Privacy Policy

This Privacy Policy explains how DEVHUB SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (DEVHUB sp. z o.o.), ul. Prezydenta Gabriela Narutowicza 40/1, 90-135 Łódź, Poland, KRS 0001165543, NIP 7252354126 (we, the Controller) processes personal data in connection with the UploadHub service at uploadhub.gg (the Service). We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Polish law.

1. Data controller and contact

The Controller is DEVHUB sp. z o.o.. For any privacy matter, including exercising your rights, contact us at privacy@uploadhub.gg.

2. What data we collect

• Account data (via Discord sign-in): your Discord user ID, username and display name, avatar, and email address, provided to us by Discord when you authorise sign-in.
• Content you upload: the files themselves (images, GIFs, video, audio) and their metadata (file name, size, dimensions, type, checksum, and any metadata you send, such as a FiveM player identifier you choose to attach).
• Usage and technical data: IP address, request and bandwidth counts, storage totals, per-file download counts, approximate country of downloads (from our CDN provider), timestamps, API key and webhook identifiers (stored only as a hash and a short prefix), and audit records of administrative actions.
• Payment data: when you buy a paid plan, payment is handled by our payment processor, Stripe; we receive a customer and transaction reference, plan, status, and limited billing details needed to activate and manage your subscription. We do not receive or store full card details.
• Communications: messages you send to our support or abuse contacts.

3. Why we process it and legal bases

• To provide the Service (create your account, host and serve your content, enforce plan limits, process team and API access) - performance of a contract (Art. 6(1)(b) GDPR).
• Billing and subscriptions - performance of a contract and compliance with legal accounting obligations (Art. 6(1)(b) and (c)).
• Security, abuse prevention, rate-limiting, and metering - our legitimate interest in keeping the Service secure and reliable (Art. 6(1)(f)).
• Content scanning and moderation, including reporting unlawful content - our legitimate interest in a safe Service and compliance with legal obligations (Art. 6(1)(f) and (c)).
• Analytics and improvement (aggregate usage and country statistics) - legitimate interest (Art. 6(1)(f)).
• Responding to your requests - legitimate interest or, where relevant, steps prior to a contract.

4. Content scanning

Uploaded files are placed in a private quarantine area and automatically scanned before publication. Scanning may include malware detection and hash-matching against databases of known child sexual abuse material. We do not use your content to train advertising or unrelated machine-learning models. Where we detect unlawful material, in particular suspected CSAM, we may block it and report it, together with associated data, to the competent authorities and organisations as required or permitted by law.

5. Who we share data with (processors and recipients)

We share personal data only as needed to run the Service, with:

• Discord - authentication (sign-in).
• Cloudflare - content delivery, caching, DDoS protection, and download analytics.
• Our hosting and object-storage providers - servers that store and serve your files.
• Stripe - payment processing for paid plan subscriptions.
• Content-safety providers and authorities - for malware and CSAM detection and lawful reporting.
• Professional advisers and authorities - where required by law or to establish, exercise, or defend legal claims.

We do not sell your personal data. Processors act on our instructions under data processing agreements.

6. International transfers

Some providers (for example Discord and Cloudflare) may process data outside the European Economic Area. Where that happens, transfers are safeguarded by appropriate measures such as the European Commission's Standard Contractual Clauses or an adequacy decision.

7. How long we keep data

• Uploaded files are kept until you delete them or until the retention period for your project or plan elapses, after which they are deleted automatically.
• Account data is kept while your account exists and for a reasonable period afterwards.
• Billing records are kept for as long as required by tax and accounting law.
• Security logs and abuse records are kept only as long as necessary for their purpose.

8. Your rights

Under the GDPR you have the right to:

• access your personal data and receive a copy;
• rectify inaccurate data;
• erase data (the right to be forgotten), subject to legal retention;
• restrict or object to certain processing, including processing based on legitimate interest;
• data portability; and
• withdraw consent where processing is based on consent, without affecting prior processing.

To exercise any right, contact privacy@uploadhub.gg. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl), or your local supervisory authority.

9. Cookies

We use only strictly necessary cookies required to sign you in and keep your session secure (an authentication cookie). We do not use advertising or cross-site tracking cookies. Because these cookies are essential to provide a service you request, they do not require consent under applicable law. Our CDN provider may set operational cookies for security and performance.

10. Children

The Service is not intended for persons under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact privacy@uploadhub.gg and we will take appropriate steps.

11. Security

We apply technical and organisational measures to protect personal data, including access controls, hashing of API and webhook secrets, encrypted connections, and content scanning. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to respond to incidents appropriately.

12. Changes to this Policy

We may update this Policy from time to time. Material changes will be signalled by updating the date above and, where appropriate, by additional notice.

13. Contact

Privacy questions and data-subject requests: privacy@uploadhub.gg. To report unlawful or abusive content, use abuse@uploadhub.gg.