Privacy Policy

Draft — last updated May 2026. This is an early-stage document and will be reviewed by a lawyer before launch. Some details may change as we grow.

The short version

We collect as little as possible. We never sell your data. We never share it with advertisers. Your hub is yours.

What we collect

Waitlist registration: name, phone number, and optionally email. That is all. No cookies, no tracking pixels, no analytics scripts.

Hub usage: when you run a hub, your data lives on your own server or on infrastructure we host for you. We design our systems so that we do not need access to your messages, files, calls, or content stored in your hub. Encryption is a priority and we are working toward end-to-end encryption across the platform.

What we do not collect

• We do not use Google Analytics, Facebook Pixel, or any third-party tracking
• We do not fingerprint your browser or device
• We do not build advertising profiles
• We do not sell, rent, or trade your personal information
• We do not read your messages, files, or call recordings

Cookies

We use a single session cookie (hub_session) when you log in to the hub. It is httpOnly, SameSite=Strict, and is used only to keep you signed in. We do not use marketing cookies, analytics cookies, or third-party cookies of any kind.

Data storage

Waitlist data is stored in an encrypted database on third-party hosted infrastructure. As a startup, our infrastructure spans multiple regions and providers. We are working toward offering data residency options as we grow. Hub data is stored on the server you choose to run your hub on — either your own hardware or infrastructure we provide.

Data retention

Waitlist data is kept until you ask us to remove it or until the waitlist period ends. Hub data is yours — you can export or delete it at any time from within the hub.

Your rights

You can ask us to delete your waitlist registration at any time by contacting us. You can export all data stored in your hub at any time. You can delete your hub and all its data at any time.

Third-party services

We use Cloudflare for DNS and DDoS protection. We use Resend for transactional email (password resets, waitlist confirmations). These services process only what is necessary to deliver the service and are bound by their own privacy policies.

Children

The hub is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it.

Changes

We may update this policy. Changes will be posted here with the updated date. We will not reduce your privacy protections without giving you notice.

Contact

For privacy questions or data requests: [email protected]

This is a draft. This privacy policy is not yet legally binding and is subject to change. It reflects our current intentions and practices as a startup. A final version will be published before launch.