Privacy notice

In A Bit Hub is the delivery and support workspace operated by In A Bit. It is used by In A Bit staff and by authorised users at client organisations to run projects, plans, governance records and support tickets.

For personal data about our own staff and about the named contacts who use the Hub, In A Bit is the data controller. Where a client organisation puts its own content into the Hub, In A Bit acts as processor for that client under the terms of the engagement.

• Account details: name, business email address, user type and whether the account is active.
• Security data: sign-in timestamps, multi-factor enrolment state and recovery-code usage.
• Membership data: which organisations and projects you belong to, and your role in each.
• Content you create: tickets, comments, plan items, governance records, decisions and file attachments.
• Support correspondence: emails you send to our support address and their attachments.
• Audit records: a log of security-relevant reads and changes, tied to the acting account.

Free-text fields can contain more personal data than the Hub requires. Please avoid entering special category data (health, ethnicity, beliefs and similar) into tickets, comments or attachments.

• To provide the service — running projects, plans and support for your organisation. Lawful basis: performance of a contract, or legitimate interests where the contract is with your employer.
• To control access — authenticating you and deciding what you may see. Lawful basis: legitimate interests in operating a secure system.
• To keep records and investigate incidents — audit logging and security review. Lawful basis: legitimate interests in accountability and security, and legal obligation where applicable.
• To notify you — email and in-product notifications about work assigned to you or tickets you are involved in. Lawful basis: legitimate interests in service communications. These are operational notifications, not marketing; we do not send marketing from the Hub.

We do not sell personal data. We share it only with the suppliers that operate the service on our behalf: our application and database hosting platform, our email delivery provider for outbound notifications, and our file scanning provider for uploaded attachments. Each acts on our instructions under a written agreement.

Within the Hub, your content is visible only to people whose access the system permits — your own organisation, the projects you are a member of, and In A Bit staff supporting your account. Access rules are enforced in the database, not just in the interface.

• Account records: for as long as the account is active, then removed or deactivated on request.
• Project, plan and governance content: for the life of the engagement plus any period agreed with the client.
• Tickets and support correspondence: retained with the client record for the engagement.
• Audit records: retained for accountability and are not editable from the application.

Access is decided server-side on every request, administrator accounts must hold a second authentication factor, uploads are quarantined and scanned before they can be downloaded, and files are served only through short-lived links issued to authorised users. Security-relevant activity is written to an immutable audit trail.

Subject to the applicable data protection law, you may ask for access to your personal data, correction of inaccurate data, erasure, restriction, portability, or object to processing based on legitimate interests. Where In A Bit is a processor for your employer, we will pass your request to them.

To make a request, or to raise any privacy question or complaint, contact iabadmin@inabit.tech. We will acknowledge and respond within one month. If you are not satisfied, you may complain to your national data protection authority; in the UK that is the Information Commissioner's Office.

The Hub uses only what is strictly necessary to keep you signed in and to remember interface preferences. There is no advertising or third-party tracking.

Privacy contact: iabadmin@inabit.tech