Hoverpad Privacy Policy

Who we are

Hoverpad is made and sold by [your business name], [what kind of business] (“we”, “us”). We decide how the information on this page is used, which makes us its data fiduciary under India’s Digital Personal Data Protection Act, 2023.

You can reach us at [your support email], or by post at [your postal address]. More ways are on the contact page.

What stays on your PC

Hoverpad is a Windows app. Everything you make in it is saved on your PC, and backed up to your own Google Drive (see Google sign-in and backup). None of the following is ever sent to us:

Your notes, reminders and folders.
Your Private space. It’s locked with your password and encrypted on your PC. Nobody, us included, can open it without that password.
Your voice. When you speak to Hoverpad, a speech model on your PC turns it into text. The recording is deleted as soon as that’s done.
The apps you use. Hoverpad notices which app is in front so it can show the notes you stuck to that app, and so it can remind you when you open one. It doesn’t record this anywhere else.
Diagnostic logs. If something goes wrong, Hoverpad writes a log file on your PC. We only see it if you choose to send it to us.

What we keep, and why

To give you a free trial and let you buy Hoverpad, it signs you in with Google and checks your plan with our account server. That server keeps:

What	Why
Your Google account ID and email address	To know it’s you on each of your PCs, to run your trial and purchase, and to reply when you write to us
When your trial started, how long it is, and any extra days or free months we’ve given you	To know when your trial ends
Your plan, its price, any coupon you used, and your purchase’s status and date	To charge you the right amount and show your plan in the app
Your payments: amount, date, the kind of method (such as UPI or card), refunds, and why a payment failed	For billing, refunds, our accounts and tax
The days you open Hoverpad, which version you have, and your country (worked out from your internet address, which we don’t keep)	To check your plan, to know which versions are still in use, and for overall counts such as how many people use Hoverpad each day
Messages you send us	To answer you

We use this information for these purposes only. We don’t show ads, don’t build advertising profiles, and never sell or rent your data.

We rely on your consent when you sign in and on the needs of the purchase you’ve made. Where the law requires us to keep records (such as tax records), we keep them for that reason.

Payments

Payments are handled by Razorpay (Razorpay Software Private Limited), a payment company regulated in India. You type your card, UPI or bank details into Razorpay’s page, not ours. Razorpay tells us only that a payment worked, its amount, the kind of method you used, and a reference number. We never receive full card numbers, UPI IDs, PINs or bank passwords.

Razorpay’s own use of your payment details is covered by Razorpay’s privacy policy.

Google sign-in and backup

When you sign in with Google, Hoverpad asks for three permissions and nothing more:

openid and email: your Google account ID and email address, so we know it’s you.
drive.appdata: one hidden folder in your Google Drive that only Hoverpad uses, for your backup. Hoverpad can’t see, open or change any other file in your Drive.

While you’re signed in, Hoverpad backs up your notes and reminders to that folder, so they’re safe and the same on every PC you sign in on.

Your notes go straight from your PC to your Drive and back. They don’t pass through our servers, and we can’t read them.
Notes in your Private space stay encrypted in the backup.
Your sign-in is saved on your PC, encrypted with Windows’ own protection for your user account.
To stop backing up, sign out in Hoverpad’s settings. Your notes stay on your PC.
To delete the backup, open Google Drive, go to Settings → Manage apps → Hoverpad, and choose Delete hidden app data.
To take away Hoverpad’s access entirely, remove it at myaccount.google.com/permissions.

Hoverpad’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Who else handles it

We use a few companies to run Hoverpad. Each gets only what it needs for its job:

Razorpay takes your payments (see Payments).
Cloudflare hosts our account server and its database. Like any web host, it sees the internet address of the PC or browser that contacts us.
Google handles sign-in and stores your backup in your own Drive. It also serves the fonts on this website (see This website).
The host of our app updates (such as GitHub) sees your internet address when Hoverpad checks for a new version.
Hugging Face sees your internet address once, when Hoverpad downloads its speech model the first time you use voice.

These companies may process data outside India. We only use providers that protect it properly, and we follow any limits the Indian government sets on transfers abroad.

We’ll also share information if the law requires it, for example a valid order from a court or a government agency. If that happens, we’ll share only what’s asked for, and tell you unless the law forbids it.

This website

This website sets no cookies and runs no analytics, ads or tracking. Two things load from elsewhere:

Fonts from Google Fonts. Your browser fetches them from Google, which sees your internet address. See Google’s privacy policy.
The free trial’s length comes from our account server, which sees your internet address like any website. It doesn’t keep it.

How long we keep it

Your account (Google ID, email, trial, the days you used Hoverpad): until you ask us to delete it.
Payment records: for as long as Indian tax and accounting law makes us keep them (currently up to 8 years), even after you delete your account.
Messages to us: as long as we need them to help you, then up to 2 years.

When you ask us to delete your account, we do it within 30 days and tell you when it’s done.

Keeping it safe

Everything between Hoverpad, this website and our server travels over encrypted connections (HTTPS). Payment details never reach us. Only we can open the account records, behind a password, and we keep as little as we can.

No system is perfectly secure. If a breach ever affects your information, we’ll tell you and the Data Protection Board of India, as the law requires.

Your rights

Under India’s Digital Personal Data Protection Act, 2023, you can ask us to:

Tell you what we hold about you, and who we’ve shared it with.
Correct anything that’s wrong or out of date.
Delete your account and the information in it, apart from the records the law makes us keep.
Withdraw your consent as easily as you gave it: sign out of Hoverpad and ask us to delete your account. Your notes stay on your PC either way, but Hoverpad needs an account to run a trial or a purchase.
Hear your complaint through our grievance officer (below).
Name someone to use these rights for you if you die or can’t use them yourself.

Write to [your support email] from the email address you use with Hoverpad, so we know the request is yours. We’ll reply within 7 days and finish within 30 days.

Grievance officer

If you have a complaint about your data or anything on this page, write to our grievance officer:

[the grievance officer’s name]
[the grievance email]
[your postal address]

We’ll acknowledge your complaint within 48 hours and resolve it within 30 days. If you’re not satisfied with our answer, you can complain to the Data Protection Board of India.

Children

Hoverpad is for adults. If you’re under 18, a parent or guardian must agree to your use of it and buy Hoverpad for you. We don’t knowingly keep a child’s information without that consent. If you think we have, tell us and we’ll delete it.

Changes to this policy

If we change this policy, we’ll update the date at the top. If a change affects what we collect or how we use it, we’ll tell you in the app or by email before it takes effect.