Trust & Privacy

How we handle your data.

This page is maintained by the Hudson West team to answer common security and privacy questions about Hudson West. It describes current practices; it is not a third-party certification or independent audit.

Accounts & access

Hudson West uses email & password and Google sign-in. Passwords are handled by our authentication provider — we never see or store them in plaintext. Subscription tiers (board, executive) gate access to specific rooms and content; tier checks run on the server, not in the browser.

Platform & hosting

The app runs on Lovable Cloud, which provides hosting, the Postgres database, file storage, and authentication. Data is encrypted in transit (HTTPS) and at rest by the underlying platform. Lovable is a shared-responsibility platform: Lovable secures the infrastructure; Hudson West is responsible for the application logic, access rules, and content described on this page.

What we collect

We collect what you give us: your email address, your display name and optional avatar, your subscription tier, your chat messages and reactions, your saved items, your orders and order history, and any profile fields you fill in. We also log basic technical metadata (request times, errors) needed to operate the service.

How chat and reactions are protected

Chat messages are readable only to members of the room they belong to. Subscriber tier rooms are scoped to executive members, and our realtime broadcast layer is restricted to authenticated users who can access the room. Reaction activity (who reacted to what) is restricted to signed-in users — it is not exposed to the public web.

Subprocessors & integrations

Hudson West relies on the following third-party services to operate. Each receives only the data needed for its function:

  • Lovable Cloud — hosting, database, authentication, storage
  • Shopify — product catalog and order processing
  • Stripe — payment processing for subscriptions
  • Substack — source of long-form essays surfaced in the Journal
  • Google AdSense — advertising on free-tier pages

Cookies & analytics

We use first-party cookies required to keep you signed in and to remember your cart. Third-party advertising scripts may set their own cookies on pages where ads appear. Subscribers do not see advertising.

Retention & deletion

Account data is retained for as long as your account is active. To request export or deletion of your data, contact us at the address below. We will respond within a reasonable timeframe and confirm when your request has been completed.

Reporting a security issue

If you believe you have found a security vulnerability in Hudson West, please email us before disclosing it publicly. Include a description of the issue, the steps to reproduce it, and the impact you believe it has. We will acknowledge your report and work with you on a fix.

Contact

Privacy and security questions: hello@thehudsonwest.com

Last updated June 17, 2026. This page is editable content owned by Hudson West and will be updated as our practices evolve.