Privacy policy.

Scope of this policy

This Privacy Policy covers two contexts: the gethokku.com website, and the Hokku app for Shopify.

On the website, H-MOON Digital is the controller of a handful of data points — primarily the waitlist email and standard server access logs.

Inside the Hokku app, the Merchant who installs it is the controller of their store's data, and H-MOON Digital processes it on the Merchant's behalf. The binding terms for that processing are set out in the Hokku Data Processing Agreement (DPA), available at gethokku.com/dpa. The app sections below summarise it; where they differ, the DPA prevails.

Data controller

H-MOON Digital, SASU with a share capital of €1,000, registered at 47 Rue Vivienne, 75002 Paris, France (SIRET 10308042000013), represented by M. Galaï, President.

Contact for any privacy matter: hello@gethokku.com.

What we collect on gethokku.com

When you join the waitlist, we collect the email address you enter.

The waitlist form on the pre-launch page also records two coarse signals with your email: your country, resolved by our hosting provider at the network edge from your connection (your IP address itself is neither read nor stored), and the preferred language set in your browser.

gethokku.com does not use analytics, advertising cookies, tracking pixels, or behavioral profiling. We do not log your IP address beyond the standard, short-lived server access logs maintained by our hosting provider for security purposes.

Why we collect it

Your email is used exclusively to send you a single notification when Hokku launches on the Shopify App Store. One email, on launch day.

Country and language are used only to plan the launch market by market, as aggregate counts.

We do not run a newsletter, a drip campaign, or any marketing sequence. We do not share your email with third parties for marketing.

Legal basis

The processing of your email address is based on your consent, given when you submit the waitlist form (Article 6.1.a of the GDPR).

How long we keep it

Your email is kept until Hokku launches and for a maximum of twelve months thereafter, after which the waitlist is deleted.

You can request deletion at any time, without justification, by emailing hello@gethokku.com.

Who has access

Your email is accessed only by H-MOON Digital staff. On the website, we rely on the following sub-processors, strictly for the purposes described above:

• Supabase (database hosted in Frankfurt, Germany, EU): stores the waitlist entries submitted from the pre-launch page. No transfer outside the European Union.
• Web3Forms (operated by Aboutdata Software Pvt. Ltd., India): receives the waitlist form on the home page and forwards it to our inbox. Transfer outside the European Economic Area is covered by Standard Contractual Clauses.
• Vercel Inc. (incorporated in the United States): hosts gethokku.com, served from its global edge network. Certified under the EU-US Data Privacy Framework.

Cookies

gethokku.com sets no analytics or advertising cookie and loads no third-party analytics or advertising tag.

It uses one functional cookie, hokku_lang, which remembers the language you chose so the site opens in that language on your next visit. It contains only a language code, is kept for twelve months, and is not used for any other purpose. Because it only serves a choice you made, it does not require consent.

Before launch, members of the Hokku team who unlock the full site with an access code receive a second cookie, hokku_gate, which proves that access for thirty days. It is not set for any other visitor.

Data processed by the Hokku app

Hokku processes the minimum needed to display offers and report their results to the Merchant. No advertising data, no profiling, and no customer-identifying field: never a customer name, email address, phone number, postal address or customer ID.

• Store and account: the Shopify store URL, the shop owner's email address, Hokku admin user IDs, and the IP address and user agent recorded in security logs.
• Storefront: pseudonymous identifiers (the Shopify cart token), the products viewed or added to the cart, and the page where a Hokku widget is displayed.
• Orders: order ID, date, currency, amounts, line items and the discount codes applied, used to attribute sales to Hokku offers and to count the monthly order volume that sets the plan. No delivery address is read.
• Visitor identifier: a technical identifier stored in the browsers of the Merchant's visitors, to count offer views and clicks without counting the same visitor twice. It is specific to that shop, contains no personal data, and is renewed after thirteen months; it is erased from raw view and click records after twenty-four hours.
• Support: the content of support tickets sent from the app, with the reply email address they contain, and messages received at support@gethokku.com.
• Hokku Assistant: when the Merchant uses the AI support chat inside the app, the conversation content (the Merchant's messages and the generated answers) is processed by Anthropic solely to produce answers.

The Merchant, as controller, sets the lawful basis for processing their customers' data. H-MOON Digital processes it only on the Merchant's instructions, under the DPA.

App sub-processors

Inside the app, H-MOON Digital relies on the following sub-processors:

• Supabase: application database, Frankfurt (Germany), EU.
• Sentry: error monitoring, EU region (Frankfurt).
• Vercel: compute in Frankfurt, EU, and delivery of the widget files; no personal data stored at rest. Certified under the EU-US Data Privacy Framework.
• Resend: transactional email (account, billing notifications, support). Standard Contractual Clauses where applicable.
• Anthropic (United States): Hokku Assistant conversations. Standard Contractual Clauses.
• Shopify: authentication, store API and delivery of the GDPR webhooks, under Shopify's own Data Processing Addendum.

The up-to-date list, with regions and transfer mechanisms, is published at gethokku.com/sub-processors. Merchants are notified at least thirty days before a new sub-processor is added.

How long the app keeps data

Merchant data is kept for as long as the Merchant uses Hokku, because their analytics — including all-time figures — are built from it.

• When a Merchant deletes a customer in Shopify, Shopify sends the customers/redact request. On receipt, Hokku deletes that customer's pseudonymous identifiers and the order-linked records associated with them, without using the thirty days Shopify allows.
• Support tickets are deleted twelve months after they are sent, and the reply email address they contain is erased after ninety days; the same ninety-day rule applies to messages received at support@gethokku.com.
• Hokku Assistant conversations are deleted after thirty days.
• The Merchant can also request the immediate deletion of their data at any time from Settings in the app, including their support tickets and Assistant conversations.
• Security audit logs are kept for twelve months.
• Uninstall: Shopify sends the shop/redact request 48 hours after a Merchant uninstalls Hokku. On receipt, Hokku erases access tokens, support tickets and Assistant conversations, and anonymises the order identifiers kept in analytics records.
• The Merchant's own offers, settings and aggregated analytics are kept for sixty days after uninstall, so that a Merchant who reinstalls recovers their work, then deleted automatically.
• Encrypted backups are purged on rolling cycles, within thirty additional days.

Your rights

Under the GDPR, you have the right to:

• access the data we hold about you
• have it rectified or erased
• withdraw your consent at any time
• receive your data in a portable format
• object to its processing
• lodge a complaint with the CNIL (cnil.fr), the authority competent for H-MOON Digital, or with the data protection authority of the country where you live, if you believe your rights are not respected

To exercise any of these rights, email hello@gethokku.com. If you are a customer of a store that uses Hokku, the store is the controller of your data: contact it first. H-MOON Digital assists the store in answering your request.

Changes to this policy

If this policy changes, the updated version replaces this page. The “Last updated” date at the top reflects the most recent revision.