Privacy Policy
Version 1.4.0 · Last updated 2026-09-26
Version française1. Data controller
HUB-EQUITY (French SAS, Paris Trade Register 107 121 683, 47 rue du Commerce, 75015 Paris, France). Contact: contact@hub-equity.com. No data protection officer has been appointed: appointment is not required for our processing activities, and the address above is the contact point for any request.
2. Data, purposes, legal bases
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Contact form and voicemail | Email, name, company, institution type, message; for a voicemail, the caller's number and the voice recording | Answering the request, pre-contractual exchange | Pre-contractual measures / legitimate interest (6.1.b, 6.1.f) | 3 years after last contact |
| Outreach to professionals | Name, first name, position, company, business email and phone, source of these details, exchanges and follow-up | Presenting our services when they relate to your professional activity, following up on our exchanges | Legitimate interest (6.1.f) | 3 years after the last contact from you; if you object, 3 years in an objection list, so that we do not contact you again |
| Account and client area | Email, hashed password (or the identifier of the Google or Microsoft account used to sign in), name, organisation, preferences | Providing the service, authentication | Performance of contract (6.1.b) | Account lifetime, then 3 years |
| Subscription, payment and invoicing | Name or company name, billing address, email, VAT number, amounts and payment history. Card details are entered at Stripe and never reach us | Payment collection, invoicing, accounting, exercise of the right of withdrawal | Performance of contract and legal obligation (6.1.b, 6.1.c) | 10 years from the end of the financial year (accounting records) |
| Technical and API logs | IP address, User-Agent, endpoints, API key id, timestamp | Security, quotas, billing | Contract and legitimate interest (6.1.b, 6.1.f) | 90 days for the IP address and User-Agent, erased at term. Call and cost counters are kept beyond that: they are the supporting record for billing |
| AI assistant | Your messages and the answers, in transit only: a conversation's history is held by your browser, not by us | Conversational analysis feature | Performance of contract (6.1.b) | No retention of content. Only the technical log line above remains (model, token count, cost) |
| Analytics | Aggregated navigation, cookieless and without IP address: country, region, city, browser | Traffic statistics | Legitimate interest (6.1.f) | 13 months |
| Error monitoring | Error traces: stack, endpoint, technical context, without IP address | Reliability, incident resolution | Legitimate interest (6.1.f) | 90 days (processor's retention) |
If we wrote to you in a professional capacity, your details come from professional sources: your company's website or publications, professional networks, a meeting or an introduction by a third party. We never solicit individuals by email. You can object at any time, without giving a reason, by replying "stop" to our message or by writing to contact@hub-equity.com: we will not write to you again.
3. Cookies
No advertising cookies and no third-party trackers. Analytics run on Umami, self-hosted and cookieless. The logged-in area uses a strictly necessary session token, which is exempt from consent. That is why the site displays no cookie banner.
4. Processors
| Processor | Role | Location |
|---|---|---|
| Hetzner Online GmbH | Hosting of the site, the application and the databases | Germany (European Union) |
| Anthropic PBC | AI assistant | United States |
| Sentry (Functional Software Inc.) | Error monitoring, EU region | European Union |
| Hostinger | Email (sending and receiving our emails, including contact requests) and transactional emails | European Union |
| Stripe Payments Europe, Ltd. | Online payment, subscriptions, VAT calculation | Ireland (European Union) |
| Odoo SA | Invoicing, accounting and customer relationship management (CRM) | Belgium (European Union) |
| OVH SAS (OVHcloud) | Telephone line and voicemail | France (European Union) |
5. Transfers outside the EU
Two processing activities currently involve a transfer outside the European Union: the AI assistant (Anthropic PBC, United States) and, through a sub-processor of Stripe Payments Europe, online payment (Stripe, Inc., United States). These transfers are framed by the European Commission's Standard Contractual Clauses and by adherence to the Data Privacy Framework. All other processors are located in the European Union.
6. Your rights
You have the right of access, rectification, erasure, restriction, objection and portability, as well as the right to set post-mortem directives. Exercise them at contact@hub-equity.com; we answer within 30 days. You may also lodge a complaint with the French supervisory authority, the CNIL (cnil.fr), or with the supervisory authority of your country of residence.
7. Security
Enforced HTTPS, hashed passwords, access control through workspace isolation, hosting in the European Union, encrypted backups.
8. Changes
The version in force is the one published on this page, dated at the top. Material changes are announced on the platform or by email.
The French version prevails in case of discrepancy. To exercise your rights, contact contact@hub-equity.com. See also the legal notice, the Terms of Service and the API Terms.