Privacy policy

1. Overview

HOV & Co (“we”, “us”, “our”) is a Georgia-based creative studio. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website and purchase digital content. We take your privacy seriously.

2. Information We Collect

Account Information: When you register, we collect your name and email address.

Purchase Information: When you make a purchase, we collect your email address for order confirmation. Payment details (card number, billing address) are collected and processed directly by Stripe — we never see or store your full payment card information.

Usage Data: We do not use analytics tracking or third-party advertising pixels. We log standard server access information (IP addresses, pages visited) for security and operational purposes only.

Cookies: We use a single session cookie to keep you logged in. We do not use advertising or tracking cookies.

3. How We Use Your Information

• To create and manage your account
• To process and fulfill your purchases
• To send transactional emails (purchase confirmations, download links, password resets)
• To verify your email address
• To detect and prevent fraud or unauthorized access

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Third-Party Services

We use the following third-party services to operate this site:

• Stripe — Payment processing. Stripe may collect and store your payment and billing information under their own Privacy Policy.
• Amazon Web Services (CloudFront/S3) — Secure delivery and storage of media files. AWS may log access requests per their Privacy Policy.
• SMTP Email Provider — Transactional email delivery (purchase confirmations, password resets, verification emails).

5. Data Retention

We retain your account information and purchase history for as long as your account is active or as needed to provide services. Guest purchase tokens expire after 30 days. You may request deletion of your account and associated data at any time by contacting us.

6. Data Security

We use industry-standard security measures including encrypted HTTPS connections, hashed passwords (bcrypt), time-limited signed URLs for media delivery, and session-based authentication. We never store plain-text passwords or full payment card details. While we take security seriously, no system is 100% secure — use a unique password for your account.

7. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your account and personal data
• Opt out of non-transactional communications

To exercise any of these rights, contact us via email at [email protected].

8. Children's Privacy

This site is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects when changes were last made. Continued use of the site after changes constitutes acceptance of the revised policy.

10. Contact

Questions about this Privacy Policy? Reach us at [email protected].