What we know about you, and why.

Who is responsible

Hubbiot AB, organisation number 559277-7956, Lybäcksvägen 31, SE-566 31 Habo, Sweden, is the controller of the personal data described here.

Write to hello@hubbiot.com for anything on this page. We read it and answer within one month.

This notice covers hubbiot.com, the forms on it, and the mail we send you. The Hubbiot platform and the data our customers keep in it are a separate matter, governed by each customer agreement.

Visiting this website

We measure visits with Umami, which we run ourselves. It sets no cookies. For each visit it records the page you viewed, the page you came from, your browser, operating system, device type, screen size and language, and an approximate location (country, region and city) worked out from your IP address. The IP address itself is not stored. Web addresses are recorded without anything after a question mark.

Our web server and the platform it runs on keep ordinary access logs that include your IP address, the time, the page requested and your browser. We use them to keep the site secure and working, and they are deleted when the logs rotate.

Why: to see which pages are useful and to keep the site secure. Our legitimate interest (GDPR Article 6(1)(f)). You can object at any time; write to us.

This site sets no cookies and loads no advertising or tracking scripts from other companies.

The waiting list and the contact form

Waiting list: your name, work email, company, your role if you give it, the fact that you agreed, and the date. We use it to tell you when the platform opens and about Hubbiot. Basis: your consent (Article 6(1)(a)). You can withdraw it at any time, and then we remove you.

Contact form: your name, email, company if you give it, and your message. We use it to reply to you and to follow the conversation. Basis: our legitimate interest in answering people who write to us (Article 6(1)(f)), or steps you ask for before an agreement (Article 6(1)(b)).

How long: until you ask us to remove it. Entries are deleted automatically when there has been no contact for 24 months. Customers are covered below.

Submissions are stored on our own infrastructure in Sweden, and a notification goes to our shared mailbox.

Asking for a demo

If you ask for a demo of Hubbiot Heim, we collect your name, work email, company, your role if you give it, and the fact that you agreed. We then send you a link to confirm your address. Nothing else happens until you open it, and the link is valid for 24 hours.

To keep out automated requests we run a proof of work challenge on our own servers, a hidden field and a minimum fill time, and we limit requests per address and per network. For that we keep a keyed hash of your IP address (for IPv6, of its /64 range), never the address itself, and we do not log it.

When you confirm, our own platform software, Hubbiot Hive, builds your demo instance at an address of the form name.demo.hubbiot.com. Your name, work email address, company and the domain of your email address go with that request, and your email address becomes the first administrator of your demo. We allow one live demo per person and per organisation, which is why the domain is used.

The demo instance lives for 48 hours from the moment it is ready, and is then removed with the data in it. We count sign ins and activity for each demo instance per day, never per person.

Why: to give you the demo you asked for, and to follow up as the form says. Basis: your consent (Article 6(1)(a)) and steps you ask for before an agreement (Article 6(1)(b)). We keep the request, without the demo instance, until you ask us to remove it, and delete it automatically when there has been no contact for 24 months.

If we contact you first

We write to people at companies that may need what we make. If we have written to you and you have not written to us, this is the information the law requires us to give you (GDPR Article 14).

• Who: Hubbiot AB, 559277-7956, Lybäcksvägen 31, SE-566 31 Habo, Sweden. Contact: hello@hubbiot.com.
• What we hold: your name, your work email address, your role and your company.
• Where it came from: you, your employer, or public business sources such as company websites and professional profiles.
• Why: to tell you about Hubbiot and start a business conversation. Basis: our legitimate interest in business to business contact (Article 6(1)(f)). We weighed it against your interests in writing, and it is limited to work contact details.
• Private individuals, including sole traders on private addresses, get marketing mail only if they have agreed to it first.
• How long: if you do not respond, we anonymise your details after 24 months without activity.
• You can object to this at any time. Every marketing mail has an unsubscribe link that takes effect at once, and you can also write to us.

Customers and partners

For people at our customers and partners we keep contact details and the record of our dealings in accordance with our applicable agreement. Invoices and other accounting records are kept for seven years, as Swedish bookkeeping law requires. Basis: the agreement (Article 6(1)(b)) and legal obligation (Article 6(1)(c)).

Mail we send

Mail from us is sent through an email service provider. It may record whether a message was opened and which links were clicked. Every mail carries a short note that points to this page.

Who helps us handle it

These companies handle personal data for us as processors, and only on our instructions. We do not sell personal data, and we do not use it for advertising.

• a96, our infrastructure provider in Sweden, where the website, the forms store and our analytics run.
• Brevo, the email service we send mail through.
• Microsoft, which provides our email and calendars (Microsoft 365).

Where a provider is outside the European Economic Area, or may transfer data there, we use the safeguards the GDPR requires, such as an adequacy decision of the European Commission or its standard contractual clauses.

Your rights

You can ask us for a copy of the personal data we hold about you, to correct it, to delete it, to restrict how we use it, and to receive it in a format you can move. You can object to our use of it, and you can withdraw consent you have given. We make no decisions about you by automated means.

Write to hello@hubbiot.com. We may ask you to confirm who you are first.

You can also complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY): www.imy.se, imy@imy.se.

Changes

If we change what we do with personal data, we change this page and its date. A Swedish version is at /sv/integritet/. If the two ever differ, tell us.