QubeBack to home

    Privacy Policy

    Last updated: September 4, 2026

    This policy describes how personal data of visitors to this website is processed, in accordance with Article 13 of EU Regulation 2016/679 (GDPR).

    Data controller

    The data controller is Qube, VAT number 01742700519. For any request related to the processing of personal data, you can contact the controller at qube@paolinux.com.

    Data collected

    This website does not use any data-collection forms, newsletters, or profiling systems. During normal browsing, some data is automatically collected due to the technical nature of internet communication protocols (e.g. IP address, browser type, operating system, pages visited, date and time of visit), recorded in the hosting server's logs. This data is not collected to be associated with identified individuals, but for technical and security purposes.

    Purpose of processing

    Browsing data is used exclusively to ensure the website functions correctly, to detect any anomalous behavior or unlawful activity (IT security), and for aggregated, anonymous statistical purposes.

    Legal basis

    The processing of browsing data is based on the controller's legitimate interest (Article 6(1)(f) GDPR) in ensuring the security and proper functioning of the website.

    Cookies and similar technologies

    This website does not use profiling, analytics, or third-party marketing cookies. It only uses the browser's localStorage to remember the language preference (Italian/English) chosen by the user: this is a technical technology, necessary for the website to function, which does not require consent under applicable law, and whose data is not shared with third parties.

    Data retention

    Technical server logs are retained only for as long as strictly necessary for the security purposes described above, in accordance with the guidance of the Italian Data Protection Authority, and in any case not longer than 6 months, unless required for the investigation of criminal offenses.

    Access to Google data (sending email via Gmail)

    Qube is a business management software with restricted access, used by clients who subscribe to it with their own credentials. Among the features available inside the software, a user may optionally connect their own Google account to send emails generated by Qube (e.g. documents, communications to customers) directly from their Gmail mailbox, as an alternative to a traditional SMTP server. To do so, after the user's explicit consent on Google's own authorization screen, Qube only requests permission to send email on the user's behalf (the Google "gmail.send" scope) and the email address of the authorized account (the "userinfo.email" scope). Qube does not request, and therefore has no technical ability to read, browse, modify or delete messages, contacts, or any other content of the user's Gmail mailbox: the only possible operation is sending new messages, triggered by an explicit action of the user within the software. The access credentials (OAuth2 refresh token) are stored on Qube's servers only for as long as the connection to the Google account remains active, are not shared with third parties or used for any purpose other than the email-sending described above, and are deleted immediately when the user disconnects from within Qube or revokes access directly from their Google account settings (myaccount.google.com/permissions). Qube's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

    Security measures protecting your data

    Qube adopts appropriate technical and organizational measures to protect the personal data it processes, in particular the data related to the Google integration described above. All communications between the Qube client, Qube's servers and Google's APIs take place exclusively over encrypted HTTPS/TLS connections, both in transit and between the different components of the infrastructure. OAuth2 refresh tokens issued by Google are stored encrypted at rest in Qube's database, are never transmitted to the user's browser or exposed through the software's public APIs, and are accessible only to the automated backend processes needed to send email on the user's behalf. Access to Qube's systems and databases is protected by authentication and role-based access controls (RBAC), limited to authorized technical staff for maintenance and support purposes. Qube does not share, sell, transfer to third parties, or use for advertising purposes any data obtained through Google's APIs. When the account is disconnected (from within Qube or from the user's Google account settings), the token is permanently deleted from Qube's systems.

    Your rights

    As a data subject, you have the right to request access to your data, rectification, erasure, restriction of processing at any time, and to lodge a complaint with the Data Protection Authority (www.garanteprivacy.it). To exercise your rights, you can write to qube@paolinux.com.

    Contact

    For any questions regarding this privacy policy, you can write to qube@paolinux.com.