Privacy Policy
Last updated: August 2026
Hubbley (“Hubbley”, “we”, “us”) provides a B2B wholesale storefront and order-management platform to businesses (“merchants”). This policy explains what information we collect, how we use it, and the choices you have. It applies to our website and platform at hubbley.io and merchant storefronts hosted by us.
Information we collect
- Account & company details — the name, email, password (hashed), company name, address, tax/VAT number and bank details a merchant provides to run their store and appear on invoices.
- Wholesale customer data — where a merchant’s B2B customers register on a storefront, we process their account and order information (name, email, company, addresses, order history) on the merchant’s behalf.
- Catalogue & order data — products, prices, stock, orders and invoices created in or imported into the platform.
- Connected-service data — when a merchant links an external platform (e.g. Shopify, Square, Squarespace, QuickBooks), we store the access tokens needed to sync and read the data they authorise.
- Usage & technical data — log data such as IP address, browser type and actions taken, used to operate and secure the service.
How we use information
- To provide, maintain and secure the platform and merchant storefronts.
- To process orders, generate invoices and send transactional emails (order confirmations, verification, password resets).
- To sync catalogue and inventory data with the external platforms a merchant connects.
- To provide support and communicate about the service.
- To comply with legal obligations and prevent abuse.
Sharing & third parties
We do not sell personal information. We share data only with service providers that help us run the platform — for example cloud hosting, our email/SMTP provider, and the third-party commerce platforms a merchant chooses to connect (Shopify, Square, Squarespace, QuickBooks, and similar) — and only as needed to provide the service or where required by law.
Roles
For a merchant’s own account and company data, Hubbley is the data controller. For the wholesale customer data a merchant collects through their storefront, the merchant is the controller and Hubbley processes that data on their behalf under our agreement with them.
Data retention
We keep information for as long as an account is active and as needed to provide the service, meet legal obligations and resolve disputes. A merchant can delete their workspace from Settings, which permanently removes their store’s data from the platform.
Security
We use industry-standard measures to protect data, including encryption in transit (HTTPS), hashed passwords, tenant data isolation, and scoped access tokens for connected platforms. No method of transmission or storage is completely secure, but we work to protect your information.
Cookies
We use strictly necessary cookies to keep you signed in and to operate the platform. We do not use them for third-party advertising.
Your rights
Depending on your location, you may have rights to access, correct, export or delete your personal data, or to object to certain processing. To exercise these rights, contact us at support@hubbley.io. If your data is held by a merchant’s store, we will refer your request to that merchant.
Changes
We may update this policy from time to time. Material changes will be reflected by the “last updated” date above.
Contact
Questions about this policy? Email us at support@hubbley.io.