Privacy Policy & Data Protection.

1. Introduction

HubNest respects your privacy and is committed to protecting personal information processed through our websites, applications, products, APIs, and services.

This Privacy Policy explains what information we collect, why we collect it, how we use it, when we share it, how we protect it, and the choices and rights available to you under applicable data protection laws.

2. Information We Collect

Depending on how you interact with HubNest, we collect the following categories of information:

3. How We Use Information

We use the collected information for the following operational purposes:

• Provide and operate HubNest platform
• Authenticate users via Keycloak SSO
• Apply role-based access permissions (RBAC)
• Process subscriptions & billing invoices
• Deliver WhatsApp, SMS & Email alerts
• Execute AI recommendations & matching
• Detect fraud & protect platform security
• Comply with legal & regulatory obligations

4. Legal Basis & India DPDP Act Consent

Under India's Digital Personal Data Protection (DPDP) Act and international data privacy frameworks, HubNest processes personal information based on:

Where processing is based on consent, you may withdraw your consent at any time through account settings, subject to operational limitations.

5. Cookies & Tracking Technologies

HubNest uses essential session cookies and local storage tokens to keep users securely signed in via Keycloak SSO, maintain preferences, and measure website performance.

You can control cookie settings in your web browser. Disabling essential session cookies may prevent you from logging into HubNest apps.

6. Sharing of Information

HubNest does NOT sell your personal data. We only share information with trusted service providers strictly necessary to deliver the Services:

7. Customer Data & Data Controller Role

When an organization uses HubNest to manage information about its employees, candidates, customers, or leads, that organization acts as the Data Controller. HubNest processes such data as a Data Processor according to customer instructions and subscription agreements.

8. Technical & Organizational Data Security

HubNest employs bank-grade technical safeguards including AES-256 GCM encryption at rest, TLS 1.3 encryption in transit, Keycloak SSO with PKCE S256, Role-Based Access Control (RBAC), and Redis token blacklisting.

9. Data Retention Schedule

We retain personal information only for as long as reasonably necessary to fulfill subscription obligations, maintain active accounts, resolve disputes, and comply with legal retention mandates.

10. Data Deletion & Erasure Requests

Users or organizations may request deletion of personal information subject to legal retention rules. Upon account cancellation, data is purged from active databases and scrubbed from secondary backups according to standard retention schedules.

11. Your Individual Privacy Rights

Subject to applicable law (DPDP Act / GDPR), you hold the following rights:

12. Marketing Communications Opt-Out

You can opt out of promotional communications at any time via the unsubscribe link in emails. Essential transactional alerts (security notices, payment receipts, password resets) will still be delivered.

13. Third-Party Services & Links

HubNest integrates with external applications. Third-party services process information independently according to their own privacy policies.

14. Children's Privacy Protection

HubNest's B2B enterprise services are not directed to children under 18 years of age. If you believe a minor has provided data improperly, contact our privacy team for immediate removal.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material updates will be communicated through our website or via email prior to taking effect.