Home›Legal›Privacy Policy

Privacy Policy

Terms of ServicePrivacy PolicyGDPR DPA

This document is a draft and is currently under legal review. The final version will be published before the official launch of HummingTribe services. For questions, contact hello@hummingtribe.com.

1. Data Controller

HummingTribe is the data controller for the personal data collected through our website and services. Contact: hello@hummingtribe.com.

2. What Data We Collect

  • Account data: Email address, name (as provided during checkout via Stripe).
  • Billing data: Payment information is processed by Stripe and not stored on our servers.
  • Service data: S3 access keys, bucket metadata, hosting account details.
  • Analytics: We use Plausible Analytics, which collects no personal data and uses no cookies.

3. How We Use Your Data

  • To provision and manage your hosting services.
  • To send transactional emails (credentials, billing notifications).
  • To respond to support requests.
  • To comply with legal obligations.

4. Legal Basis (GDPR Art. 6)

We process your data based on: (a) performance of a contract (service delivery), (b) legitimate interest (security, fraud prevention), and (c) legal obligation (tax and accounting records).

5. Data Storage & Location

All service data is stored on dedicated servers in Falkenstein, Germany (Hetzner). Customer data never leaves the European Union. Transactional emails are sent via Brevo (EU-based SMTP provider).

6. Data Retention

Account data is retained for the duration of your subscription plus 30 days after cancellation. Billing records are retained for 10 years as required by Romanian tax law. Service data (S3 buckets, hosting files) is permanently deleted at the end of the billing period after cancellation.

7. Your Rights

Under GDPR, you have the right to: access your data, rectify inaccurate data, request erasure, restrict processing, data portability, and object to processing. To exercise any of these rights, contact hello@hummingtribe.com.

8. Third-Party Processors

  • Stripe — payment processing (USA, EU SCCs in place)
  • Brevo — transactional email (EU)
  • Plausible Analytics — website analytics (EU, no personal data)
  • Hetzner — server infrastructure (Germany)

9. Cookies

HummingTribe does not use cookies. Plausible Analytics is cookie-free and does not track individual users.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email at least 30 days before taking effect.

Last updated: Draft — pending legal review