Draft for legal review. The fields in yellow are filled in with the company’s details. Last updated: [date]

Privacy policy

Hubsly is a platform for digital agencies operated by [legal name], with its registered address at [address]. This policy explains what data we process, for what purpose and what rights you have.

1. Who is responsible for what

There are two kinds of data in Hubsly and two different roles:

  • Your agency’s account data (users, emails, plan billing details): Hubsly is the data controller.
  • Data your agency adds to the hub (clients, contacts, projects, proposals, invoices, sites, servers, domains, notes): your agency is the controller and Hubsly acts as the data processor, following your instructions.

2. What data we process

  • Account and access: name, email, password (stored encrypted), role and the agency you belong to.
  • Hub content: what your agency adds to each module, including the PDFs it generates (proposals, invoices, reports) and the logos it uploads.
  • Connected sites: for maintenance, technical data from the client’s WordPress site (URL, versions, plugins, backup status) through Hubsly WP Manager.
  • Technical logs: IP address, date and time of access, in particular when someone views data marked as sensitive. They’re used for security and auditing.
  • Sales contact: what you fill in on the contact form.

3. What we use it for

  • Providing the service: running your portal, generating documents, connecting sites and showing you the information.
  • Security: preventing unauthorized access, limiting sign-in attempts and auditing who views sensitive data.
  • Communication: answering questions and letting you know about new releases and changes to the service.
  • Plan billing and compliance with legal obligations.

4. Legal basis and retention

We process data to perform the contract (providing the service), for legitimate interest (security) and with consent (marketing communications). We keep data while the account is active and, after that, for the period required by applicable law: [retention periods by data type].

5. Who we share it with

We don’t sell data. We use infrastructure providers to host the platform (Amazon Web Services, region [to be defined]) and email delivery providers for notifications ([provider]). We have data processing agreements with each of them.

6. Your rights

You can access, rectify, erase, restrict or object to the processing of your data, and request its portability, by writing to [privacy email]. If your agency added data about its clients, requests from those people are handled by the agency and we assist it. Supervisory authority: [authority by jurisdiction].

7. Security

Encryption in transit (HTTPS with HSTS), encrypted passwords, data separated by agency, rate-limited sign-in attempts and a log of access to sensitive data. Regular platform backups.

8. Changes

If we change this policy, we’ll publish it here and email each agency’s administrators when the change is significant.

Terms of service

These terms govern the use of Hubsly between [legal name] and the agency that subscribes to a plan. By creating an account, the person creating it represents that they’re authorized to accept these terms on behalf of their agency.

1. The service

Hubsly is a cloud platform for managing the operations of digital agencies: clients, partners, projects, maintenance, proposals, invoices, tasks, tickets, notes and documents, with a portal for each agency. Every module is available on every plan; volume limits and branding features depend on the plan you subscribe to.

2. Accounts and users

  • Each agency manages its users and roles, and is responsible for what they do inside its portal.
  • Credentials are personal. Let us know right away about any unauthorized access.
  • A user can belong to more than one agency; each agency’s data stays separate.

3. Plans, payments and changes

  • Plans are billed per agency, per month, in USD, at the published prices. Add-ons are added to the plan.
  • You can change plans at any time; the change applies according to [proration rule].
  • If the plan isn’t paid, access may be suspended after [grace days]; data is kept for [period] before being deleted.

4. Your content

Everything your agency adds to Hubsly is yours. You grant us a limited license to host, process and display it for the sole purpose of providing the service. You can export your data [formats and method].

5. Connected sites

By connecting a client’s WordPress site, your agency represents that it’s authorized to do so. Actions on the site (updating plugins, downloading backups) are run at the request of your agency’s users and are logged.

6. Acceptable use

You may not use Hubsly for unlawful activities, try to access other agencies’ data, deliberately overload the platform or resell the service without a written agreement.

7. Availability and support

We work to keep the platform available and give advance notice of scheduled maintenance. Support levels and, where applicable, committed availability are defined per plan: [detail per plan / Enterprise SLA].

8. Liability

Hubsly is provided "as is" to the extent permitted by law. Our total liability to your agency is limited to [limit, e.g. the amounts paid in the last 12 months]. We’re not liable for indirect damages or for content added by the agency or by third parties.

9. Cancellation and termination

You can close your account at any time from the hub or by writing to us. We may terminate the service for serious breaches, with prior notice except in urgent cases. In both cases you have [period] to export your data.

10. Governing law

These terms are governed by the laws of [jurisdiction]. Any dispute is submitted to the courts of [city], without prejudice to the rights consumers have under their local regulations.

Cookie policy

Hubsly uses the minimum cookies needed for the platform to work. We don’t use advertising cookies or sell browsing data.

1. What a cookie is

A small file your browser stores when you visit a site, to remember something from one page to the next: for example, that you’re already signed in.

2. Which cookies we use

  • [session name] · technical, necessary. Keeps you signed in to the hub. Lasts for the session or [days].
  • [CSRF token] · technical, necessary. Protects forms against forged submissions. Lasts for the session.
  • [preferences] · functional. Remembers language, active agency and view preferences. Lasts [duration].
  • [analytics] · analytics, optional. [Only if used: tool and purpose]. Lasts [duration].

3. Cookies on your agency’s portal

The white-label portal (agency.hubsly.com or your domain) uses the same technical cookies for your clients’ sign-ins. If your agency adds its own tools on its domain, it’s responsible for disclosing them.

4. How to manage them

Necessary cookies can’t be turned off without losing access. Optional ones are accepted or rejected from [banner / cookie settings] and, always, from your browser settings.