Legal

Last updated 8 September 2026

Who we are

Handover is operated by Advisionario S.A. de C.V., registered at Jose Maria Truchuelo 22, Col. Cimatario, Querétaro, Qro., C.P. 76030, Mexico. In this document, "we" and "Handover" mean that entity; "you" means the agency or freelancer holding a Handover account; and "your client" means the business whose website a manual describes.

What we store

We store only what is needed to run the service:

• Your account. Email address, a securely hashed password, and the date the account was created.
• Your agency profile. Agency name, logo, brand colour, chosen typefaces, support email, support hours, emergency phone and website address.
• Your manuals. Everything you type into a manual — client name, site details, domain and hosting information, account ownership records, editing instructions, what your retainer covers, links to files, and any custom sections you add.
• Your plan. Which plan the account is on, and how many manuals are published.

We do not build advertising profiles, we do not sell data to anyone, and we do not use the contents of your manuals for any purpose other than displaying them to you and to whoever you share the link with.

What we never store

Handover has no field for a password, API key, or any other credential, anywhere in the product. This is a deliberate design decision, not an oversight. A manual records which accounts exist and who owns them — never the secret that opens them.

Custom field and section names are screened, and names that describe a credential are refused at the database level. We also do not accept file uploads into manuals: the Files & assets section stores a link and an owner, never the file itself. The practical consequence is that if Handover were ever breached, there would be no credentials in it to steal.

Public manual pages

A manual you publish is served at a public web address containing a randomised identifier. Anyone holding that link can open it, so treat the link as you would any document you email to a client. Manual pages are marked noindex and are excluded from search engines, and they are not password-protected. If a link reaches someone it should not have, unpublishing or archiving the manual takes the page offline immediately.

Manual pages carry your branding. On the free plan a single line reading "Made with Handover" appears at the bottom; on a paid plan there is no reference to us at all.

Data protection roles

Under the UK GDPR and the EU GDPR, for the personal data contained inside your manuals — your clients' names, contact addresses and account ownership records — you are the data controller and Handover is the data processor. You decide what goes into a manual and who sees it; we store and display it on your instruction.

For your own account data — your email address and agency profile — Handover is the controller. The lawful basis is performance of our contract with you.

We process personal data only on your documented instructions, keep it confidential, apply appropriate technical and organisational measures, and assist you with data subject requests. A data processing agreement is available on request at hello@handover.agency.

Data is stored in the United States. Where personal data is transferred outside the UK or EEA, that transfer relies on Standard Contractual Clauses entered into with the relevant subprocessor.

If you are in Mexico, our Aviso de Privacidad sets out the same information in the form required by the LFPDPPP, including how to exercise ARCO rights.

Subprocessors

We use the following services to operate Handover. Each processes data only as needed to provide its function:

• Netlify — website and application hosting.
• Supabase — database, authentication and file storage.
• Resend — transactional email (sign-up confirmation and password reset).
• Stripe — payment processing. Card details are handled entirely by Stripe; we never see or store them.
• Cloudflare — privacy-preserving website analytics on handover.agency. Processes no personal data and sets no cookies.
• Umami — privacy-preserving website analytics on handover.agency. Sets no cookies, does not fingerprint browsers and stores no personal data. Hosted in the United States.

We will give notice on this page before adding or replacing a subprocessor that processes personal data.

Your rights and deletion

You can access, correct or export the contents of your manuals at any time from inside the app. Deleting a manual removes it and everything attached to it — accounts, editing instructions, coverage, assets and custom sections — and its public page stops resolving immediately.

To delete your entire account, email hello@handover.agency from the address on the account. We will delete your account and all associated manuals within 30 days and confirm when it is done. Backups are purged on their normal rotation, within 30 days of deletion.

Depending on where you live, you may have rights to access, rectify, erase, restrict or object to processing of your personal data, and to data portability. To exercise any of these, contact us at the address above. You also have the right to complain to your local data protection authority.

Cookies and analytics

Cookies. Handover uses a single cookie, set when you sign in, to keep you signed in. It is strictly necessary for the service to work and is not used for tracking or advertising. We set no other cookies anywhere, on this website or in the app.

Analytics. This website uses two analytics tools, Cloudflare Web Analytics and Umami, to count page views and see which pages people find useful. Neither sets cookies, neither fingerprints your browser, and neither collects personal data — there is no identifier that could be traced back to you or followed across other websites. Umami records the page visited, the referring site, and the country, browser and device type derived from your request; the data is aggregated and held in the United States. Because none of it identifies you, no consent banner is required, and there is no consent for you to give or withdraw.

We run no advertising pixels and no other third-party trackers. The app at app.handover.agency carries no analytics at all — nothing measures what you or your clients do inside a manual.

Terms of service

The service

Handover generates and hosts website owner's manuals. We provide the service on an "as is" basis and aim for continuous availability but do not guarantee uninterrupted access.

Your content

You retain all rights to the content you put into Handover. You grant us only the limited licence needed to store, process and display that content to you and to people you share a manual link with. You are responsible for having the right to include the information you enter, including your clients' details.

Acceptable use

Don't use Handover to store credentials, to host unlawful content, to impersonate anyone, or to attempt to access another account's data. We may suspend accounts that do.

Plans and payment

The free plan includes one active manual and carries a "Made with Handover" line. Paid plans are billed monthly and differ only in how many manuals may be published at once. Current prices for paid plans are shown on our pricing page. Paid plans are billed in advance through Stripe and renew automatically until cancelled. You can cancel at any time and retain access until the end of the paid period. Refunds are handled case by case — email us.

Cancelling does not take your clients' manuals offline. When a paid plan ends the account returns to the free plan: manuals you have already published remain online and readable at the same address, the "Made with Handover" line reappears, and you cannot publish further manuals beyond the free allowance until you subscribe again. We take this view because a client should not lose their documentation over a billing decision they were not party to. Deleting a manual, or deleting your account, does remove the page.

Ending the agreement

You may stop using Handover and delete your account at any time. We may terminate an account for breach of these terms, and will give reasonable notice and an opportunity to export your content where circumstances allow.

Liability

To the extent permitted by law, our total liability arising from the service is limited to the amount you paid us in the twelve months before the claim. We are not liable for indirect or consequential loss. Nothing here limits liability that cannot be limited by law.

Governing law

These terms are governed by the laws of Mexico, and disputes are subject to the exclusive jurisdiction of the competent courts of Querétaro, Querétaro, Mexico.

Changes

We may update this page. Material changes will be announced by email to account holders at least 14 days before they take effect, and the date at the top of this page will change.

Contact

For anything on this page — privacy questions, a data processing agreement, deletion requests, or a dispute — email hello@handover.agency. We answer within 7 working days.