ItHub

Documents

Personal data policy

Effective from 30 October 2026

1. Who processes the data

The operator of personal data of ItHub is SDUNIO, Republic of Uzbekistan. For any question about your data, write to support@sdunio.com.

This policy follows the Law of the Republic of Uzbekistan “On Personal Data” No. ZRU-547 of 02.07.2019. The data are stored in the European Union, so we also respect the rights given by the EU General Data Protection Regulation (GDPR).

2. Sign-in with SDUNIO ID

ItHub has no passwords of its own: you sign in with SDUNIO ID, the shared account of the SDUNIO projects. Sign-up, password, email, phone, avatar and linking Telegram are handled by SDUNIO ID under its own personal data policy.

When you sign in, ItHub receives from SDUNIO ID your id, name, email, language and avatar.

3. What data ItHub keeps

  • Profile: display name, language, time zone, communities, the “looking for a team” mark and its note, notification settings.
  • Projects and teams: projects you create (title, description, logo), applications to teams (message, role, decision), team members, meetings.
  • Events: events you create (with a cover) and event subscriptions.
  • Team chats: your messages.
  • Notifications: the inbox on the site and their delivery by email or Telegram.
  • Reports: what is reported and the text of the report.
  • Waitlist: email, community, language, the page you came from, IP address and browser (to prevent abuse).
  • Technical data: IP address — to limit the rate of requests.

4. Why

  • to build teams: show projects, events and people looking for a team;
  • to deliver applications and messages to team members;
  • to send the notifications you have not switched off;
  • to tell you when your community opens (waitlist);
  • to handle reports and protect the site from abuse.

Publicly visible: your name and avatar in teams and projects, and with the “looking for a team” mark — your communities and note in the “People” section. We do not sell data, show ads or use analytics.

5. Legal basis

Your consent: you give it when you sign up for SDUNIO ID and when you send the waitlist form. For users in the EU the bases are also the performance of a contract (the site cannot work without these data) and the legitimate interest in preventing abuse.

6. Where the data are stored and cross-border transfer

The servers of ItHub are in France (EU), at the hosting provider OVHcloud. This means the data are transferred outside the Republic of Uzbekistan. They go to a country where the GDPR applies, which ensures adequate protection of the rights of data subjects (Article 15 of the Law). By giving your consent, you also agree to this transfer.

7. Who receives the data

  • Our own systems on these servers: the ItHub backend and its MongoDB database, the MinIO storage (logos and covers), InnerChat (team chats), InnerBroadcast (notifications by email and Telegram), InnerWaitlist (the waitlist), InnerFeedback (reports), SDUNIO ID (sign-in).
  • Other ItHub users — what is public or visible to the members of your team.
  • Telegram — only if you linked Telegram and turned notifications there on.
  • OVHcloud — hosting: the servers the systems above run on.
  • Public authorities — only when the law requires it.

8. How long we keep it

  • profile, projects, events, chats and notifications — while the account exists or until you delete them;
  • the waitlist — until you ask us to remove the entry;
  • the sign-in session — up to 30 days.

9. Cookies

We use only necessary cookies, with no analytics, ads or third-party trackers:

  • ithub_at — the access token, 10 minutes;
  • ithub_rt and ithub_idt — the sign-in session and signing out of it, up to 30 days;
  • ithub_auth_flow — protection of the sign-in, 10 minutes, only while signing in;
  • NEXT_LOCALE — the chosen language, until the browser is closed; set only if it differs from the browser’s language;
  • sd_consent — your answer to the cookie notice, 180 days.

Sign-in happens on the SDUNIO ID site, which has its own cookies — they are described in its policy.

10. Your rights

  • to know what data we have about you and get a copy;
  • to correct them: profile, communities, “looking for a team” and notifications — in your profile, projects and events — on their pages; name, email and avatar — in SDUNIO ID;
  • to delete the account: the “Delete account” button in SDUNIO ID (the link is at the bottom of your profile) closes sign-in to ItHub and other SDUNIO projects at once; the data is kept so that the account can be restored;
  • to have the data fully deleted and to withdraw consent: write to us from your account’s email;
  • for users in the EU — also to restrict processing, to object to it and to receive the data in a machine-readable form.

Write to support@sdunio.com; we answer within the time set by law. You may also complain to the authorized state body for personal data protection of the Republic of Uzbekistan or to an EU supervisory authority (in France — the CNIL).

11. Changes to this policy

We publish a new version on this page with a new date.