Trust & Privacy
How we handle your data.
This page is maintained by the Hudson West team to answer common security and privacy questions about Hudson West. It describes current practices; it is not a third-party certification or independent audit.
Accounts & access
Hudson West uses email & password and Google sign-in. Passwords are handled by our authentication provider — we never see or store them in plaintext. Subscription tiers (board, executive) gate access to specific rooms and content; tier checks run on the server, not in the browser.
Platform & hosting
The app runs on Lovable Cloud, which provides hosting, the Postgres database, file storage, and authentication. Data is encrypted in transit (HTTPS) and at rest by the underlying platform. Lovable is a shared-responsibility platform: Lovable secures the infrastructure; Hudson West is responsible for the application logic, access rules, and content described on this page.
What we collect
We collect what you give us: your email address, your display name and optional avatar, your subscription tier, your chat messages and reactions, your saved items, your orders and order history, and any profile fields you fill in. We also log basic technical metadata (request times, errors) needed to operate the service.
How chat and reactions are protected
Chat messages are readable only to members of the room they belong to. Subscriber tier rooms are scoped to executive members, and our realtime broadcast layer is restricted to authenticated users who can access the room. Reaction activity (who reacted to what) is restricted to signed-in users — it is not exposed to the public web.
Subprocessors & integrations
Hudson West relies on the following third-party services to operate. Each receives only the data needed for its function:
- Lovable Cloud — hosting, database, authentication, storage
- Shopify — product catalog and order processing
- Stripe — payment processing for subscriptions
- Substack — source of long-form essays surfaced in the Journal
- Google AdSense — advertising on free-tier pages
Cookies & analytics
We use first-party cookies required to keep you signed in and to remember your cart. Third-party advertising scripts may set their own cookies on pages where ads appear. Subscribers do not see advertising.
Retention & deletion
Account data is retained for as long as your account is active. To request export or deletion of your data, contact us at the address below. We will respond within a reasonable timeframe and confirm when your request has been completed.
Reporting a security issue
If you believe you have found a security vulnerability in Hudson West, please email us before disclosing it publicly. Include a description of the issue, the steps to reproduce it, and the impact you believe it has. We will acknowledge your report and work with you on a fix.
Contact
Privacy and security questions: hello@thehudsonwest.com
Last updated June 17, 2026. This page is editable content owned by Hudson West and will be updated as our practices evolve.