LGPD compliance

Hubstaff is LGPD compliant

At Hubstaff we understan how important privacy is for your business and its customers. We comply with Brazil’s General Data Protection Law (LGPD) (Lei Geral de Proteção de Dados Pessoais, Law No. 13,709/2018), which entered into force on September 18, 2020 and is enforced by the Autoridade Nacional de Proteção de Dados (ANPD). Our team works hard every day to ensure that data subjects are protected. Among the steps we've taken to meet LGPD requirements and be transparent about what we do with your data we updated our Privacy Policy, Data Processing Agreement, and list our sub-processors to reflect our LGPD obligations, and have established processes to handle data subject requests and security incidents involving personal data of individuals located in Brazil.

If you have any questions, comments, or concerns related to the LGPD, please feel free to contact us.

Hubstaff has appointed a data protection officer (DPO). You may contact Hubstaff's DPO at privacy@hubstaff.com. Brazilian data subjects may direct LGPD-related questions, requests, and complaints to the DPO, and Hubstaff will acknowledge and respond to requests in a manner consistent with LGPD Article 18, § 5.

Our data processing agreement

We have made a data processing agreement available.

Download the DPA (PDF)

Your rights as a Brazilian Data Subject

If you are located in Brazil, you may have certain rights regarding your personal data under the LGPD, including rights to access, correction, deletion, portability, information about how your data is shared, and options related to consent. You can learn more about these rights and how to exercise them in our Privacy Policy, and you may contact us at privacy@hubstaff.com to submit a request or ask questions about how we handle your personal data.

Hubstaff relies on several lawful bases under the LGPD to process personal data, including bases tied to performing its contracts, meeting legal or regulatory obligations, pursuing legitimate business interests, and, in some cases, consent. The specific legal bases we rely on for different types of processing, and how they apply in practice (including our approach to worker and employee data), are described in more detail in our Privacy Policy.Hubstaff is headquartered in the United States. The ANPD has not issued adequacy decisions for any country as of the date of this page. Transfers of personal data of Brazilian individuals to Hubstaff in the United States are conducted pursuant to Brazilian Standard Contractual Clauses (ANPD Resolution CD/ANPD No. 19/2024). These SCCs are incorporated into our DPA.

How do I delete my data?

To delete a Hubstaff, Hubstaff Tasks, or Hubstaff Talent account, follow these steps:

Step 1. Click on your avatar at the top right of your screen.
Step 2. Select My Account from the dropdown
Step 3. Select the red Delete account button.
Step 4. You’ll be prompted with a delete account dialog box. Make sure to:

• Read the terms carefully
• Check the confirmation box
• Enter your password
• Select Delete account to finalize your decision

Please note that as soon as the steps above are performed, the deletion process starts, and the account can’t be accessed anymore.

For organization owners: If you delete your accounts your organization's data will also be deleted.

For a more detailed breakdown, steps to delete accounts from other devices, and more, check out our support page.

Contact us

If you have any questions, comments, or concerns related to the LGPD, please feel free to contact us at privacy@hubstaff.com. If Hubstaff has not resolved your concern to your satisfaction, you have the right to file a petition with the ANPD at www.gov.br/anpd. This right exists independently of any complaint submitted to Hubstaff.