Hub One privacy policy
Last updated: 25 September 2026
This policy explains what personal data Hub One and the Hub One mobile app for iPhone and Android handle, why, and what choices you have. Hub One is the account and sign-in service for SDS Manager's business products (Stride, Signal Hub, Support Desk and Ledger). The mobile app is the companion to those products.
Who is responsible
SDS MANAGER AS, Thunesvei 2, 0274 Oslo, Norway (organisation number 980243699) operates Hub One and is responsible for your account data. For data your organization puts into the products, such as tasks, tickets, deals, messages and invoices, your organization decides how it is used, and we process it on its behalf.
Questions or requests: customerservice@sds-archive.com.
What we collect
- Account data: your name, email address, password (stored only as a one-way hash), two-factor authentication settings, and the organizations you belong to and your role in each. If you sign in with Google, we receive your name and email address from Google.
- Content you create: what you and your colleagues write or upload in the products: tasks, comments, chat messages, tickets and replies, deals and notes, invoices and approvals, files, photos, videos and voice notes.
- Sign-in and security data: your sessions, with IP address, browser or app details and the time you were last active; failed sign-in attempts; and an audit log of security-relevant actions.
- Device data for notifications: when you allow push notifications, a push token for your device, the device name and platform, and your notification settings.
- Crash and diagnostic data: when the app or a service fails, technical details about the error, the app version, device model and operating system. Crash reports do not contain your content.
- Billing data: if your organization buys a plan, the billing contact and invoices. Card and payment details go directly to our payment processor, Stripe; we never see or store full card numbers.
How the mobile app uses your device
- Camera, photos and microphone: only when you choose to attach a photo, video or file, or record a voice note. The app uses the limited photo picker, so it sees only the photos you pick.
- Face ID, Touch ID or fingerprint: if you turn on the app lock, your device checks it. Your biometric data never leaves the device and we never receive it.
- Offline cache: recently viewed items are kept on your device so they stay readable without a connection. Deleting the app removes them.
- Location and contacts: the app never asks for your location or your contacts.
- No ads and no tracking: the app shows no advertising, contains no advertising SDKs, and does not track you across other companies' apps or websites.
Why we use it
- To provide the service: sign you in, show your organization's products and content, and deliver the notifications you asked for (performance of our contract with you or your organization).
- To keep accounts secure: two-factor authentication, detecting suspicious sign-ins and blocking repeated failed attempts (our legitimate interest in security).
- To fix problems and keep the service reliable, using crash and diagnostic data (legitimate interest).
- To bill your organization and meet accounting and legal obligations (legal obligation).
We do not sell personal data, and we do not use your content for advertising.
Who we share it with
We share personal data only with service providers that help us run Hub One, under agreements that limit them to that purpose:
- Google Firebase Cloud Messaging and Apple Push Notification service, to deliver push notifications.
- Stripe, to process payments.
- Google, if you choose to sign in with Google.
- Our email provider, to send sign-in, invitation, password reset and notification emails.
- Sentry, for crash and error reports.
- AI providers (Anthropic, OpenAI and Voyage AI) when you or your organization use an AI feature, such as drafting a reply. Only the text needed for that request is sent.
- Our hosting and infrastructure providers.
Within your organization, your colleagues see what you share in the products, according to their roles. We may also disclose data when the law requires it.
How long we keep it
- Account data: while your account exists. When your account is deleted, we remove it, except records we must keep by law.
- Your organization's content: for as long as your organization keeps it, or until the organization's agreement with us ends.
- Security audit log: 2 years. Push notification delivery records: 30 days.
- Backups: 30 days, after which deleted data is gone from them too.
Your rights
Depending on where you live, including under the EU and EEA General Data Protection Regulation, you can ask to access, correct, delete or export your personal data, and object to or restrict how we use it. Email customerservice@sds-archive.com. For content your organization controls, we will pass your request to its administrators. How to have your account deleted, and what is kept afterwards: Delete your account. You can also complain to the Norwegian Data Protection Authority (Datatilsynet) or your local authority.
In the app you can revoke notification, camera, photo and microphone access at any time in your device settings, and sign out of other devices from your account's security page.
Children
Hub One is a business service for people invited by their organization. It is not meant for children, and we do not knowingly collect data from children under 16.
Changes
When we change this policy, we update the date at the top. If a change is significant, we will tell you by email or in the app before it takes effect.