Privacy Policy

Effective date: January 1, 2025

This Privacy Policy explains how Cubbie ("we," "us," or "our") collects, uses, shares, and protects personal information when you use our software procurement marketplace and related services.

1. Information We Collect

Account information: When you register, we collect your name, email address, company name, and role. Vendor accounts may also provide business contact details and payment information.

Usage data: We automatically collect information about how you interact with the Service, including pages viewed, search queries, products compared, and features used.

Transaction data: When you make purchases through the marketplace, we collect order details, billing information, and payment confirmations. Payment card data is processed by our PCI-compliant payment processor and is not stored on Cubbie servers.

Integration data: If you connect third-party accounts (e.g., via Stack Connect), we access subscription and usage data as authorized by you through OAuth or API key-based integrations.

2. How We Use Your Information

We use your information to: (a) operate and improve the Service; (b) personalize software recommendations and trust rankings; (c) process transactions and manage Cubbie Credits; (d) send transactional emails and service updates; (e) detect fraud and enforce our Terms; and (f) generate aggregate, anonymized analytics about marketplace trends.

3. How We Share Information

We do not sell your personal information. We may share data with: (a) vendors, to the extent necessary to fulfill a transaction you initiate; (b) service providers who assist us in operating the platform (hosting, payment processing, analytics); (c) law enforcement or regulators when required by law; and (d) a successor entity in the event of a merger or acquisition.

4. Cookies and Tracking

We use essential cookies to maintain your session and preferences. Analytics cookies help us understand aggregate usage patterns. You can manage cookie preferences through your browser settings. We do not use third-party advertising trackers.

5. Data Retention

Account data is retained for as long as your account is active. Transaction records are kept for a minimum of seven years as required for financial and tax compliance. You may request deletion of your account and associated personal data at any time, subject to legal retention requirements.

6. Security

We implement industry-standard security measures including encryption in transit (TLS 1.2+), encryption at rest, role-based access controls, and regular security reviews. While no system is completely secure, we take reasonable steps to protect your data.

7. Your Rights

Depending on your jurisdiction, you may have the right to: access, correct, or delete your personal data; object to or restrict certain processing; data portability; and withdraw consent. To exercise these rights, contact us at privacy@cubbie.com.

8. International Transfers

Cubbie is based in the United States. If you access the Service from outside the U.S., your data may be transferred to and processed in the U.S. We rely on standard contractual clauses or other lawful mechanisms for international data transfers.

9. Children

The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or in-app notice. The effective date at the top of this page indicates when the policy was last revised.

11. Contact

For privacy-related inquiries, contact us at privacy@cubbie.com or write to Cubbie, 169 Madison Ave #2336, New York City, NY 10016.