LEGAL

Privacy & Cookies

Last updated: July 4, 2026

Overview

This Privacy & Cookies Notice explains how FabHub collects, uses, stores, and shares personal data when you use our websites, applications, support channels, developer features, newsletter, and related services. FabHub is the controller for personal data processed through the Service. FabHub is intended for business and professional use and is not directed to children, and we do not knowingly collect personal data from anyone under 18.

Data we process

We may process account details, organization and role information, billing and subscription records, authentication events, support and contact messages, newsletter and referral information, product usage, device and browser data, telemetry, consent choices, API keys and OAuth application metadata, webhook configuration, CMS content, files, operational records, and audit logs.

How we use data

We use data to provide and secure FabHub, authenticate users, manage organizations and subscriptions, process payments, provide support, send service communications, operate developer features, maintain audit trails, improve reliability, understand usage where consent allows, send marketing where requested, and comply with legal obligations. We do not sell your personal data, and we do not share it for cross-context behavioral advertising.

Cookies and similar technologies

We use cookies, local storage, and similar technologies for necessary service operation, security, preferences, analytics, functional support tools, referrals, and marketing where enabled. Non-essential analytics, marketing, and functional storage is controlled through the cookie preferences tool.

Data rights and DSAR requests

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object to, or export personal data. You can submit a data request from this page using the Make a Data Request button. We verify requests before disclosing or deleting personal data.

Make a Data Request

Submit a request to access, correct, delete, or export your personal data. We will verify your request before processing it.

Make a Data Request

Processors and sub-processors

FabHub relies on a focused set of sub-processors that process personal data on our behalf so that we can operate the Service. These currently include: Supabase (database, authentication, and file storage); Vercel (application hosting); Railway (backend and supporting services); Cloudflare (network delivery, security, and bot protection); Stripe (payments and subscription billing); Postmark (transactional email); Amplitude (product analytics, hosted in the EU region and loaded only with your consent); and Sentry and New Relic (error and performance monitoring, with personal data redacted). Optional AI and CMS features are powered by AI providers engaged under enterprise terms. Each sub-processor is engaged under a data-processing agreement that limits its use of personal data to providing its service to us. We keep this list current and will give notice of material changes to our sub-processors so that customers can object where they have the right to do so.

GuidMe assistance

GuidMe is an optional AI assistance provider available only on authenticated FabHub pages after you grant functional consent. If you start a session, your questions, optional voice or audio, optional frames from the screen or tab you choose to share, assistant responses, and transcript, session, and feedback metadata may be sent to GuidMe. The widget does not load on public pages; you control microphone and screen sharing and can withdraw consent at any time. Optional operational telemetry is disabled, and FabHub does not send your email, user ID, organization, or role.

International transfers

Some of our sub-processors process personal data outside the United Kingdom and the European Economic Area, including in the United States. Where personal data is transferred outside the UK or EEA, we rely on a safeguard recognized under UK and EU data-protection law, such as an adequacy decision, the UK International Data Transfer Agreement or Addendum, or the European Commission Standard Contractual Clauses, together with additional measures where they are needed. You can ask us which safeguard applies to a particular transfer.

Retention

We keep personal data only for as long as needed for the Service, security, audit, billing, support, legal, and operational purposes. Specific retention periods vary by data type and may be shortened or extended where required by law, dispute, security, accounting, or backup needs.

AI and automated processing

FabHub may use AI-assisted features to help generate, transform, classify, or summarize content. We use AI providers under terms that do not permit them to use your content to train their models, and we do not use your content, prompts, or AI outputs to train our own models. AI features are assistive only and are not used to make legal, financial, employment, or other decisions about you that produce legal or similarly significant effects. You should review AI-assisted output before relying on it and avoid submitting sensitive personal data into AI features unless it is necessary.

Security

We use technical and organizational measures designed to protect personal data, including access controls, encryption where appropriate, audit logging, and operational monitoring. No service can guarantee absolute security.

Changes to this notice

We may update this Privacy & Cookies Notice as FabHub, our sub-processors, or legal requirements change. We will post the updated notice with a new last-updated date, and for material changes we will provide additional notice, such as an in-product message or an email to account holders, before the change takes effect where required. Privacy & Cookies updates are generally notice-and-acknowledgement events; where a change introduces new optional processing that requires your consent, we will ask for that consent separately before starting it.

Data protection complaints

You can raise a data-protection complaint through support@fabhub.app with the subject "Data Protection Complaint" or by using any published support channel. We will acknowledge receipt within 30 days, make appropriate enquiries, document the outcome, and tell you the result. If you remain dissatisfied, you can complain to the UK Information Commissioner's Office or another competent supervisory authority.

Submit a Data Protection Complaint

Use the complaints channel for concerns about tracking consent, marketing consent, retention, security, accuracy, or how we handled a data request.

Submit a Complaint

Contact

Privacy and data-rights questions can be sent to support@fabhub.app.