Privacy Policy

Who we are

Bubex (bubex.io) is a private membership network that facilitates introductions between secondary market participants. For the purposes of this policy, “we”, “us”, and “our” refer to Bubex. You can contact us at contact@bubex.io.

What data we collect

We collect data you provide directly when you apply, sign up, or use the platform:

• —Identity data: name, email address, professional title, and LinkedIn profile if provided.
• —Account data: login credentials (stored as hashed passwords), authentication tokens managed by Supabase Auth.
• —Deal data: deal listings and expressions of interest you post or submit on the platform.
• —Usage data: pages visited, search queries, timestamps, and IP address — collected automatically for security and analytics purposes.
• —Cookies: session cookies required for authentication. We do not use advertising or tracking cookies.

How we use your data

• —To operate and secure your account and the platform.
• —To facilitate introductions between members in accordance with the NDA framework.
• —To send transactional communications (deal matches, account notifications). We do not send marketing emails without your explicit consent.
• —To comply with applicable law and enforce our Terms of Use.

We do not sell, rent, or trade your personal data to any third party.

Legal basis for processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following lawful bases: performance of a contract (operating your account and delivering the service), our legitimate interests (platform security, fraud prevention), compliance with legal obligations, and your consent where explicitly given.

Third-party services

We rely on a limited set of sub-processors to operate the platform:

• —Supabase — database and authentication infrastructure (EU region). Supabase's privacy policy: supabase.com/privacy.
• —Vercel — hosting and edge network. Vercel's privacy policy: vercel.com/legal/privacy-policy.

These providers process data only on our instructions and under contractual data protection commitments. We do not share your data with financial institutions, brokers, or other third parties.

Data retention

We retain your account data for as long as your membership is active and for up to 3 years after closure, unless a longer retention period is required by law. Deal data is retained for 5 years to satisfy potential regulatory record-keeping requirements. You may request deletion at any time (see Your rights below), subject to legal retention obligations.

Security

All data is encrypted in transit (TLS 1.2+) and at rest. Access to the database is restricted to authenticated service role credentials and is not exposed to the public internet. We apply row-level security policies to ensure members cannot access each other's private data.

Your rights

Subject to applicable law, you have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; object to or restrict certain processing; and data portability. To exercise any of these rights, email us at contact@bubex.io. We will respond within 30 days. If you are in the EEA, you also have the right to lodge a complaint with your local supervisory authority.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or a prominent notice on the platform at least 14 days before they take effect. Continued use of the platform after that date constitutes acceptance of the revised policy.