Data Policy
How data is owned, processed, stored, protected and managed within GloHub.
1. Purpose of This Data Policy
This Data Policy describes how GloHub, operated by GloHub ApS (“we”, “our”, “us”), handles business and personal data generated through use of our platform. It focuses specifically on data ownership, storage, processing, access and retention.
2. Data Ownership
All data entered, uploaded or generated by customers while using GloHub remains the exclusive property of the customer. We do not claim ownership over your business or accounting data.
Our role is limited to securely processing and storing data to provide the agreed services.
3. Data We Process
Business data
- Invoices, bills, vouchers and accounting records
- Inventory, stock movement and pricing data
- Customer and supplier information
- POS orders, payments, expenses and income records
User & system data
- User profiles and role assignments
- Login activity and audit logs
- Device, browser and usage metadata
- Application logs for monitoring and debugging
4. Data Processing
Data is processed solely to deliver platform functionality, including:
- Transaction processing and calculations
- Financial reporting and analytics
- Cloud synchronization across devices
- System performance monitoring
- Customer support and issue resolution
We do not process customer data for advertising or resale.
5. Data Storage & Location
- Data is stored on secure cloud infrastructure.
- Production and backup data are logically separated.
- Access is restricted to authorized systems and personnel only.
- Backups are maintained to prevent data loss.
6. Data Security Measures
- Encryption of data at rest and in transit
- Industry-standard password hashing
- HTTPS/TLS for all communications
- Role-based access control and tenant isolation
- Continuous monitoring for security threats
7. Data Isolation
GloHub uses a multi-tenant architecture. Each tenant's data is logically isolated so that no customer can access another customer's data.
8. Data Access & Portability
- Customers can access their data through authorized accounts.
- Export features may be provided for reports and records.
- Administrative access is logged and audited.
9. Data Retention & Deletion
Data is retained for as long as the customer maintains an active account or as required by applicable laws. Upon account termination, data is scheduled for secure deletion after a reasonable retention period, except where legally required to retain records.
10. Third-Party Data Processors
- Cloud hosting and infrastructure providers
- Payment gateway providers
- Email, SMS and notification services
- Monitoring and logging services
All third-party processors are required to maintain appropriate security and confidentiality standards.
11. Updates to This Data Policy
This Data Policy may be updated periodically to reflect changes in technology, regulations or platform functionality. Continued use of the service constitutes acceptance of the updated policy.