🐝 Privacy Policy

What Hive stores, and why

• Account data — name, email, password hash (scrypt) or Google account link, MFA settings. Legal basis: contract (Art. 6(1)(b)).
• Hive content — messages to your Queen, tasks, events, chores, kudos, proposals, drafts, outbox items, inspirer conversations and streaks. Legal basis: contract.
• Your LLM API key (BYOK) — stored encrypted (AES-256-GCM), used only to call the provider you chose, never logged, never exported. Legal basis: contract.
• Security data — session records (IP, browser), an audit log of agent actions and security events (login, MFA changes, approvals), retained up to the configured audit retention period. Legal basis: legitimate interest in security (Art. 6(1)(f)).
• Consent records — when you accepted these documents. Legal basis: legal obligation.

What Hive does not do

• No advertising, no profiling, no sale of data, no third-party analytics or tracking cookies. The only cookies are strictly-necessary session cookies.
• Emails composed by agents are queued in your Outbox and are not sent externally unless an SMTP connector is configured by the operator.

Processors / recipients

When you configure a BYOK model, your prompts (which may include hive content) are sent to the LLM provider you selected (e.g. Anthropic, OpenAI, OpenRouter, or your own self-hosted endpoint) under your account with that provider. Choose a provider whose data terms you accept; zero-retention API options are recommended. In demo mode, no data leaves this server. The server itself is hosted by the operator's hosting provider ([VPS PROVIDER — fill in]).

Children

Child accounts can only be created through a family invite issued by an adult, which is recorded as parental consent. Child accounts cannot send email, move calendar events, decide proposals, or follow non-kid-appropriate inspirers. If you believe a child is using Hive without parental consent, contact the operator.

Retention

Messages, outbox and completed tasks are automatically purged after the configured retention period (default 365 days). Audit logs are kept up to 400 days for security accountability, then purged. Backups rotate automatically (default: last 14 daily snapshots).

Your rights (GDPR Art. 12–22)

• Access & portability: Settings → Privacy → “Export my data” gives you a complete JSON export, instantly.
• Erasure: Settings → Privacy → “Delete my account” erases your personal data immediately. Audit entries are retained pseudonymized (opaque ids that no longer link to you) under Art. 17(3) for security accountability.
• Rectification: contact the operator (self-serve profile editing is on the roadmap).
• Complaints: you may lodge a complaint with your supervisory authority.

Security

TLS in transit; secrets encrypted at rest with a server-held key; scrypt password hashing; optional TOTP two-factor authentication; session revocation; role-based Guard policies; a tamper-evident (hash-chained) audit log; automatic backups. See SECURITY.md in the source distribution for the full technical description and disclosure contact.