Privacy Policy

This policy explains what AgencyHub (“we”, “us”), a product by Kotabitus, collects when you use work.kotabitus.com, why, and the choices you have. In short: we only collect what we need to run the service, we don't sell your data, and we don't use advertising or tracking cookies.

What we collect

• Account details: your name, email address and a securely hashed password (we never store the password itself).
• If you sign in with Google: your name, email address and profile picture from your Google account. We request only these basic profile permissions. We don't access your Gmail, contacts, files or anything else.
• Workspace content: what you and your team add to your workspace, such as clients, projects, tasks, messages, time entries, invoices and payments.
• Technical data: for each signed-in session we keep the IP address and browser user agent, to keep your account secure and let you sign out.

How we use it

• To provide the service: sign you in, show your workspace, and let you collaborate with your team and clients.
• To keep it secure, prevent abuse and fix problems.
• To contact you about your account or important changes to the service.

We don't sell or rent personal data, and we don't use it for advertising.

Who can see your data

• Your workspace: members of your agency’s workspace see its content according to their role. Client users only see their own projects, the tasks and messages shared with them, and invoices that have been sent.
• Service providers: our hosting provider stores the data on our behalf. Google processes your sign-in only if you choose “Continue with Google”.
• Legal reasons: we may disclose data if required by law.

Cookies

We use one essential cookie to keep you signed in. We don't use analytics, advertising or third-party tracking cookies.

How long we keep it

We keep your data while your account or workspace is active. Removed team members are deactivated so the work they logged stays on record for the agency. You can delete your account yourself at any time from your profile: this permanently deletes your account and everything you created, and if you are a workspace's only owner, the whole workspace and all of its data. Deleted data disappears from our nightly backups within 14 days.

Your rights

You can ask to access, correct, export or delete your personal data, or object to how we use it. Email info@kotabitus.com and we'll respond within 30 days. If you're in the EU or UK you can also complain to your local data protection authority.

Security

Connections are encrypted (HTTPS), passwords are hashed, and each agency's workspace is kept separate from every other. No system is perfectly secure, but we work to protect your data.

Changes and contact

If we change this policy we'll update the date above, and tell you in the app or by email for significant changes. Questions: info@kotabitus.com.