Legal notice, privacy, DPA
The documents that govern the use of Hubflow.
Legal notice
Hubflow SAS — share capital to be completed — RCS Reims — registered office to be completed. Publication director: to be completed. Hosting provider: French cloud provider, Paris and Gravelines.
Terms of use
To be drafted with your legal counsel. Points to cover: purpose, accounts, user obligations, ownership of documents (they remain yours), availability, termination and export, limitation of liability.
Privacy policy
Data processed: user accounts, contacts (contributors, recipients), access logs, document content (processed on behalf of the customer, never exploited). Purposes, legal bases, retention periods, data subject rights and DPO contact details to be completed.
Data processing agreement (DPA)
Hubflow acts as a processor within the meaning of the GDPR. The standard DPA covers: documented instructions, confidentiality, security measures, sub-processors, assistance, deletion or return at the end of the contract, audits. A version for signature is available on request.
Sub-processors
- Hosting: French cloud provider (EU)
- Transactional email delivery (EU)
- SMS delivery (EU)
- Automatic document reading: processed on Hubflow infrastructure (EU)