on your behalf
  • Manage free trials, paid subscriptions, renewals, cancellations, and plan limits
  • Process invoice payments and Mollie Connect where you enable them
  • Look up Dutch Chamber of Commerce (KVK) information when you use KVK search features
  • Provide customer support and respond to your messages
  • Prevent repeated free-trial misuse and administer eligibility
  • Protect against fraud and unauthorized access
  • Comply with legal obligations

Hoppa does not currently use personal data to run third-party website analytics, advertising campaigns, or visitor profiling on the public site.

Where processing is necessary to perform the contract for the Service, to take steps at your request before a contract, to pursue legitimate interests in operating and securing a B2B SaaS product, or to comply with law, we rely on those purposes. Where consent is actually required (for example for future optional tracking technologies), we will ask for it and you may withdraw it. The precise legal basis for each processing activity should be confirmed in a legal review if needed.

4. Service providers

We do not sell your personal information. Depending on how you use Hoppa, we share data with service providers that help operate the Service:

  • Mollie — invoice payment processing and Mollie account connection (OAuth tokens, payment status, payment links). Used when you connect Mollie and/or create online payment links.
  • Lemon Squeezy — Hoppa subscription checkout, billing portal, and subscription webhooks (account email, organisation identifier, subscription status).
  • Zoho SMTP — sending transactional emails such as invoices, reminders, verification, and password-reset messages.
  • Resend — used in the current codebase to deliver internal subscription-cancellation feedback emails to Hoppa (may include account email and related cancellation details).
  • Overheid.io — KVK company lookup requests when you search or verify Dutch company details.
  • Vercel — hosting and scheduled jobs for the Hoppa application. Platform logs and infrastructure processing are subject to Vercel’s terms.

These providers process data under their own terms and privacy policies. Production activation of each provider depends on correctly configured environment credentials; if a credential is not configured, that specific integration may not run.

We may also share information with professional advisors or with authorities when required by law.

5. Free invoice generator

Hoppa offers a public free invoice generator that does not require a Hoppa account. Invoice, business, and customer information you enter there is processed temporarily on the server only to generate the requested PDF.

That information is not stored in Hoppa’s application database, is not used for marketing, and is not sent to analytics.

6. Trial eligibility records

When a free trial is granted, Hoppa may store a minimal trial-eligibility record containing a normalised email address and the time the trial was first recorded. This record is separate from your user account and is designed to survive account deletion so that the same email cannot repeatedly obtain a new free trial.

Hoppa may retain that record for purposes supported by the current implementation, including determining trial eligibility, preventing repeated free-trial misuse, subscription administration, and resolving related account or billing disputes.

There is currently no automatic deletion period configured for these records in the application. A retention review document is maintained for business and legal confirmation of the final retention criterion. Hoppa will not describe the period as permanent unless that is an intentional reviewed decision.

7. Data security

We implement appropriate technical and organisational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. This includes hashing of passwords, encryption of certain sensitive tokens at rest, and hosting on secured infrastructure. No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Data retention

We retain account, organisation, invoice, and subscription data for as long as needed to provide the Service and meet legal or accounting obligations. When you delete your account, Hoppa deletes or anonymises account-linked data within the deletion flow implemented in the Service, except where a separate record must be kept for trial-eligibility or where law requires retention.

Trial-eligibility records are retained as described in section 6 until a reviewed retention criterion is applied.

9. Cookies and similar technologies

Hoppa currently uses essential authentication cookies and limited first-party browser storage for interface preferences. Hoppa does not currently use advertising cookies, tracking cookies, behavioural profiling, session-replay tools, or third-party website analytics.

Details, including cookie names and browser-storage keys, are described in our Cookie Policy. Essential cookies required for authentication cannot be disabled if you want to use a logged-in account.

10. Your rights

Depending on applicable law (including the GDPR where it applies), you may have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Restrict or object to certain processing
  • Data portability, where applicable
  • Withdraw consent where processing is based on consent

To submit a privacy request, email info@hoppa.cc. We may need to verify your identity before fulfilling the request. Some data (for example invoice archives you are legally required to keep, or trial-eligibility records needed to prevent misuse) may be retained where permitted or required.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the “Last updated” date. If we introduce optional tracking technologies, we will update this policy and our Cookie Policy and request consent where legally required.

12. Contact us

If you have questions about this Privacy Policy or our data practices, contact us at info@hoppa.cc. Hoppa is a product of HandyHop · KVK: 91394066 · VAT: NL004888439B24.