Security & privacy

Your data, handled properly

No jargon, no small print. Here's exactly what we do with your data — and what we never do.

Where your data lives

Humble is made and hosted in Europe. Our infrastructure is based in the EU, which means GDPR applies — not just as a courtesy, but as a legal requirement.

Your data never leaves Europe without your knowledge. We use European cloud providers and do not route your personal data through servers in the US or elsewhere.

What we never do

  • Sell your data to anyone, ever
  • Share your data with advertisers or third-party marketing platforms
  • Share your personal captures with your employer, manager or HR team
  • Train AI models on your content

Export and deletion

You can export all your data at any time from your account settings — in a portable format you can actually use.

You can delete your account at any time. Your data is retained for 90 days after cancellation — enough time to change your mind — then permanently deleted. We don't keep ghost copies.

For People and IT teams

A Data Processing Agreement (DPA) is available on request. We're happy to complete a vendor security questionnaire.

Humble requires no IT involvement to deploy — employees install the browser extension themselves and connect their own accounts. No network configuration, no SSO setup required to get started.

Email us or book a call for our full security documentation pack.