1. Who controls your data
Hoshino Pte. Ltd., Singapore (“Hoshino”, “we”) is the controller of personal data processed through hoshino.com, our apps, and APIs. Contact: support@hoshino.com.
2. What we collect
- Account data: email address and, if you sign up, your password (stored hashed), display name, and plan.
- Product data you create: cards you scan, save, track, or add to a portfolio, and alerts you set.
- Payment data: handled by Stripe — we receive confirmation of your subscription and the last four digits/brand of your card, not your full card number.
- Usage & device data: pages viewed, features used, approximate region, browser/device type, and IP address, collected to run and improve the Service.
- Cookies: we use essential cookies only (to keep you logged in and remember basic preferences) and privacy-friendly, cookieless analytics (Plausible) that do not track you across sites or build advertising profiles. We do not use advertising or cross-site tracking cookies.
We do not knowingly collect data from children under the age of majority.
3. How we use it
- to provide and secure the Service (accounts, scans, portfolios, alerts, billing);
- to operate features you request and send service messages (e.g. receipts, alert notifications, security notices);
- to understand aggregate usage and improve the product; and
- to comply with law and enforce our Terms.
We rely on your consent, our contract with you, and our legitimate interest in running a secure, improving Service.
4. Who we share it with
We share personal data only with processors acting on our behalf, under contract, including:
- Stripe — payment processing;
- Plausible — privacy-preserving analytics;
- our hosting and email infrastructure providers — to run the Service and send transactional email.
We do not sell your personal data. We may disclose data if required by law or to protect our rights, users, or the Service.
5. International transfers
Our infrastructure and processors may be located outside your country (including the EU and elsewhere). Where data is transferred, we rely on appropriate safeguards (e.g. standard contractual clauses or an adequacy basis).
6. Retention
We keep account and product data while your account is active and for a reasonable period afterward as needed for legal, security, and record-keeping purposes, then delete or anonymize it. Analytics data is aggregated and non-identifying.
7. Your rights
Subject to your local law, you may request access to, correction of, or deletion of your personal data, object to or restrict certain processing, and export your data. You can delete your account at any time from settings or by contacting us. Email support@hoshino.com — we’ll respond within a reasonable time.
8. Security
We protect data with encryption in transit, hashed passwords, access controls, and hardened infrastructure. No system is perfectly secure; we cannot guarantee absolute security, and you are responsible for keeping your credentials safe.
9. Changes
We may update this Policy; the “last updated” date will change and, for material changes, we’ll give prominent notice.
10. Contact
support@hoshino.com, Hoshino Pte. Ltd., Singapore.