Data protection
Your data.How Ubic uses it.
This policy explains the processing carried out by Positive Lab for getubic.com and the Ubic service. It distinguishes data processed by Ubic for its own purposes from data processed under its customers’ instructions.
Last updated: 27 August 2026
Who processes the data
Positive Lab is a French simplified joint-stock company with share capital of €100,000, registered with the Lille Métropole Trade and Companies Register under number 938 884 665. It publishes getubic.com and the Ubic service.
Its registered office is Parc d’activité des 4 Vents, 3 avenue Antoine Pinay, 59510 Hem, France.
Positive Lab is the controller for processing required to run the website, handle contact requests and user accounts, manage the business relationship and secure the service. When a customer uses Ubic with its own lists and tools, Positive Lab processes that data on the customer’s behalf and instructions under the DPA.
Website and contact requests
The website only collects information required for the requested function or for measurement accepted by the visitor.
| Navigation and security | IP address, technical information, logs and cookie choices. | Operate the website, prevent abuse and retain the consent choice. |
|---|---|---|
| Callback request | Business phone number, business email address, page viewed and request date. | Answer the request and arrange the callback. The information is sent to our n8n workflow. |
| Demo booking | Information entered in the Cal.com calendar and the selected time slot. | Schedule the requested demo and follow it up. |
| Business relationship | Business contact details and the content of exchanges. | Answer requests, prepare an offer and follow the relationship with the relevant company. |
Depending on the processing, the legal basis is taking pre-contractual steps at the person’s request, Positive Lab’s legitimate interest in securing and administering its website, or consent for measurement and advertising trackers.
Using the Ubic service
To administer an Ubic account, Positive Lab processes user identification and contact data, access rights, login logs, usage information, support requests and billing data. This processing is used to perform the contract, administer the service, secure access and comply with applicable legal obligations.
In a customer’s prospecting lists, data may include first and last name, business email address, phone number, selected CRM fields, call and message metadata, date, duration and status. Call recordings are processed when the customer enables that feature.
The customer chooses the data imported, the people concerned and the purposes of its campaign. It remains responsible for the lawful collection, information of individuals and handling of their requests. Ubic then acts as processor. The DPA explains how those responsibilities are divided.
CRM connections and Zoho CRM
When an administrator connects a CRM, Ubic receives the permissions and technical credentials required for the connection. Data is only imported from the modules, views and fields selected by the customer.
With Zoho CRM, the administrator authorises Ubic through OAuth 2.0. Ubic can then read selected views and fields in the Leads or Contacts modules, create notes, and send call information, prospect status, configured fields and, when configured by the customer, outbound SMS activity back to Zoho CRM.
Zoho permissions are associated with the relevant Ubic workspace. Disconnecting Zoho from Ubic revokes the refresh token with Zoho. Data already sent back to Zoho remains subject to the rules set by the customer in its own Zoho account.
Providers, recipients and transfers
Data is available to authorised Positive Lab personnel and, only for their role, to providers required for hosting, security, measurement, appointment scheduling, request processing and the operation of integrations selected by the customer.
Services visible on the website include AWS, n8n, Cal.com, Google, LinkedIn and Ahrefs. For the product, recipients also include technical providers and third-party tools that the customer chooses to connect, such as Zoho CRM.
Some providers may process data outside the European Economic Area. Where the country is not covered by an adequacy decision, Positive Lab provides the safeguards required by the GDPR, including standard contractual clauses or another applicable equivalent mechanism.
Retention and security
Data related to the service is processed for the term of the contract and, where necessary, for the periods required by law or provided for in the contract. At the end of the contract, personal data processed for the customer is destroyed or irreversibly anonymised unless a legal retention duty applies.
Credentials for a CRM connection are retained while the integration remains active or the contract requires it. For Zoho CRM, disconnecting the integration triggers revocation of the refresh token.
Positive Lab implements technical and organisational measures designed to protect data against loss, alteration, disclosure and unauthorised access. Ubic product data is hosted on AWS in the Paris eu-west-3 region.
Your rights
Depending on your situation and the legal basis for processing, you may request access to your data, rectification, erasure, restriction or portability. You may also object to processing based on legitimate interest and withdraw consent at any time where consent is the legal basis.
For data processed by an Ubic customer, first address your request to the company that contacted you. It determines the campaign and remains the controller. Ubic assists it with the request where required.
For processing carried out by Positive Lab or to contact the DPO:
dpo@contact.getubic.com
Positive Lab · DPO · 3 avenue Antoine Pinay · 59510 Hem · France
You may also lodge a complaint with the French data protection authority, the CNIL, through cnil.fr or by post at the address stated on its website. CNIL ↗
Contract documents
This policy complements the contract documents below. The DPA prevails for processing carried out by Ubic as a processor.