1.0.0-draft · Last updated 2026-08-03HUB-EQUITY (French SAS, Paris Trade Register 107 121 683, 47 rue du Commerce, 75015 Paris, France). Contact: contact@hub-equity.com. No data protection officer has been appointed: appointment is not required for our processing activities, and the address above is the contact point for any request.
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Contact form | Email, name, institution type, message | Answering the request, pre-contractual exchange | Pre-contractual measures / legitimate interest (6.1.b, 6.1.f) | 3 years after last contact |
| Account and client area | Email, hashed password, name, organisation, preferences | Providing the service, authentication | Performance of contract (6.1.b) | Account lifetime, then 3 years |
| Technical and API logs | IP address, User-Agent, endpoints, API key id, timestamp | Security, quotas, billing | Contract and legitimate interest (6.1.b, 6.1.f) | 90 days for the IP address and User-Agent, erased at term. Call and cost counters are kept beyond that: they are the supporting record for billing |
| AI assistant | Your messages and the answers, in transit only: a conversation's history is held by your browser, not by us | Conversational analysis feature | Performance of contract (6.1.b) | No retention of content. Only the technical log line above remains (model, token count, cost) |
| Analytics | Aggregated navigation, cookieless and without IP address: country, region, city, browser | Traffic statistics | Legitimate interest (6.1.f) | 13 months |
| Error monitoring | Error traces: stack, endpoint, technical context, without IP address | Reliability, incident resolution | Legitimate interest (6.1.f) | 90 days (processor's retention) |
No advertising cookies and no third-party trackers. Analytics run on Umami, self-hosted and cookieless. The logged-in area uses a strictly necessary session token, which is exempt from consent. That is why the site displays no cookie banner.
| Processor | Role | Location |
|---|---|---|
| Hetzner Online GmbH | Hosting and contact-form storage | Germany (European Union) |
| Anthropic PBC | AI assistant | United States |
| Formspree | Marketing-page contact form routing (transitional, being replaced by storage on our own European infrastructure) | United States |
| Sentry (Functional Software Inc.) | Error monitoring, EU region | European Union |
| Hostinger | Transactional emails | European Union |
Two processing activities currently involve a transfer outside the European Union: the AI assistant (Anthropic PBC, United States) and the routing of the marketing-page contact form (Formspree, United States). Both are framed by the European Commission's Standard Contractual Clauses and by adherence to the Data Privacy Framework. All other processors are located in the European Union.
The use of Formspree is transitional: the contact form is being moved to our own European infrastructure, which will remove that second transfer. This page will be updated when it is done.
You have the right of access, rectification, erasure, restriction, objection and portability, as well as the right to set post-mortem directives. Exercise them at contact@hub-equity.com; we answer within 30 days. You may also lodge a complaint with the French supervisory authority, the CNIL (cnil.fr), or with your own local authority.
Enforced HTTPS, hashed passwords, access control through workspace isolation, hosting in the European Union, encrypted backups.
The version in force is the one published on this page, dated at the top. Material changes are announced on the platform or by email.
The French version prevails in case of discrepancy. To exercise your rights, contact contact@hub-equity.com.