Hubble (“we”, “our”, or “us”) is a private SaaS platform designed to support logistics, fulfillment, and supply chain operations for shippers, third-party logistics providers (3PLs), enterprise customers, and brands.
This Privacy & Data Handling Policy describes how data is collected, processed, stored, used, shared, retained, and disposed of within the Hubble platform. Hubble aims to handle data in a transparent and responsible manner, in line with generally accepted data protection and privacy principles.
‍

For the purposes of data handling and processing activities described in this policy, Hubble acts as the data controller.
‍• Organization name: Hubble
• Company location: Hong Kong
• Primary data hosting location: Frankfurt, Germany (Europe)
‍

This policy applies to all users and customers who access or use the Hubble platform.Hubble is intended solely for business use. The platform is not directed at minors, and Hubble does not knowingly collect or process personal data relating to individuals below the applicable legal age. Where such data is identified, reasonable steps will be taken to remove it.
‍

4.1 Data Categories
‍
Depending on usage, this may include:
• Account and identification data, such as name, business email address, user role, and authentication credentials.
• Usage and operational data, including access logs, activity records, feature usage metrics, and system performance data.
• User-uploaded logistics data, documents and files submitted by users in connection with logistics, fulfillment, shipping, or warehouse operations.
• Technical and device data, such as IP address, browser type, operating system, and similar technical identifiers.
• Personally Identifiable Information (PII) for fulfillment purposes, limited personal data required to enable order fulfillment, delivery, and coordination with warehouses or logistics providers.
Hubble does not intentionally collect payment card information and does not seek to process sensitive personal data such as health, biometric, or government identification data.
‍

Personal data is processed only for specified, explicit, and legitimate purposes related to the operation of the Hubble platform. These purposes include:
• User authentication and access management
• Provision of core platform functionality
• Logistics, fulfillment, and warehouse coordination
• Customer support and issue resolution
• Monitoring platform performance and reliability
• Improving and maintaining the Hubble service
Hubble does not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals.
‍

Data processed through Hubble is primarily stored in Frankfurt, Germany, using infrastructure provided by DigitalOcean Holdings, Inc.Where data is accessed or managed from other locations, Hubble applies reasonable safeguards to ensure data is handled consistently with the principles described in this policy.
‍

Hubble implements appropriate technical and organizational measures to protect data against unauthorized access, loss, misuse, or alteration. These measures include:
• Encryption of data in transit
• Role-based access controls and authentication mechanisms
• Monitoring and logging of system activity
• Planned implementation of encryption at rest
Security controls are designed based on the nature of the data processed and assessed risks, and are reviewed as the platform evolves.
‍

Hubble does not sell personal data and does not use personal data for advertising purposes.
Personal data may be shared only where necessary to provide the service, including:
• Logistics and fulfillment partners, such as warehouses and shipping providers, strictly for the purpose of executing deliveries and related operations.
Where data is shared, Hubble seeks to limit such sharing to the minimum data necessary and to ensure it is used solely for the intended operational purpose.
‍

Hubble retains personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted for operational or legal reasons.
‍
9.1 Fulfillment-Related PII
Personally Identifiable Information used for logistics and fulfillment purposes is subject to a defined retention period:
• PII required to complete an order is retained for up to 31 days after the order reaches a finished state , meaning the order has either been fulfilled or cancelled. After this period, such PII is securely disposed of or anonymized and is no longer available in active operational systems.

9.2 Other Data
Other categories of data, such as account information and system logs, are retained in accordance with standard industry practices and may vary based on contractual, operational, or technical requirements.
‍

When data reaches the end of its applicable retention period, Hubble takes reasonable steps to ensure it is disposed of securely and appropriately. Disposal methods may include:
• Secure deletion from production systems
• Anonymization or irreversible aggregation
• Removal in line with backup retention cycles
These measures are intended to prevent further processing or unauthorized recovery of personal data.
‍

Subject to applicable laws and contractual limitations, users may request to:
• Access personal data relating to them
• Correct inaccurate or incomplete dataRequest deletion of personal data
• Requests can be submitted via the contact details below.
Hubble may take reasonable steps to verify the identity of the requester before responding.
‍

For questions, concerns, or requests related to privacy or data handling, please contact:
‍Email: privacy@thehubble.co
‍

This policy may be updated from time to time to reflect changes in the platform, operational practices, or applicable legal considerations. Updated versions will be made available through appropriate channels.