Privacy Policy
Cloud Hoppers FZE LLC ("we", "us") runs HoppERP, an online accounting service. This policy explains what data we hold, why, and what rights you have. It applies to the HoppERP website, Windows app, phone app and WhatsApp service.
1. Who is responsible for your data
- For your account details (name, email, phone, company name) we are the data controller.
- For the accounting data your company enters (clients, suppliers, invoices, bills, bank details, staff entries) your company is the controller and we are the processor. We use that data only to run the service for you.
2. Data we collect
- Account data: name, email, phone number, role, login details, company name, country, trade licence, TRN.
- Accounting data you enter or import: clients and suppliers (names, contacts, TRN), invoices, receipts, bills, expenses, refunds, bank account details and balances, opening balances.
- Files: bill photos, PDFs, company logo, stamp and signature, import files.
- WhatsApp data: the phone numbers of your staff, the messages and photos they send to your HoppERP number, and our replies.
- Technical data: login times, device type, error logs and audit logs of who changed what.
3. Why we use it
- To provide the service: record transactions, produce invoices, receipts, statements and reports, and send them by email or WhatsApp on your instruction.
- To keep the service secure, prevent misuse and fix errors.
- To contact you about your account, billing, changes to the service and support.
- To meet legal duties.
We do not sell your data and we do not use your accounting data for advertising.
4. Who else processes your data
We use these providers, each only to the extent needed to run the service:
| Provider | Purpose | Data involved |
|---|---|---|
| Microsoft Azure | Hosting of the application and database | All service data |
| Cloudflare R2 | Storage of uploaded files | Bill photos, PDFs, logos |
| Twilio and Meta (WhatsApp) | Sending and receiving WhatsApp messages | Staff phone numbers, message content, attached documents |
| Resend | Sending email | Recipient email, email content, attached documents |
We may also disclose data when the law requires, or to a buyer of our business, who must keep to this policy.
5. Where data is stored
The HoppERP application and its primary database, with backups, are hosted with Microsoft Azure. Uploaded files (Cloudflare R2), WhatsApp messages (Twilio and Meta) and email (Resend) may be stored, transmitted or processed outside the UAE. Cloudflare's location settings are a preference and do not guarantee that files stay in the UAE. Where the law requires safeguards for such transfers, we put them in place.
6. How long we keep data
- You, as the company, are responsible for keeping your statutory accounting and tax records for the periods the law requires (for UAE corporate tax records, at least seven years after the end of the relevant tax period; some other records five years). Ending your subscription does not end that duty. We give you export tools and keep your data while your account is active, but we do not promise to hold your full database for the statutory period after you leave, so export your records before closing.
- After the export period in Terms section 20, we may delete or anonymise your data, unless the law, a legal hold or a separately agreed retention service requires us to keep it longer. Data kept for legal reasons is access-restricted and used only for those reasons. Backup copies are deleted or overwritten under our backup schedule.
7. Security
Data is encrypted in transit. Passwords are stored in hashed form. Access is limited by user role, important actions are logged, and the database is backed up daily. No system is completely secure, and we will tell you without undue delay if a confirmed breach affects your data.
8. Your rights
Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), you may ask to access, correct, export or delete your personal data, to withdraw consent, and to complain to the data protection authority. Write to us at the contact address in Terms section 22. For accounting data, requests from your staff or clients should come through your company, as the controller.
9. Children
HoppERP is for businesses and is not meant for anyone under 18.
10. Changes
We will tell you by email or in the app before any important change to this policy takes effect.