1. Who We Are

IdentityHub is operated by Saposs, located at Elisabeth-Feldhaus-Strasse 5, 49809 Lingen (Ems), Germany. For any privacy-related questions you can reach us at hello@identityhub.tech.

2. Data We Collect

We collect only the data necessary to provide our service:

Account data — email address, name, and hashed password when you register.
Identity configuration data — branding settings, OAuth provider credentials, redirect URLs, and webhook endpoints you configure for your identities.
End-user authentication data — email addresses and hashed passwords of users who sign up through your hosted login pages.
Usage and log data — IP addresses, browser type, pages visited, and timestamps collected automatically for analytics, security, and debugging.
Payment data — billing details processed by our payment provider (PayPal). We do not store full payment card numbers.

3. How We Use Your Data

To create and manage your IdentityHub account.
To provide, maintain, and improve the IdentityHub platform.
To process payments and manage subscriptions.
To send transactional emails (e.g., email verification, password resets).
To monitor and analyze usage patterns for security and performance.
To comply with legal obligations.

4. Legal Basis for Processing (GDPR)

We process personal data on the following legal bases:

Contract performance — processing necessary to provide the service you signed up for.
Legitimate interest — analytics, security, and fraud prevention.
Legal obligation — compliance with applicable laws and regulations.
Consent — where explicitly given, such as for marketing communications.

5. Data Sharing

We do not sell your personal data. We share data only with the following categories of third parties, strictly as needed to operate the service:

Infrastructure providers — hosting and database services.
Payment processors — PayPal for subscription billing.
Email delivery — Resend for transactional emails.
Analytics — Google Analytics for anonymized usage statistics.

6. Cookies

We use essential cookies required for authentication and session management. We also use Google Analytics cookies to understand how visitors interact with the site. You can disable non-essential cookies through your browser settings.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law. Log data is retained for up to 90 days for security and debugging purposes.

8. Your Rights

Under the GDPR and applicable data protection laws, you have the right to:

Access, correct, or delete your personal data.
Restrict or object to data processing.
Request data portability.
Withdraw consent at any time.

To exercise any of these rights, contact us at hello@identityhub.tech.

9. Data Security

We implement industry-standard security measures including encryption in transit (TLS), hashed passwords (Argon2), and role-based access controls. While no system is 100 % secure, we take reasonable steps to protect your data.

10. Children's Privacy

IdentityHub is not directed at individuals under the age of 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on our website. Continued use of the service after changes constitutes acceptance of the revised policy.

12. Contact

If you have any questions about this Privacy Policy, please contact us:

Saposs
Elisabeth-Feldhaus-Strasse 5
49809 Lingen (Ems), Germany
Email: hello@identityhub.tech