Privacy Policy

Last updated: August 22, 2026

This Privacy Policy describes the information we collect, how we use it, and the choices you have. It applies to the marketing site at www.hippocorner.com (including hippocorner.com) and the product at app.hippocorner.com (together, the “Service”).

HippoCorner is a multi-tenant software platform for running business operations. We do not sell your personal information.

1. Who is responsible

The Service is operated by Illuminating Software LLC, 3556 S 5600 W Unit 1-138, West Valley City, Utah 84120. Privacy questions: info@illuminatingsoftware.com or illuminatingsoftware.com.

2. Information we collect

Account information

• Email address, display name, and password (passwords are stored hashed, not in plain text)
• Roles assigned to your account (for example Root, Tenant Admin, or Member)
• Authentication session data (access tokens and refresh tokens) needed to keep you signed in
• The tenant (organization) you belong to, when your account is tenant-scoped

Accounts are created by a root administrator or tenant administrator. There is no public self-service signup.

Tenant and operational content you enter

• Tenant names, slugs, and whether a tenant is active
• Platform and tenant settings (including integration endpoints you configure)
• Branding files a tenant uploads to public object storage, such as logos, banners, favicons, and color values
• Other files stored in private object storage as the product grows
• Business records you later enter in ERP modules (for example inventory, accounting, or CRM data) when those modules are enabled

Tenant-scoped records are isolated by tenant. Root operators can work across tenants as part of operating the platform.

Technical and device information

• IP address, approximate location derived from IP, browser version, device type, and operating system
• Log data for security, debugging, and reliability (including timestamps, request paths, and error details)
• Application logs stored in a dedicated logging database

Marketing website

On hippocorner.com we may collect standard web analytics (page views, referrers, basic device data) to understand which pages are useful. We do not use the marketing site as a substitute for product account data.

Communications

If you email us, we receive the content of that message and any contact details you provide. If a tenant enables email or SMS through the platform message service, we process the addresses, phone numbers, and message content needed to deliver those operational messages.

3. How we use information

• Provide, maintain, and improve the Service (authentication, tenancy, settings, storage, messaging)
• Send operational messages you or your administrator configure (for example account or system notices)
• Protect against abuse, fraud, and unauthorized access
• Diagnose reliability issues and keep audit-quality application logs
• Comply with law and enforce our Terms of Service
• Respond to support requests

We do not sell your personal information or tenant contents to third parties for advertising.

4. How we share information

We share information only as needed to run the Service:

• People in your tenant — administrators and members see data according to their roles and permissions.
• Root operators — platform administrators can manage tenants, users, and system settings.
• Infrastructure providers — hosting, databases, object storage (MinIO or S3-compatible storage), and email/SMS delivery under contractual obligations to protect data.
• Legal — if required by law, regulation, legal process, or to protect rights, safety, and security.
• Business transfers — if we are involved in a merger, acquisition, or asset sale, information may transfer under appropriate protections.

5. Cookies and similar technologies

The product uses an HttpOnly cookie named hc_refresh to store a rotating refresh token so we can keep you signed in without putting that token in browser script storage. Access tokens are stored in the browser (localStorage) for API calls. The marketing site may use cookies or similar storage for analytics and to remember basic preferences. You can control cookies in your browser; blocking the refresh cookie will sign you out of the app.

6. Retention

We retain account and tenant data while the account or tenant is active and as needed to provide the Service. If you or an administrator request deletion, we delete or anonymize personal data associated with the account within a reasonable period, except where we must retain information for legal, security, dispute, or accounting obligations (for example limited server logs). Tenant branding files and private objects follow the same lifecycle as the tenant that owns them.

7. Your choices and rights

• Access and update — you can review much of your profile in the product. Tenant administrators manage users in their tenant.
• Sign out — available in the app; signing out revokes the current refresh session.
• Account deletion — ask a tenant administrator or root operator, or email info@illuminatingsoftware.com.

Depending on where you live, you may have additional rights under applicable law (access, correction, deletion, portability, or objection). Contact us to exercise those rights. We will not discriminate against you for exercising privacy rights that apply to you.

8. Security

We use measures appropriate to a multi-tenant business application, including encrypted transport (HTTPS), hashed passwords, tenant isolation in the application database, permission checks on the API, and rotating refresh tokens with reuse detection. No method of transmission or storage is 100% secure. Use a strong unique password and grant administrator access only to people who should have it.

9. Children

The Service is a business product and is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

10. International users

The Service is designed primarily for users in the United States. If you access the Service from another country, you understand that information may be processed in the United States, where laws may differ from those in your jurisdiction.

11. Changes

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the “Last updated” date. Material changes may also be communicated in-product or by email when appropriate. Continued use of the Service after changes means you accept the updated policy.

12. Contact

Illuminating Software LLC
3556 S 5600 W Unit 1-138
West Valley City, Utah 84120
Email: info@illuminatingsoftware.com
Phone: 800-252-0903

Related: Terms of Service