HubCard Legal

Privacy Policy

Understand which data HubCard may process, why it is used, and which controls help protect your operation.

Last updated: April 24, 2026

1. Information we collect

We may process account information such as name, email, permissions, technical identifiers, and preferences needed for authentication, security, and HubCard operation.

When the platform is connected to your email environment, message data, senders, recipients, subjects, attachments, folders, logs, and technical metadata may also be processed.

2. How we use data

We use data to provide access to webmail, the admin console, metrics, domain rules, API keys, integrations, and other platform features.

We also use technical information to protect accounts, investigate incidents, prevent abuse, improve stability, and comply with applicable legal or regulatory obligations.

3. Legal bases

Processing may occur to perform a contract, comply with legal obligations, exercise legal rights, pursue legitimate interests in platform security and operation, or based on consent when required.

When you administer third-party accounts, you must ensure that you have an appropriate legal basis and authorization to process that data in HubCard.

4. Sharing

We may share data with infrastructure, authentication, database, observability, and technical service providers needed to operate HubCard.

We do not sell personal data. Additional sharing may occur due to legal requirements, orders from competent authorities, or to protect platform rights, security, and integrity.

5. Security

We adopt technical and organizational measures to reduce risks of improper access, loss, alteration, unauthorized disclosure, and data unavailability.

No system is fully immune to incidents. We recommend strong passwords, secure authentication, permission reviews, and good administrative practices.

6. Retention

We keep data as long as necessary to provide the platform, comply with legal obligations, resolve disputes, audit security, and meet the purposes described in this policy.

Email data, logs, and settings may follow retention policies defined by the administrator of the connected environment.

7. Data subject rights

Under applicable law, data subjects may request access, correction, deletion, portability, restriction, objection to processing, or information about data use.

Some requests may depend on identity validation, the action of the environment administrator, or retentions required for legal and security reasons.

8. Changes to this policy

This Privacy Policy may be updated to reflect legal, technical, or operational changes. The current version will remain available on this page.

We recommend reviewing this policy periodically to understand how data is processed in HubCard.

9. Contact

To exercise rights or ask privacy questions, contact the team responsible for administering your HubCard environment.