Privacy Policy
Last updated: September 16, 2024
Information We Collect
Account Information
When you create an account, we collect your email address, name, and encrypted password. For OAuth authentication, we receive basic profile information from third-party providers (Google, GitHub) including your name, email, and profile picture.
Usage Data
We automatically collect information about how you use our service, including feature usage, API calls made, subscription tier, and general analytics data to improve our platform.
Technical Information
We collect device information, IP addresses, browser type, and technical logs for security, debugging, and service optimization purposes.
How We Use Your Information
- Provide and maintain our SaaS platform services
- Process payments and manage subscriptions through Stripe
- Send service-related notifications and updates
- Provide customer support and respond to inquiries
- Improve our platform through usage analytics
- Ensure security and prevent fraud
- Comply with legal obligations
Data Storage and Security
Data Storage
Your data is stored securely using Supabase (PostgreSQL) with encryption at rest and in transit. We implement row-level security (RLS) to ensure tenant data isolation in our multi-tenant architecture.
Security Measures
We employ industry-standard security measures including TLS encryption, secure authentication, regular security audits, and automated monitoring for suspicious activities.
Third-Party Services
Service Providers
- Supabase: Database and authentication services
- Stripe: Payment processing and billing management
- Vercel/Netlify: Application hosting and deployment
- OpenAI/Anthropic: AI services (when enabled)
- PostHog: Analytics and user behavior tracking
These services have their own privacy policies and handle data according to their terms. We only share necessary data required for service functionality.
Cookies and Tracking
We use essential cookies for authentication and session management. Optional analytics cookies help us understand usage patterns. You can manage cookie preferences in your browser settings.
For detailed information about our cookie usage, please see our Cookie Policy.
Your Rights
Data Access and Control
- Access and download your personal data
- Correct inaccurate information
- Delete your account and associated data
- Export your data in machine-readable format
- Restrict processing of your data
- Object to data processing based on legitimate interests
To exercise these rights, contact us at privacy@hiveforge.dev. We will respond within 30 days.
Data Retention
We retain your data for as long as your account is active or as needed to provide services. After account deletion, we may retain some data for legal compliance, fraud prevention, and legitimate business purposes for up to 7 years, unless a shorter period is required by law.
International Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data, including standard contractual clauses and adequacy decisions where applicable.
Changes to This Policy
We may update this privacy policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or through our platform. Continued use of our services after changes constitutes acceptance of the updated policy.
Contact Information
For privacy-related questions or concerns, contact us at:
Email: privacy@hiveforge.dev
Address: HiveForge Inc., 123 Technology Drive, San Francisco, CA 94105