Privacy Policy

Hubfront runs hubfront.io, the Hubfront member apps and the Hubfront register and store tablet. Businesses use Hubfront to take orders and payments, run bookings, sell gift cards and run a loyalty program. Guests use it to join a business, book, collect Hubs and see their receipts. This policy says what we collect, why, and what you can do about it.

When a business keeps records about its own guests in Hubfront, that business decides what it collects and how it uses it, and we handle that information on its behalf. For your own Hubfront account, we are responsible.

• Your account. Your email address, and your name and profile photo if you sign in with Google or Apple. We record each session's IP address and browser or device so you can stay signed in and we can spot misuse.
• Guests of a business. Your name, email and phone number, your visits, orders and receipts, your Hubs and ranks, notes the business adds, and whether, when and how you agreed to hear from it.
• Bookings and waivers. Who is booking, contact details, the party, notes, and for a signed waiver, the signature with the time and browser it was signed from.
• Payments. Card payments go through Stripe. We receive the amount, the card brand and its last 4 digits, and any refunds. We never see or store full card numbers. Stripe verifies the identity and bank details of businesses that take payments.
• Gift cards. The balance, what it was spent on, and the last 4 digits of the card number.
• Businesses. The business name, its locations and addresses, its staff and their roles, and the registers and tablets paired to it.

• To run Hubfront: sign you in, record orders, payments, bookings and Hubs.
• To send sign-in codes, receipts and booking messages.
• To keep Hubfront secure, prevent fraud and fix problems.
• To answer you when you contact us, and to improve Hubfront.

A business may send you marketing only if you agreed to it, and you can withdraw that at any time. We do not sell your personal information, and we do not use it for advertising.

• The business you deal with. A business sees the information about you that comes from your visits, orders and bookings with it, and nothing from other businesses.
• Service providers who run Hubfront for us under contract: Convex (our database and backend), Vercel (web hosting), Stripe (payments) and Resend (email). Google and Apple take part only if you sign in with them.
• Tools a business connects. If a business connects Claude by Anthropic, Claude can read and act on that business's information to the extent the business allows.
• When the law requires it, to protect people or Hubfront, or as part of a merger or sale of Hubfront, under this policy.

We keep your account while you use it. Sales, payment and gift card records stay as long as a business needs them for its accounts and taxes, then we delete or anonymize them. Sign-in codes expire after 10 minutes.

You can ask us for a copy of your information, to correct it, or to delete your account, by emailing hello@hubfront.io. For records a business holds about you, we will pass your request to that business or help it respond. Depending on where you live, you may have further rights under local law, and we will honor them.

Information travels encrypted, access is limited to the people and services that need it, and every business sees only its own records. No system is perfectly secure, so if we learn of a breach that affects you, we will tell you.

Hubfront is not meant for children under 13, and we do not knowingly collect their information. If you think a child has given us information, email us and we will delete it.

If we change this policy, we will update the date above, and tell you directly if the change is significant. Questions go to hello@hubfront.io.