1. Introduction and Identity of the Controller
Welcome to NotifyHub (hereinafter "NotifyHub", "we", "us", or "our"). This Privacy Policy explains how NotifyHub collects, uses, discloses, and safeguards your personal data when you visit our website at web-notify-hub.demomeb.com, use our notification platform, or interact with our services (collectively, the "Services").
NotifyHub acts as the data controller for personal data processed through our platform and website. For the purposes of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable national data protection laws, the controller is: NotifyHub / Web-Notify-Hub, reachable at privacy@notifyhub.com.
By using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please discontinue use of our Services immediately.
2. Personal Data We Collect
We collect the following categories of personal data:
2.1 Data You Provide Directly
- Account Registration: Name, email address, and password when you create an account.
- Billing Information: Payment card details (processed securely by Stripe; we do not store full card numbers), billing address, and VAT number (if applicable).
- Contact Forms: Name, email address, subject, message content, and optionally your website URL when you contact us through our contact form.
- Profile Updates: Any information you voluntarily add to your account profile.
2.2 Data Collected Automatically
- Usage Data: Log files, IP addresses, browser type, pages visited, time and date of visits, referring URLs, and session duration.
- Cookies and Tracking Technologies: Session cookies, authentication cookies, and analytics cookies. Please see our Cookie Policy for full details.
- Device Information: Device type, operating system, and screen resolution for compatibility purposes.
2.3 Data Collected Through Our Notification Widget
When end-users interact with notifications served by our embed script on third-party websites, we may collect anonymous interaction events (views, clicks, dismissals) linked to a notification ID. No personally identifiable information is collected from end-users without explicit consent.
3. Legal Bases for Processing (GDPR)
We process personal data on the following legal bases under Article 6 GDPR:
- Contract Performance (Art. 6(1)(b)): Processing necessary to provide you with our Services, manage your account, process payments, and deliver customer support.
- Legitimate Interests (Art. 6(1)(f)): Fraud prevention, security, improving our Services, and sending service-related communications.
- Legal Obligation (Art. 6(1)(c)): Compliance with applicable laws, including tax, financial reporting, and anti-money laundering obligations.
- Consent (Art. 6(1)(a)): Marketing communications and non-essential cookies, where we obtain your explicit consent. You may withdraw consent at any time.
4. How We Use Your Personal Data
- Creating and managing your NotifyHub account;
- Processing payments and managing subscriptions;
- Delivering, operating, and improving our notification platform;
- Providing customer support and responding to inquiries;
- Sending transactional emails (account confirmations, password resets, billing receipts);
- Sending service updates and, where consented, marketing communications;
- Monitoring and improving platform security and preventing fraud;
- Complying with our legal obligations;
- Conducting analytics to understand how the Services are used.
5. Data Sharing and Third-Party Recipients
We do not sell your personal data. We may share your data with the following:
- Payment Processors: Stripe, Inc., for secure payment processing.
- Hosting and Infrastructure Providers: Acting as data processors under our instructions and having signed Data Processing Agreements.
- Email Service Providers: For sending transactional emails.
- Legal and Regulatory Authorities: Where required by applicable law, court order, or regulatory requirement.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, subject to equivalent privacy protections.
6. International Data Transfers
If we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission. You may request a copy of applicable transfer safeguards by contacting us at privacy@notifyhub.com.
7. Data Retention
- Account data: Retained for the duration of your account plus 3 years after deletion.
- Billing records: Retained for 7 years to comply with financial and tax obligations.
- Contact messages: Retained for 2 years or until you request deletion.
- Server logs: Retained for 90 days.
8. Your Data Protection Rights
Subject to applicable law, you have the following rights:
- Right of Access (Art. 15 GDPR): Request a copy of the personal data we hold about you.
- Right to Rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete data.
- Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): Request deletion of your personal data under certain circumstances.
- Right to Restrict Processing (Art. 18 GDPR): Request that we limit the processing of your data.
- Right to Data Portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format.
- Right to Object (Art. 21 GDPR): Object to processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw at any time.
To exercise these rights, contact us at privacy@notifyhub.com. We will respond within 30 days.
9. Security
We implement industry-standard technical and organisational measures to protect your personal data, including TLS encryption in transit, hashed passwords, restricted access controls, and regular security reviews. No method of transmission over the internet is 100% secure.
10. Children's Privacy
Our Services are not directed to persons under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting a prominent notice on our website and, where appropriate, by email.
12. Contact Us
Email: privacy@notifyhub.com
Support: support@notifyhub.com