Hybiscus is committed to ensuring transparency in how we process your data, as well as ensuring the highest standards when it comes to handling your data.
Hybiscus is compliant with the EU GDPR and UK GDPR regulations, and as such we also provide a Data Processing Agreement (DPA) which you can sign.
Our servers are hosted in London, UK, which due to an adequacy decision between the EU and UK, means data can flow freely between the EU and UK, and thus remain compliant with EU GDPR and UK GDPR.
Our Data Processing Agreement (DPA) is a standardised version based on the one provided by GDPR.EU. To sign this DPA, please email us at support@hybiscus.dev, and we will send you a link to a DPA to sign.
Hybiscus provides a cloud storage option, which allows you to save the generated PDFs directly on your cloud storage provider's servers. This means the PDFs are never stored on the Hybiscus servers. Furthermore, as Hybiscus never stores the JSON data sent to the API, this means none of your data related to the PDF report will ever be stored by Hybiscus.
When generating a report via Hybiscus, only the following information is stored permanently on the server:
The JSON body sent to the API, which contains your data is NEVER stored by Hybiscus. This data enters a queue when sent to the API, and once consumed by the reports generator, it is immediately discarded.
The generated report is only stored on the server for 48 hours, after which it is permanently deleted. Furthermore, using the cloud storage option, you can ensure the report is never stored on the Hybiscus servers.
Updated August 19, 2024