Privacy notice
Waitlist for the HubOpus private beta. Last updated: 16 October 2026
This notice covers the "Request access" form on this website.
Who is responsible
Christopher Quet, publisher of hubopus.com ("HubOpus", "we"), decides why and how your details are used. You can reach us about your data at privacy@hubopus.com.
What we collect, and why
When you request a place we collect:
- your email address and your first name;
- optionally, which HubOpus modules interest you and the size of your team;
- the language of the page you used, so we write to you in it.
We no longer ask for your company, country or a free-text description. Entries made before this change keep what was entered then, until the retention period below ends.
We use these details to confirm your request, decide who joins the private beta, send your invitation, and show you a personalised confirmation page. We also publish a count of confirmed requests, rounded down to the nearest ten and only once it is above 100; it contains no personal data. We do not use your details for advertising and we do not sell or share them. The legal basis is your consent (you ask, then confirm by email) and, for running the beta, our legitimate interest in managing who we invite.
To protect the form from abuse, the servers keep short-lived request counters. A counter is keyed by your IP address, stored in clear, and, for the per-address limit, by a one-way hash of your email address (the address itself is not stored there). Counters are deleted by an hourly clean-up once they are 24 hours old, so they exist for at most about 25 hours. They are used for nothing else and are not linked to your entry. A hidden field in the form catches automated submissions; there is no third-party CAPTCHA and no tracking or advertising cookie on this site.
Confirmation by email (double opt-in)
After you submit the form we send one email with a confirmation link. The link opens a page where you press one button to confirm: nothing is confirmed by opening the link. Your request counts only once you press it. Once you have confirmed, your first name, email address and answers are also stored as a contact in our HubOpus workspace (we use HubOpus ourselves to manage the beta), tagged as a beta waitlist contact; removing your entry removes it from there too, unless you were already a contact of ours for another reason. An address that is not confirmed within 7 days is deleted. After you confirm, the same link keeps showing your confirmation page for 30 days; then it stops working. The link contains a random code, never your name or address. Every email we send about the waitlist contains a link that removes your entry immediately.
Joining our optional Telegram community is separate: you join it yourself from the link we show you, and we do not collect or receive your Telegram details.
How long we keep it
| Situation | Kept for |
|---|---|
| Request not confirmed | 7 days, then deleted |
| Confirmed, declined or never approved | 12 months after the last update, then deleted |
| Approved, and you create an account | Kept as the origin of your account for 12 months after the account is created |
| You ask us to remove it | Removed at once |
Who receives your details
- Our hosting: servers in the European Union (OVH SAS, France) and a managed PostgreSQL database stored in Frankfurt, Germany (Neon, Inc., United States).
- Our email provider: Scaleway Transactional Email (Scaleway SAS, France), which delivers the confirmation and invitation emails for us.
Your details are stored in the European Union. Neon is a company based in the United States: its processing for us is covered by a data processing agreement that includes the European Commission's standard contractual clauses.
Your rights
You can ask us at any time to access your details, correct them, delete them, restrict or object to their use, or give them to you in a portable format, and you can withdraw your consent whenever you like. The quickest way to delete your entry is the removal link in any waitlist email. For anything else write to privacy@hubopus.com. You also have the right to complain to your data protection authority; in France that is the CNIL (cnil.fr).
Fonts and cookies
The fonts on this site are served from our own servers, so your browser does not contact Google or any other third party when you read it. This site sets no cookies.
Server logs
Like every web server, ours writes a log line for each request: your IP address, the time, the page path (never what follows a "?" in the address, so never your confirmation link), the status and your browser's identification. It is used only to keep the site running and secure, is not linked to any entry, and is overwritten by automatic rotation after a few days.
Audience measurement
We measure how this site is used with HubOpus LP Analytics, our own tool, hosted in the European Union. It counts visits, pages, where visitors come from, the device type and language, how far pages are read, and clicks on buttons and links. It sets no cookie. Your IP address is used only to derive a country or city and a daily anonymous code, then it is discarded: it is never stored. Your browser keeps a random visit identifier only while the tab is open (session storage), and an opt-out flag only if you ask us not to measure your visits. What you type into the form is never read by this tool. Browsers that send "Do Not Track" or "Global Privacy Control" are not measured. Raw measurements are kept 25 months, then only totals. To stop being measured on this site, use the opt-out link: stop measuring my visits.