Privacy Policy

Who this policy covers

It covers people who create a Bube Order account, members invited into a workspace, and visitors to bube-order.com.

It does not cover the storefronts our customers publish using Bube Order. On those sites the customer is the data controller and their own policy applies.

Data we collect

Account data: name, email address, password hash, preferred language, and the workspaces you belong to.

Workspace content: products, posts, pages, orders, customer records and media you upload.

Technical data: IP address, browser and device type, timestamps, and error diagnostics generated when you use the service.

Signing in with Google — what we receive and how we use it

If you choose Sign in with Google, Google sends us the email address, name and profile picture of your Google account, using the openid, email and profile scopes. We request no other scope and we have no access to your Gmail, Drive, Calendar or Contacts.

We use this Google account data for one purpose only: to authenticate you and to link your identity to the correct workspace on Bube Order. We do not sell it, do not share it with advertisers or data brokers, do not use it for advertising or profiling, and do not use it to develop, improve or train machine learning models.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect Bube Order from your Google account at any time in your Google account permissions page; doing so stops Google sign-in but does not by itself delete your Bube Order account.

Why we use it

To operate your workspace and keep it available. To authenticate you and protect accounts from abuse. To send transactional email such as invitations, password resets and order notifications. To investigate faults and improve the product. To meet legal and accounting obligations.

We do not sell personal data, and we do not use workspace content to train models.

Legal basis

Where data protection law requires a legal basis, we rely on performance of our contract with you for account and workspace data, on legitimate interests for security and product improvement, and on consent for optional analytics and marketing email. You may withdraw consent at any time.

Sharing and processors

We share data only with service providers that help us run the platform: cloud hosting and databases, email delivery, error monitoring, and payment processing. Each acts on our instructions under a contract.

We also disclose data when the law requires it, or to establish or defend legal claims.

International transfers

Our providers may process data outside your country. Where that happens we rely on the safeguards those providers offer, such as standard contractual clauses.

How long we keep data

Workspace content is kept while the workspace is active. After you delete a workspace or close your account we remove the content within 30 days, except where we must keep records longer for accounting or legal reasons.

Backups are rotated and expire on their own schedule.

Your rights

You may request a copy of your data, ask us to correct or delete it, object to certain processing, or ask us to restrict it. Workspace owners can export and delete workspace content directly from the dashboard.

Write to support@bube-order.com and we will respond within 30 days.

Security

See our Security page for the technical and organisational measures we apply. If you believe an account has been compromised, contact us immediately.

Changes to this policy

We will post any change on this page and update the date above. If a change materially affects you we will also notify account owners by email.

Contact

Privacy questions and requests: support@bube-order.com