Privacy Policy

1. Data we collect

Account data. Your email address and name. If you sign in with Google, we also receive your Google account identifier and basic profile (email, name). We do not receive your Google password.

Workspace data. Workspace names and members, API keys (stored only as hashes), and settings you configure.

Connection data. For each app you connect: the provider, an account label, the permissions granted, and the credentials or tokens needed to act on your behalf. Credentials are stored encrypted.

Activity and security data. A record of each action run (action name, status, time, and redacted summaries of its input and result), plus security events such as sign-ins and rate-limit decisions. IP addresses used for abuse prevention are stored only as keyed hashes.

Cookies. Strictly necessary cookies keep you signed in and protect sign-in flows. We do not use advertising cookies.

2. Google user data

If you connect a Google service such as Gmail, Hubbers requests only the permissions you approve on Google’s consent screen. For Gmail these can include reading email, creating drafts and sending email on your behalf.

We use this data only to perform the actions you or the AI application you authorized ask for, and to provide and secure the service. We do not use it for advertising, we do not sell it, and we do not use it to train AI or machine-learning models. People at Hubbers do not read your Google data, except where you ask for support, where it is needed for security or abuse investigation, or where the law requires it.

Hubbers’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3. How we use data

• to run actions you authorize and return the results to the application that asked for them;
• to authenticate you and keep your workspace secure;
• to prevent abuse, enforce rate limits and investigate incidents;
• to operate, maintain and improve the service;
• to communicate with you about your account and the service.

4. Who receives data

The AI applications and agents you authorize receive the results of the actions they run, within the permissions you granted. Provider tokens are never sent to them.

We use infrastructure and service providers to host and operate Hubbers. They process data on our behalf. We do not sell personal data. We may disclose data if the law requires it or to protect the rights and safety of users and the service.

5. Security

Provider credentials are encrypted at rest with AES-256-GCM and are never returned to AI agents or shown again. API keys are stored as hashes. Connections are isolated per user and workspace. Traffic is protected with TLS. No system is perfectly secure, but we work to protect your data and will act on incidents promptly.

6. Retention and deletion

We keep account and workspace data while your account is active. When you disconnect an app, access stops immediately, the stored credential for that connection is deleted, and we ask the provider to revoke the token where it supports that. Security and audit records are kept as long as needed for security, abuse prevention and legal obligations. You can ask us to delete your account and data at any time.

7. Your choices and rights

You can disconnect any app, revoke any AI application, and remove API keys from your dashboard. You can also ask us to access, correct or delete your personal data, or object to certain processing, by writing to [email protected]. You can additionally remove Hubbers’s access from your Google account at myaccount.google.com/permissions.

8. International transfers

Your data may be processed in countries other than your own, where our providers operate. We take steps to protect it as described in this policy.

9. Children

Hubbers is not directed to children, and we do not knowingly collect personal data from them.

10. Changes to this policy

We may update this policy. The date at the top shows the latest version, and we will give notice of material changes on this site or by email.

11. Contact

Questions or requests about privacy: [email protected].