Data controller
Hitover is operated by Eplepai. The privacy contact is hei@eplep.ai.
Information we process
We may process names, email addresses, phone numbers, message text, business information, submitted photos and credits. Cloudflare may process technical security logs as part of operations, but Hitover does not build visitor profiles.
Why the information is used
The information is used to follow up enquiries, moderate submitted content, manage business profiles, display local listings and protect the service from misuse.
Contact forms and submitted content
When you submit a tip, notice, photo or error, we store the information needed to process the case. Contact details are deleted after 90 days once the case is complete. Submitted content may be published if it is intended for the local portal and approved.
Businesses and membership
Business profiles may display a business name, category, address, website, phone, email, description and photos. Contact details used to manage claims, invitations and payment are processed internally.
Payments and subscriptions
Paid memberships are billed annually in NOK through Stripe, with 25% VAT added. Card details are processed by Stripe and are not stored by Hitover. Payment status, subscription tier and subscription period are stored to administer the customer relationship and meet accounting obligations.
CMS, operations and suppliers
Access and subscriptions are stored in Vektra OS. CMS content and private original files are stored in Kundedata Supabase. Published photos are mirrored to Cloudflare R2. Service providers may process data when necessary to provide the service.
Cookies and analytics
Ordinary portal visits do not use analytics cookies, Google Tag Manager or visitor IDs. The portal counts aggregate use – page views, searches, submissions and bot queries – with path, status code and which site the visit came from, never who visited. Language choice may be stored locally in the browser. Signed-in editors and business owners use necessary secure session cookies on their own work surfaces.
The place bot
On portals with a place bot, your question is sent to an AI service to produce the answer, together with the most recent exchanges in the conversation. The conversation exists only in your browser tab and is never stored on the server. What is counted is cost and the number of queries per portal, never the content of your question.
The weekly letter
On portals with a weekly letter, your email address is stored to send one weekly email. Sign-up is confirmed with a link, and every letter has one-click unsubscribe. Delivery rows containing an email address are deleted after 30 days; only anonymous aggregate counts are kept.
Retention
Contact details in ordinary submissions are deleted after 90 days once the case is complete. Customer, access and subscription data is retained for the duration of the customer relationship and afterwards for as long as accounting, security or documentation requirements apply.
Your rights
You may request access, correction, deletion, restriction or a copy of personal data we process about you. We may request necessary identification before disclosing or changing data.
Contact
Send privacy questions to hei@eplep.ai. State which local portal or enquiry the matter concerns.