Privacy policy

The controller for account, billing, security and website enquiries is Haulbi Sp. z o.o., ul. Powstańców Śląskich 7A, 53-332 Wrocław, Poland. Contact us at legal@haulbi.com. For customer workspace content, the customer is generally the controller and should be contacted first about that content.

Account data may include email address, identity-provider issuer and subject, workspace membership and roles, authentication method and time, and session records. Haulbi does not receive your identity-provider password. Session records store a token hash rather than the token itself.

We process audit and security events (actor, action, subject reference and time), billing identifiers and invoice status, and usage meters such as tokens consumed or storage used. Stripe-hosted checkout handles payment instruments; Haulbi does not receive card details. A customer's workspace may contain information about its staff, customers, drivers or other people included in material the customer submits.

We use account and subscription data to provide the service or take steps requested before a contract (GDPR Article 6(1)(b)); invoice and tax data to meet legal duties (Article 6(1)(c)); and security logs, abuse prevention and service integrity on the basis of our legitimate interests (Article 6(1)(f)). We respond to enquiries under Article 6(1)(b) or (f), depending on the enquiry. Optional marketing or non-essential tracking would require a separate lawful basis and, where required, consent.

The marketing site uses a preference cookie for language and a consent-choice cookie. The Cal.com scheduler on the contact page loads only after you allow external content, either with the Load calendar button or in the cookie settings. Once loaded, Cal.com may receive technical connection data and set its own cookies; booking information you enter is processed by that service. You can instead email us directly. We do not run advertising pixels. With your analytics consent, Vercel Web Analytics measures visits and Speed Insights measures page performance. Both are disabled until you opt in; you can withdraw consent in Cookie settings.

The product's planned hosting is with Hetzner in Germany; transactional email is handled through Scaleway in France. Stripe processes billing in Europe and may involve onward transfers outside the EEA. Cal.com cloud scheduling may involve the United States. We do not describe all data as EU-only. Provider, location and transfer details are maintained on the provider page; data-residency arrangements should be verified before customer data is onboarded.

Account and workspace closure has a 30-day recovery window. Account and workspace JSON exports remain available during that period; operational content is then purged through the product lifecycle. Accounting and security records may need to remain longer under applicable law or for a defined security purpose. Exact statutory retention periods depend on the record and jurisdiction and should be confirmed before publication of a fixed schedule. De-identified lifecycle evidence may remain after closure.

Subject to the GDPR's conditions, you may request access, correction, erasure, restriction, portability or object to legitimate-interest processing. Contact legal@haulbi.com. Workspace owners can use the product's JSON export and closure controls. You can complain to Poland's data-protection authority (UODO) or another competent authority. The current product does not make solely automated decisions producing legal or similarly significant effects about people.

After you opt in to analytics, we load Vercel Web Analytics and Speed Insights. These tools measure website visits and page performance. Vercel describes them as cookie-free and designed not to identify individual visitors. Measurement can include page URLs, referrers, browser and device information, country, and performance metrics. We do not send booking form values or custom user identifiers. You can disable future analytics collection using Cookie settings in the footer.