HubStilo Privacy Policy

Last Updated: December 17, 2024

1. Introduction

HubStilo ("the Extension", "we", "our") is a Chrome browser extension developed by MAN Digital that allows users to customize the appearance of HubSpot portals with custom brand colors and logos.

This Privacy Policy explains what data we collect, how we use it, and your rights regarding your data. By using HubStilo, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Automatically Collected Data

When you use HubStilo, we automatically collect the following anonymous usage data:

• Anonymous User ID: A randomly generated unique identifier (UUID) that doesn't contain any personal information
• Extension Version: The version of HubStilo you're using
• Usage Statistics: Which features you use (e.g., color extraction, export/import, logo upload)
• Portal IDs: The HubSpot portal IDs you configure (7-10 digit numbers found in HubSpot URLs)
• Timestamps: When events occur
• Error Logs: Technical error messages to help us fix bugs

2.2 Data Stored Locally

The following data is stored locally in your browser using Chrome's storage API:

• Portal Configurations: Portal IDs, names, colors, and logo URLs you configure
• Anonymous User ID: Your randomly generated user identifier
• Preferences: Your extension settings and preferences

2.3 What We DON'T Collect

We want to be crystal clear about what we don't collect:

• ❌ Your name, email address, or any personally identifiable information
• ❌ Your HubSpot login credentials or passwords
• ❌ Your HubSpot data (contacts, companies, deals, tickets, etc.)
• ❌ Your browsing history outside of HubSpot
• ❌ The content of your HubSpot portals
• ❌ Screenshots or visual data from HubSpot
• ❌ Any financial or payment information

3. How We Use Your Data

We use the collected data for the following purposes:

3.1 Essential Functionality

• Apply Your Customizations: Portal IDs are used to identify which HubSpot portals should receive your custom colors and logos
• Store Your Settings: Your configurations are stored locally so they persist across browser sessions

3.2 Product Improvement

• Understand Usage Patterns: Learn which features are most popular to prioritize development
• Fix Bugs: Error logs help us identify and fix technical issues
• Measure Adoption: Track how many users are actively using the extension
• Plan Features: Understand user needs to build relevant new features

3.3 Analytics

• Daily Active Users: Count how many people use the extension each day
• Retention: Measure how often users return to the extension
• Feature Usage: Track which features are used most frequently

4. Data Storage and Security

4.1 Where Your Data is Stored

• Local Storage: Portal configurations are stored locally in your Chrome browser using Chrome's secure storage API
• Cloud Storage: Anonymous analytics data is stored securely on Google Cloud Platform (BigQuery) servers located in the European Union

4.2 Data Security

We implement industry-standard security measures to protect your data:

• All data transmission is encrypted using HTTPS/TLS
• Analytics data is stored in secure, access-controlled databases
• Only authorized MAN Digital personnel can access analytics data
• No third-party services have access to your data

4.3 Data Retention

• Local Data: Stored indefinitely in your browser until you uninstall the extension or clear browser data
• Analytics Data: Retained for 12 months, then automatically deleted
• Error Logs: Retained for 90 days for debugging purposes

5. Data Sharing and Third Parties

5.1 We Do Not Sell Your Data

We do not and will never sell, rent, or trade your data to third parties.

5.2 Third-Party Services

HubStilo uses the following third-party infrastructure services:

• Google Cloud Platform (BigQuery): For secure analytics data storage. Google's privacy policy: https://cloud.google.com/terms/cloud-privacy-notice
• Vercel: For hosting our analytics API endpoint. Vercel's privacy policy: https://vercel.com/legal/privacy-policy

These services are bound by their own privacy policies and are used solely for infrastructure purposes. They do not have access to identify individual users.

5.3 Legal Requirements

We may disclose your information if required by law, such as:

• To comply with legal obligations or court orders
• To protect our rights, property, or safety
• To prevent fraud or security issues

6. Portal IDs and Business Data

6.1 Why We Collect Portal IDs

Portal IDs (e.g., "1969772") are HubSpot account identifiers that appear in HubSpot URLs. We collect these for legitimate technical reasons:

• Essential Functionality: To know which HubSpot portals should receive your custom branding
• Future Features: To enable planned features like team management and collaborative portal configuration
• Analytics: To understand how many portals users typically manage

6.2 Portal IDs are Not Personal Data

Under GDPR and other privacy regulations, Portal IDs are considered business identifiers, not personal data, because:

• They identify HubSpot accounts, not individual people
• They are publicly visible in HubSpot URLs to anyone with access
• They cannot be used to identify natural persons without additional information
• Multiple people typically have access to the same portal

6.3 Your Portal Data Stays in HubSpot

HubStilo only reads Portal IDs from URLs. We never access the content inside your HubSpot portals (contacts, deals, emails, etc.).

7. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your data:

7.1 Right to Access

You can request a copy of the data we hold about you. Contact us at developer@man.digital

7.2 Right to Rectification

You can correct any inaccurate data by updating your extension settings directly in HubStilo.

7.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your data by:

• Uninstalling the extension (removes all local data immediately)
• Emailing us to delete your analytics data: developer@man.digital

7.4 Right to Restrict Processing

You can disable analytics at any time in the extension settings (feature coming in v1.1).

7.5 Right to Data Portability

You can export your portal configurations using the "Export All Settings" feature in HubStilo.

7.6 Right to Object

You can object to data collection by not using the extension or by disabling analytics.

7.7 Right to Withdraw Consent

You can withdraw consent at any time by uninstalling the extension.

8. Children's Privacy

HubStilo is not intended for use by children under 16 years of age. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us immediately.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons.

When we make changes:

• We will update the "Last Updated" date at the top of this page
• Significant changes will be communicated through the extension (update notes)
• Your continued use of HubStilo after changes constitutes acceptance

We encourage you to review this Privacy Policy periodically.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. When we transfer data internationally:

• We use Google Cloud Platform's EU-based servers for European users where possible
• We ensure adequate safeguards are in place as required by applicable law
• Data transfers comply with GDPR requirements

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect and how we use it
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we don't sell data)
• Right to Non-Discrimination: We won't discriminate against you for exercising your rights

12. Contact Us

13. Supervisory Authority

If you are located in the EEA and believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection authority.