Privacy Notice — Hover CTRL

This Privacy Notice describes how Affiliate Mechanic, located in Burnet County, Texas, USA (“we”, “us”), collects, uses, and shares personal data when you use Hover CTRL (the “Service”). Affiliate Mechanic is the data controller for personal data processed through the Service.

1. Data we collect

Account data: name, email, password hash, display name, avatar.
Tenant / branding data: workspace name, logo, color settings, autoresponder webhook (if you provide one).
Lead data: email addresses captured by the widget on your sites, with the source page.
Support communications: messages you send us and our replies.
Usage and device data: pages visited, actions taken, browser type, OS, IP address, timestamps, and similar telemetry.
Cookies & local storage: session cookies for authentication and limited analytics for product improvement.

Payment card details are collected directly by Paddle (see “Sharing” below); we do not see or store card numbers.

2. How we use data

To create and operate your account and tenant workspace.
To deliver the Service, including the hovering widget, admin tools, and email features.
To provide customer support and respond to inquiries.
To prevent fraud, abuse, and security incidents.
To improve the Service and develop new features.
To send transactional emails (receipts, account notices) and, with your consent, product updates.
To comply with legal obligations.

3. Legal bases (where applicable)

Contract performance — to provide the Service you signed up for.
Legitimate interests — to secure, support, and improve the Service.
Consent — for marketing emails and non-essential cookies, where required.
Legal obligation — to comply with tax, accounting, and law-enforcement requirements.

4. Sharing

We share personal data only with:

Service providers / subprocessors — hosting, database, email delivery, analytics, and customer-support tooling, bound by confidentiality and data-processing terms.
Paddle — our Merchant of Record for the sale of the Service. Paddle handles checkout, payment processing, subscription management, tax compliance, invoicing, and refunds. See Paddle's Privacy Notice.
Professional advisers — legal, accounting, and insurance advisers when reasonably necessary.
Authorities — where required by law, regulation, or valid legal process.
Successors — in connection with a merger, acquisition, or sale of assets, with notice where required.

We do not sell personal data.

5. International transfers

We are based in the United States, and our subprocessors may process data in the US and other countries. Where personal data is transferred from the EEA, UK, or Switzerland, we rely on appropriate safeguards (such as Standard Contractual Clauses) where required by law.

6. Retention

We keep personal data for as long as needed to provide the Service and for legitimate business or legal purposes (such as tax records and fraud prevention). When data is no longer needed, we delete or anonymize it. You can request deletion of your account at any time.

7. Your rights

Depending on where you live, you may have rights to:

access the personal data we hold about you;
correct inaccurate data;
request deletion (“right to be forgotten”);
restrict or object to certain processing;
port your data to another provider;
withdraw consent (where processing is based on consent);
lodge a complaint with your local supervisory authority.

To exercise any of these rights, email privacy@hoverctrl.com. We respond within 30 days where required by law.

8. Security

We use appropriate technical and organizational measures to protect personal data, including encryption in transit, hashed passwords, access controls, and audit logging. No system is perfectly secure, but we work to keep yours safe.

9. Cookies

We use cookies and similar storage to keep you signed in, remember preferences, and understand how the Service is used. Essential cookies are required to operate the Service; you can manage non-essential cookies through your browser settings.

10. Children

The Service is not directed at children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes

We may update this Privacy Notice from time to time. We'll post the new version with an updated date and, for material changes, notify you in the Service or by email.

12. Contact

Affiliate Mechanic, Burnet County, Texas, USA. privacy@hoverctrl.com