1. Introduction

Hub ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our Service.

2. Data We Collect

We collect the following types of data:

• Account Information: Email address, name, and password hash
• User Content: Notes, documents, and files you create
• Usage Data: Login history, feature usage, and preferences
• Technical Data: IP address, browser type, device information

3. How We Use Your Data

We use your data to:

• Provide and maintain the Service
• Authenticate and secure your account
• Sync your data across devices
• Improve and personalize your experience
• Send important service notifications

4. Data Storage & Security

Your data is stored securely on AWS infrastructure in the EU (Frankfurt, eu-central-1). We implement industry-standard security measures including:

• Encryption at rest and in transit (TLS 1.3)
• Secure password hashing
• HTTP-only secure cookies for sessions
• Regular security audits

5. AI Features & Third Parties

When you use AI-powered features, your input may be processed by third-party AI providers (such as OpenAI, Anthropic, Mistral, and others). These providers process data according to their own privacy policies. We do not share your personal account information with AI providers.

Importantly, when you ask an AI feature to work with content you have connected — including emails and attachments from Gmail, or files from Google Drive — the relevant content is sent to the AI provider that powers your selected model, solely to produce the answer or action you requested in that turn. This content is used only to deliver the feature you asked for. It is not used to train generalized AI/ML models: when routing through an aggregator, Hub restricts execution to providers that do not retain or train on the data. This adheres to the Google API Services User Data Policy, including the Limited Use requirements (see the Google section below).

6. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data
• Portability: Export your data in a standard format
• Objection: Object to certain processing activities
• Restriction: Request limited processing of your data

You can export all your notes at any time using the Export feature in your account settings.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where required by law to retain it.

8. Cookies

We use cookies essential for the Service to function. For detailed information about our cookie usage, please see our Cookie Policy.

9. Google Account Integration & Google APIs

When you choose to sign in with Google or connect your Google account to Hub, we access certain information from your Google account through Google APIs, strictly to provide features you explicitly request:

• Authentication (profile & email): your name, email address, and profile picture, to authenticate you and create or access your account.
• Gmail: when you connect Gmail, Hub can read messages and attachments you ask it to retrieve, and — only on your explicit request — send emails, create drafts, and modify messages (archive, move to trash, mark read/unread). Hub accesses Gmail data solely to fulfil the action you initiate in the chat.
• Google Drive: when you connect Drive, Hub can search for and read the files you ask it to open, to answer questions or summarise their content.

Google account data is used only to deliver the features you request. We do not use Google user data for advertising, and we do notsell it or transfer it to third parties except as needed to provide the Service or as required by law. Google user data is not used to train generalized AI/ML models. You can revoke Hub's access at any time from your Google Account permissions page.

10. Google API Services User Data Policy Compliance

Hub's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.