1. Introduction
GetHub.io ("we", "us", or "our") operates the get-hub.io website and platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Data Controller
The data controller responsible for your personal data is:
- Company: GetHub.io
- Address: Germany
- Email: privacy@get-hub.io
3. Information We Collect
3.1 Information You Provide
- Account Information: Email address, name, password (hashed)
- Profile Information: Avatar, timezone preferences
- Payment Information: Billing details processed through Stripe
- Communications: Support tickets, feedback, and correspondence
3.2 Information Collected Automatically
- Usage Data: Pages visited, features used, deployment activity
- Device Information: Browser type, operating system, IP address
- Cookies: As described in our Cookie Policy
3.3 Information from Third Parties
- OAuth Providers: GitHub or Google profile data when you connect your account
- Payment Processors: Transaction confirmations from Stripe
4. How We Use Your Information
We use the information we collect for:
- Providing and maintaining the Service
- Processing your transactions and managing your account
- Sending important service notifications
- Improving and personalizing your experience
- Responding to your inquiries and support requests
- Ensuring platform security and preventing fraud
- Complying with legal obligations
5. Legal Basis for Processing (GDPR)
We process your personal data based on:
- Contract Performance: To provide our services to you
- Legitimate Interests: To improve our services and ensure security
- Consent: For marketing communications and optional cookies
- Legal Obligation: To comply with applicable laws
6. Data Sharing and Disclosure
We may share your information with:
- Service Providers: Hosting, payment processing, analytics
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger or acquisition
We do not sell your personal data to third parties.
7. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. When you delete your account, we will delete your personal data within 30 days, except for data we are required to retain for legal purposes.
8. Your Rights (GDPR)
Under GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your personal data
- Restriction: Limit how we use your data
- Portability: Receive your data in a portable format
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent at any time
To exercise these rights, contact us at privacy@get-hub.io.
9. International Data Transfers
Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including encryption, access controls, and regular security assessments.
11. Children's Privacy
Our Service is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
13. Contact Us
If you have questions about this Privacy Policy, please contact us:
- Email: privacy@get-hub.io
- Data Protection Officer: dpo@get-hub.io
14. Supervisory Authority
You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.