Privacy policy

Who is responsible

Controller: Hidora SA, Av. des Morgines 12, 1213 Lancy, Switzerland. UID CHE-286.910.173. Email legal@hidora.io or contact@hidora.io. Phone +41 22 552 14 14.

Two scopes, not to be confused. This notice covers the public site and its forms: what you type to ask for a trial, a quote or a conversation. It does not cover what you then place on the platform : your VMs, volumes and databases: that data falls under the service contract and the DPA, stays in the Swiss tenant, and Hidora accesses it only in the cases the contract provides for. The residency promises made elsewhere on this site are about that second scope, not about this notice: applicable terms on /terms and /legal/hikube. This page is not legal advice. Counsel or a DPO competent for nFADP and, where it applies, GDPR should validate it before you treat it as a binding notice.

Purposes and legal bases

Handle a request (trial, contact, partner, document): we process identity and company data to open a tenant or answer you. Basis: pre-contract or contract steps, and Hidora’s interest in answering a business request.

Quote and trial provisioning: the same data, plus the catalogue lines you selected, go to HubSpot so sales can issue a quote or open access. Basis: pre-contract steps.

Optional marketing: only if you tick the marketing box. You can withdraw that consent at any time by writing to the emails above or using the HubSpot preference tools we send you.

Audience measurement: Google Analytics, Tag Manager and HubSpot analytics load only after you accept the audience category, and only where an identifier is configured. HubSpot analytics also ties a contact request to the page and campaign it came from.

Advertising: the HubSpot ads pixel, and through it Google Ads, LinkedIn and Meta, load only after you accept the advertising category. Refusing changes nothing else on the site.

Functionality: the HubSpot chat and personalised content load only after you accept the functionality category.

You can refuse, pick category by category, or change your mind with “Manage cookies” in the footer.

Abuse prevention: Cloudflare Turnstile runs on public forms to block bots. Basis: security of the service.

Data we collect

Lead forms: first name, last name, work email, company, phone, message or selected quote lines, locale, and the legal/marketing ticks.

Technical: your IP address, used to block automated submissions and to limit repeated ones; the referrer; a request identifier; and the pages you visit if analytics is accepted.

We do not ask for a credit card on the public trial form.

Recipients and transfers

HubSpot (CRM, quotes, deals) stores lead and quote data so Hidora can follow the request. HubSpot is a US group. Transfers, if any, rely on HubSpot’s published customer terms and transfer tools (including standard contractual clauses where they apply). Hidora does not sell that data.

Google (Analytics, Tag Manager, Ads) receives measurement or advertising events only after the matching consent.

HubSpot, beyond the CRM, receives browsing data through its tracking, chat and advertising scripts, each one only after the matching consent. LinkedIn and Meta receive advertising events only after the advertising category is accepted.

Cloudflare (Turnstile) receives a CAPTCHA token and IP to verify a human.

Hosting and logs of this website stay on the infrastructure that serves hikube.cloud. Hikube customer workloads, when you become a customer, stay on Hidora’s three Swiss datacenters (Geneva, Gland, Lucerne) under the platform contract, not under this marketing notice alone.

Retention

CRM records for a request, trial or quote stay while we handle it and then for a period needed for sales follow-up, accounting or legal claims, unless you ask for erasure and no overriding duty applies.

Analytics and advertising identifiers last as configured in Google Analytics, Google Ads and HubSpot after consent; withdrawing consent stops the tags loading on this browser.

Rate-limit counters are short-lived, a matter of minutes.

Your rights

Under the Swiss nLPD you can ask for access, correction, deletion, restriction, and information on the processing. Where GDPR applies to your request, the usual GDPR rights also apply, including portability and objection to processing based on legitimate interest.

Write to legal@hidora.io or contact@hidora.io. We may need to confirm your identity. You can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC / PFPDT). If GDPR applies, you may also complain to a competent EU supervisory authority.

Cookies

Strictly necessary: locale, security, form anti-abuse and storing this very choice. Always on, no profiling.

Audience: Google Analytics, Tag Manager, HubSpot analytics. Advertising: HubSpot ads pixel, Google Ads, LinkedIn, Meta. Functionality: HubSpot chat and personalised content. Each category is accepted or refused separately, and nothing in them loads before you say so.

Use “Manage cookies” in the footer to revisit any of it.

Version

Effective 2026-09-22. Version 2026-09-22. Earlier public pages did not spell out purposes, recipients and rights in this detail.

Other legal pages

Legal hub · Imprint · General terms · Hikube contract