Privacy statement

Who we are

Hubbery is a product of [company name], established at [address], registered with the Dutch Chamber of Commerce under number [registration number]. Privacy questions: support@hubbery.nl.

If you are a customer of a company that uses Hubbery

If you email, chat or call a company that uses Hubbery, Hubbery processes your message on behalf of that company. That company is the controller; we are the processor and act under the data processing agreement with that company. For questions about your data or to exercise your rights, contact that company.

What we process then: the content of your message, your email address, phone number or visitor id, attachments, and the answer you received. If a visitor accidentally shares a bank account, national ID number or password in the chat, it is recognised, masked in the note and not passed to the language model.

If you visit this website

The website sets no cookies to track you. Only with your consent do we measure visits anonymously. If you fill in the contact form, we use your name, email address and message only to reply; we keep it for at most one year.

If you use the dashboard

For employees of our customers we keep name, email address, an optional profile photo, session data and what they do in the dashboard (the audit trail). That is needed to know who sent which answer and to detect abuse.

Sub-processors

To write answers and to turn speech into text we use third-party language models. Which ones and where they run is listed in the sub-processor list attached to the data processing agreement. If your organisation has requirements for where data is processed, get in touch.

• Hosting and database: [provider]
• Language model for answers and transcription: [provider], under a processing agreement
• Telephony and speech: [provider], only when the phone channel is used

Retention

Customer conversations are kept as long as the Hubbery customer configures; chat conversations have a retention period per widget after which they are deleted. After a subscription ends we delete all data of that organisation within thirty days, unless the law requires longer retention.

Security

Data of different organisations is separated in the database; that separation is enforced by the database itself. Mailbox passwords and access tokens are stored encrypted. Traffic runs over TLS.

Your rights

You have the right to access, rectification, erasure, restriction, portability and objection. Email support@hubbery.nl; we reply within a month. You can also lodge a complaint with the Dutch Data Protection Authority.