Privacy Policy

• Account: name, email, password (managed by Firebase Authentication, never stored in plain text), photo, language, plan, role within a team, proof of acceptance of the Terms and Policy (version and date).
• Company and billing: company name, address, company and VAT identifiers, subscription and invoice history. Card data is collected directly by Stripe.
• Sellers: information about the Stripe connected account (status, verifications performed by Stripe).
• Content: pages, websites, products, files, documents and other content you create or import.
• Technical and usage data: connection logs, IP address, device and browser type, country derived from the IP address, technical errors.
• Communications with us: support requests, feedback, reports.
• Connected services: access tokens (encrypted) and data from the third-party accounts you choose to connect (Section 9).
• Affiliate program: affiliate code, attributed sign-ups, commissions.

Without consent, visits to public pages are measured without cookies: only the country is derived from the IP address, locally, using the DB-IP database (no data is sent to that provider). This data is neither shared nor combined with other processing and is only used to produce aggregate statistics for the page owner.

With your consent, an audience session identifier (hs_sid, 30 minutes) is used to measure your journey; these events may be sent by our servers to PostHog (EU hosting); Google Analytics 4 may be used, with advertising features disabled.

Our Users’ websites (microsites) use cookieless audience counting.

You can change your choice at any time via the “Manage cookies” link.

• Cookie Policy

When you use data extraction from invoices, quotes or receipts, website generation from a description or page import, the content you provide (document, image, text or page address) is sent to Anthropic (United States) to produce the result. This only happens when you take that action. Under its API terms, Anthropic does not use this content to train its models.

Public pages may be automatically translated through DeepL (EU); their text is then sent to that provider.

No decision producing legal effects concerning you is based solely on automated processing.

Your data is only accessible to authorized Hob's Space staff and, depending on your settings, to your team members. We do not sell your personal data. We may disclose it to authorities where required by law.

We use the following providers:

The DB-IP geolocation database is used locally on our servers: no data is sent to it. Services you connect (Google, Meta, Notion, Apple…) receive or provide data at your request and under their own policies.

Our database is hosted in the European Union. Some providers are located in the United States or may access data from there (see table): these transfers are covered by the European Commission’s standard contractual clauses and/or the EU–US Data Privacy Framework where the provider is certified.

As HOBS SPACE FZ-LLC is established in the United Arab Emirates, access to data from that country by the publisher is covered by standard contractual clauses.

A copy of the applicable safeguards can be obtained on request at support@hobs.space.

You can connect third-party accounts to display your content and statistics, sync your calendars or import data. Each connection is optional and made on your initiative; we only request the permissions needed, read-only unless stated otherwise.

• Access tokens and app passwords are stored encrypted (AES-256-GCM); they are never displayed or shared.
• The data obtained is only used for the features you use (display on your pages, statistics, calendar); it is not sold, not used for advertising and not used to train AI models.
• Each team member connects their own accounts.
• When you disconnect, tokens and synced data are deleted immediately; the history of statistics snapshots already recorded is kept until your Account is deleted (Section 9.7).
• You can also revoke access from the third-party service’s settings.

When you connect your YouTube channel, Hob's Space uses YouTube API Services with the youtube.readonly and yt-analytics.readonly permissions, read-only, to display your channel information (name, image, subscribers, videos) and its statistics in your dashboard and, if you choose, on your pages.

By using this integration, you agree to the YouTube Terms of Service; the Google Privacy Policy applies to data processed by Google.

You can revoke access at any time from Hob's Space or from your Google Account permissions page.

• YouTube Terms of Service
• Google Privacy Policy
• Google Account permissions

When you connect Google Calendar: the calendar.readonly permission is used to display your events in the Hob's Space calendar and to compute your availability for appointment booking; the calendar.events permission is used to write appointments and events created in Hob's Space to your calendars (create, update, cancel).

The details of people who book an appointment (name, email, time slot, information entered) are then written to your Google calendar.

You can disconnect Google Calendar at any time from Hob's Space or from your Google Account permissions page.

Hob's Space’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. This applies to all Google data (YouTube and Google Calendar), which is:

• only used to provide or improve the user-facing features described above;
• only transferred to third parties when necessary to provide those features, to comply with applicable law, or as part of a merger, acquisition or sale of assets;
• never used for advertising, including retargeting or personalized advertising;
• never read by a human, except with your explicit consent, for security purposes (investigating abuse), to comply with applicable law, or when the data is aggregated and anonymized for internal operations;
• never used to develop, improve or train generalized AI or machine-learning models.

• Google API Services User Data Policy

Permissions requested, read-only:

• instagram_basic: profile and media of the Instagram professional account linked to your Page;
• pages_show_list: list of the Facebook Pages you manage;
• pages_read_engagement: information and engagement statistics of your Pages;
• pages_read_user_content: reading the latest comments posted on your Page’s posts, including the commenter’s name, the text and the date.

Comments are only shown to the Page admin, in their Hob's Space dashboard. Hob's Space does not publish anything to your accounts and does not request the business_management permission.

Meta data deletion

• Disconnect Instagram or Facebook in Hob's Space: tokens and synced data are deleted immediately;
• or remove the Hob's Space app in your Facebook (Apps and Websites) or Instagram settings;
• or email support@hobs.space specifying the account concerned: the request is processed within 30 days.

• Meta Platform Terms
• Meta Privacy Policy
• Connected Facebook apps
• Connected Instagram apps

These connections are used read-only, to display your profile, content and statistics:

• TikTok — Terms
• LinkedIn — Privacy
• X — Privacy
• Twitch — Privacy

Notion: through Notion’s OAuth authorization, you choose the database used as a calendar; Hob's Space reads its events to compute your availability and writes the appointments created in Hob's Space to it.

Apple iCloud (CalDAV): you provide your Apple ID and an app-specific password, stored encrypted (AES-256-GCM); Hob's Space reads your calendars to compute your availability and writes appointments to them. You can revoke this password at any time from your Apple account.

• Disconnecting in Hob's Space: tokens and synced data are deleted immediately. The history of statistics snapshots already recorded is kept until your Account is deleted; you can ask for its earlier deletion at support@hobs.space.
• Account deletion: all data from connected platforms is deleted.
• Revoking from the platform: Hob's Space can no longer access your data; also disconnect the service in Hob's Space to delete data already synced.
• Email request: support@hobs.space, processed within 30 days.

You can delete your Account at any time from Settings › Account, after re-authenticating. This immediately cancels your subscriptions and deletes your workspace (contacts, campaigns, invoices, quotes, expenses, documents, shops, websites and custom domains, statistics, integrations and tokens, files). Tickets sold for upcoming events are refunded; buyers keep access to the online courses they purchased.

Export your invoices and accounting documents first: keeping them for the legal periods is your responsibility. If you own a CREW company with other members, transfer or delete it first.

The following are kept for as long as necessary for our legal obligations or to defend our rights: data held by Stripe (customer, connected account), our invoices, affiliate commissions, and moderation and audit logs.

We apply appropriate technical and organizational measures: encryption of communications (HTTPS/TLS) and of data at rest by the hosting provider, encryption of connected-service tokens (AES-256-GCM), HttpOnly session cookie and CSRF protection, data segregation by workspace and role-based access control, audit logs, request rate limiting.

In the event of a data breach presenting a risk, we notify the competent supervisory authority and, where required by law, the individuals concerned.

You have the rights of access, rectification, erasure, restriction, portability and objection (including, at any time, to direct marketing), the right to withdraw your consent at any time and, in France, the right to set instructions regarding your data after your death.

Much of your data can be viewed, edited, exported or deleted directly in the Service. To exercise your rights: support@hobs.space. We may ask you to prove your identity where there is reasonable doubt. We respond within one month, which may be extended by two months if necessary.

You may lodge a complaint with a supervisory authority, in particular in your country of residence (in France: the CNIL).

• CNIL

The Service is reserved for persons aged 15 or over. We do not knowingly collect data from younger people; if you believe such an account exists, contact us so that it can be deleted.

Our use of cookies and trackers is described in the Cookie Policy.

• Cookie Policy

We may amend this Policy. Any change, including to the list of sub-processors, is announced by email and by an in-app banner at least 30 days before it takes effect. The date of the latest update is shown at the top of the page.

Email: support@hobs.space

Address: HOBS SPACE FZ-LLC, SFFO0547, Compass Building, Al Shohada Road, AL Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates