last updated September 2026
This Privacy Policy explains how Hub Market (the "Platform", "we", "us") collects, uses, stores and protects personal information when you visit the site, buy a digital product, or sell as a merchant. We handle personal data in line with applicable data protection law, including the General Data Protection Regulation (GDPR) for users in the European Economic Area and the United Kingdom. By creating an account or using the Platform you accept the practices described here. Read this alongside our Terms & Conditions and Refund Policy.
Account information: your name or display name, username, email address, password (stored only as a salted hash), country, and any avatar or profile text you add. Transaction information: your order history, invoice records, discount codes used, referral attribution, and, for sellers, payout details such as a crypto wallet address, UPI ID or bank reference. Seller verification information: business or identity documents you upload when applying to sell, and the outcome of that review. Support information: tickets, messages and attachments you send to us or exchange with a seller. Technical information collected automatically: IP address, browser and device type, operating system, referring page, pages viewed, download events and access times, along with security logs used to detect fraud and abuse. Card and bank details are handled entirely by our payment providers and are never stored on our servers; for crypto payments we store only the public on-chain transaction data needed to confirm your order.
We use a small number of cookies and equivalent browser storage. Essential cookies keep you signed in, protect forms against abuse and remember the contents of your cart. Preference cookies remember choices such as your display currency and theme. Referral cookies record which affiliate or partner link brought you to the Platform, for the limited attribution window shown in our affiliate terms, so that commission can be credited correctly. We may also use privacy-respecting analytics to count page views and understand which pages are useful. You can block or delete cookies in your browser settings, but sign-in, checkout and downloads will not work correctly without the essential ones.
We use your information to create and operate your account; to process orders, deliver digital files and issue licences; to generate invoices and receipts; to pay sellers and affiliates; to provide customer support and handle disputes and refund requests; to detect and prevent fraud, payment abuse, chargeback abuse, licence sharing and unauthorised redistribution; to secure the Platform against attacks and automated abuse; to send transactional emails such as order confirmations, delivery links, product update notices and security alerts; to improve our catalogue, search and overall user experience; and to comply with tax, accounting and other legal obligations. We only send marketing or newsletter email where you have opted in, and every such email carries an unsubscribe link.
Where GDPR applies, we rely on: contractual necessity, to give you an account, deliver purchases and pay sellers; legitimate interests, to keep the Platform secure, prevent fraud and abuse, and improve our services in a way that does not override your rights; legal obligation, to retain invoices and respond to lawful requests; and consent, for optional activity such as marketing email or non-essential analytics, which you may withdraw at any time.
We do not sell your personal information. We share it only where necessary: with payment providers to take payment and send seller payouts; with infrastructure providers that host the site, store files, send email and protect against attacks, all acting on our instructions; with sellers, who see the order metadata, licence and buyer identifier needed to support their product, and who never receive your payment details; with professional advisers, or in connection with a merger, acquisition or sale of assets, where the same protections continue to apply; and with authorities where we are legally required to do so, or where disclosure is necessary to protect our rights, our users, or someone's safety. Anything you post publicly, a review, a comment, a public seller profile, is visible to everyone, so do not include information you want to keep private.
We keep personal data only as long as it is needed. Account data is kept while your account is open and for a short period afterwards so that disputes can be resolved. Orders, invoices and payout records are retained for as long as tax and accounting law requires, typically several years, even after an account is closed. Security and access logs are kept for a limited period and then deleted or aggregated. Live seller verification chat sessions are not stored in our database and are permanently destroyed when the session closes. Encrypted backups are rotated on a schedule, so deleted data may persist briefly in a backup before it is overwritten.
We apply generally accepted technical and organisational safeguards: encrypted connections across the site, hashed passwords, optional two-factor authentication, an active session list you can review and revoke, encryption of sensitive stored credentials, strict role-based access so only authorised staff can view personal data, rate limiting and automated abuse protection, and signed expiring links for digital downloads. No method of transmission or storage over the internet is completely secure, so we cannot guarantee absolute security. Keep your password unique, enable two-factor authentication, and tell us immediately if you believe your account has been accessed by someone else.
Depending on where you live, you may have the right to access the personal data we hold about you, correct inaccurate information, request deletion, restrict or object to certain processing, receive a portable copy of your data, and withdraw consent where processing is based on it. Most of this is available directly from your account settings: update your profile, review sessions, or request export and deletion. Deleting your account removes your personal profile data, but invoices, payout records and fraud-prevention logs that we are legally required to keep are retained. We respond to rights requests within the timeframe set by applicable law, and you may complain to your local data protection authority if you are not satisfied with our response.
Listings, product files and seller profiles may link to external websites, repositories or download hosts. Those services operate under their own privacy policies, and we are not responsible for their practices or content. Review their policies before providing personal information. If you believe a seller is mishandling buyer data, report the listing so we can investigate.
The Platform is intended for adults and is not directed at children. We do not knowingly collect personal information from anyone under 18. If we learn that we hold such information, we will delete it and close the account. If you believe a minor has given us personal data, contact us and we will act promptly.
We use hosting, storage, email and payment providers that may process data in countries other than your own, including outside the European Economic Area. Where personal data is transferred internationally, we rely on recognised safeguards such as standard contractual clauses or an adequacy decision so that your information remains protected to an equivalent standard.
We may update this Privacy Policy as the Platform, our providers or the law change. The revised version is posted on this page with a new "last updated" date, and material changes are announced on the site or by email where appropriate. Continuing to use the Platform after an update means you accept the revised policy.
Questions about this policy, or want to exercise a data protection right? Use the Contact Us page or write to [email protected] and our team will respond. You do not need an account to reach us. Please include the email address on your account so we can verify the request before releasing or deleting any data. If your request concerns a specific order, opening a ticket from that order helps us answer faster.