Privacy Policy
1. Who we are and what this covers
This policy explains how Hubble App Pty Ltd (ABN 37 684 401 732) handles personal information. In this policy, "Hubble", "we", "us" and "our" mean Hubble App Pty Ltd.
We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Where you are in a place with additional privacy laws, we aim to meet those obligations as well.
Hubble connects to a merchant's commerce and advertising accounts, reads signals from them, and produces and runs advertising. That means there are two different situations covered here: information we handle for our own purposes, such as running your account, and information we handle on behalf of a customer, such as order data we retrieve from their Shopify store. Sections 2 and 3 deal with each.
Your use of the platform is also governed by our Terms of Service.
2. Collection and use of personal information
We collect personal information directly from you, from your use of the platform, and from the accounts you connect. We only collect what we need.
| What we collect | Why we collect it |
|---|---|
| Name, work email, password, business or brand name, role, and any profile image you add | To create and secure your account, and to identify who is acting in it |
| Waitlist details, such as your email, business name and store URL | To assess and prioritise access, to tell you when a place opens, and to send you launch updates you can opt out of |
| Billing name, billing address, and payment details handled by our payment processor | To charge subscription fees, issue tax invoices and meet record-keeping obligations. We do not store full card numbers |
| Access tokens and account identifiers for platforms you connect, such as Shopify and Meta | To read the signals the platform runs on and, where you enable it, to publish and adjust ads on your behalf |
| Usage and device information, such as pages and features used, actions taken, approximate location from IP address, browser and operating system, and error logs | To operate and secure the platform, diagnose faults, prevent misuse, and understand which features are used |
| Support messages and anything you send us | To answer you and keep a record of the request |
| Job applications, including your CV and cover letter | To assess you for a role |
We may also use this information to send you service messages, to tell you about features and offers, to meet legal obligations, and to protect our legal interests. Where the law requires consent, we ask for it and you can withdraw it.
We do not sell personal information.
3. Data we handle for our customers
When a merchant connects a store or ad account, we retrieve data on their instruction so the platform can work out what sells and what to advertise. That data can include order and product records, and information about how people interacted with their ads.
Where that data contains personal information about the merchant's customers, we handle it on the merchant's behalf and on their instruction. The merchant decides what is collected and why, and the merchant's own privacy policy governs it. We do not use it to build our own marketing lists and we do not sell it.
Hubble is built to work from commercial signals, not from customer identity. We ask merchants not to send us more personal information than the platform needs, and not to send sensitive information at all.
If you are a customer of a business that uses Hubble and you want your information accessed, corrected or deleted, contact that business first. If you contact us directly, we will refer you to them, or act on their instruction.
5. Sending information overseas
We are based in Australia, but some of our providers and some of the platforms you connect operate overseas, including in the United States and the European Union. That means your information may be stored or processed outside Australia.
Before disclosing personal information to an overseas recipient we take reasonable steps to make sure it is handled consistently with the Australian Privacy Principles, usually through our contract with that provider. You should be aware that once information is overseas it may be subject to lawful access requests by courts, law enforcement or government agencies in that country.
6. Information about our website
When you visit gethubble.ai, our hosting provider and the content delivery networks that serve our fonts and scripts receive your IP address, browser type and the pages you request, and log them for security and performance.
As at the effective date above, this website does not set analytics or advertising cookies and does not run a tracking pixel. If that changes, we will update this section and, where the law requires it, ask for your consent first.
The signed-in platform uses cookies and similar technologies that are necessary to keep you logged in and to keep your session secure. You can block cookies in your browser, but the platform will not work properly without the necessary ones.
Some browsers send a "do not track" or global privacy control signal. Where we are legally required to honour such a signal, we do.
7. Interest-based advertising
We may advertise Hubble on third-party platforms, including Meta and search engines. If we do, we may use tools those platforms provide to show ads to people who have visited our website or who resemble our existing customers, and to measure whether those ads worked.
Where that involves us sharing an identifier such as a hashed email address with a platform, we only do it where the law allows and, where consent is required, only with consent.
You can limit interest-based advertising in your ad settings on the platform showing you the ad, and through industry opt-out tools such as optout.aboutads.info and youronlinechoices.com.au. Opting out stops interest-based targeting, not all advertising.
Separately, when the platform runs advertising for a merchant, the merchant is the advertiser and the platform's own rules and disclosures apply to that activity.
8. Safeguards and retention
We take reasonable administrative, technical and physical steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. That includes encryption in transit, restricted access on a need-to-know basis, and separate storage of the access tokens for connected platforms.
No system is completely secure. If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
We keep personal information only as long as we need it for the purpose we collected it, or as long as the law requires. In practice, account and connected-platform data is kept while your account is open and deleted or de-identified after it closes, except where we must keep records longer, for example tax and financial records, which Australian law generally requires us to keep for 5 years. Revoking a connection stops us retrieving new data from it.
9. Your choices
You can opt out of our marketing emails at any time using the unsubscribe link in the email, or by emailing us. We will still send you service messages about your account, billing and security.
You can disconnect any platform from your account at any time. You can also ask us to close your account.
You can choose not to give us some information, but if it is information we need, we may not be able to provide the platform to you.
10. Your rights
You can ask us to:
- confirm what personal information we hold about you and give you access to it;
- correct it if it is wrong, out of date or incomplete;
- delete it, where we are not required to keep it;
- give it to you in a portable format, where that is required by law;
- stop using it for a particular purpose, or withdraw a consent you gave.
Email [email protected]. We may need to verify who you are first. We will respond within 30 days. Access is normally free, and if a cost applies we will tell you before we do the work. If we refuse access or a correction, we will tell you why in writing.
If you are in the European Economic Area or the United Kingdom, you also have rights to object to processing and to lodge a complaint with your local supervisory authority. If you are in California, you have rights to know, delete and correct, and to opt out of the sale or sharing of personal information. As noted above, we do not sell personal information.
11. Children
The platform is for business use and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, email [email protected] and we will delete it.
12. Updates to this policy
We will update this policy as the platform develops or the law changes. The effective date at the top shows when it last changed. If a change materially affects how we handle your personal information, we will tell you by email or in the product before it takes effect.
13. Contact us and complaints
Hubble App Pty Ltd (ABN 37 684 401 732), New South Wales, Australia.
Privacy enquiries and requests: [email protected]
If you think we have breached the Australian Privacy Principles, email us with the details. We will acknowledge your complaint and respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.