Hivebizz ("Hivebizz", "we", "us") is a sole proprietorship operated from India. This policy explains what personal data we collect when you use hivebizz.com and the Hivebizz application, why we collect it, and what rights you have over it.

Questions about anything here: hello@hivebizz.com

1. Who we are

Hivebizz is a sole proprietorship business operated by its owner from Bangalore, India. For the purposes of the EU and UK GDPR, we act as the data controller for account data and as a data processor for content you submit for testing. For the purposes of India's Digital Personal Data Protection Act, 2023, we act as a Data Fiduciary.

2. What we collect

Account data

Email address (required to create an account)
Name and profile picture, only if you sign in with Google and Google provides them
Workspace name, plan, and credit balance
Authentication timestamps and session records

Data you submit for testing

URLs you submit for analysis
Page content captured from those URLs: visible text, screenshots, and detected page structure
Any page copy you paste manually
Audience descriptions you write

Data generated by the service

Generated synthetic personas (these are fictional profiles, not real people)
Simulation results, swarm scores, objection clusters, fix lists
Report share links you create

Usage and technical data

Pages visited within the app, features used, tests run
Browser type, device type, approximate location derived from IP
IP address, retained in server logs

Payment data

We do not collect, process, or store your card number. Payments are handled by our merchant of record (see Section 6). We receive only your plan, subscription status, and the last four digits and card brand for your reference.

3. What we do not collect

We do not use tracking pixels or advertising cookies.
We do not sell personal data. We have never done so and have no mechanism to do so.
We do not read, monitor, or analyse your reports for any purpose other than delivering the service to you and maintaining it.

4. Why we process your data

What we process	Why	Legal basis (GDPR)
Email, authentication	To create and secure your account	Contract
URLs, page content, reports	To deliver the analysis you requested	Contract
Usage analytics	To understand which features work and fix what does not	Legitimate interests
Server logs, IP	Security, abuse prevention, debugging	Legitimate interests
Billing status	To operate subscriptions and enforce plan limits	Contract
Product emails about your account	To tell you a test finished or a payment failed	Contract
Marketing emails	Only if you opt in	Consent

5. Content you submit about other people's websites

You may submit URLs for pages you do not own. Please read this carefully.

You are responsible for ensuring you have the right to submit any URL you test. See our Acceptable Use Policy.
We capture publicly accessible page content only. We do not attempt to bypass logins, paywalls, or access controls.
We do not intentionally collect personal data that appears on third-party pages. If a page you test contains personal data (for example, names and photos on a team page), that content may be captured incidentally as part of the page. Do not submit pages whose primary content is personal data.
If you are a website owner and believe your site was tested improperly, contact hello@hivebizz.com and we will investigate and, where appropriate, delete the associated capture and report.

6. Who we share data with

We use the following processors. Each receives only what it needs to perform its function.

Processor	Purpose	Location
Supabase	Database, authentication, file storage	United States
Vercel	Application hosting	United States
Render	Page capture worker	United States
Anthropic	AI model processing of page content and persona simulation	United States
Lemon Squeezy	Merchant of record, payment processing, invoicing	United States
PostHog	Product analytics	United States or EU
Resend	Transactional email	United States

A current list is maintained at hivebizz.com/subprocessors. We will give notice before adding a new processor that handles customer content.

Anthropic: page content and generated personas are sent to Anthropic's API to produce your report. Anthropic does not train its models on data submitted through its API.

We also disclose data where legally required, to enforce our Terms, or in connection with a sale or transfer of the business (you would be notified before any such transfer).

7. International transfers

We operate from India and use processors located primarily in the United States. If you are in the EEA or UK, your data is transferred outside your region. We rely on Standard Contractual Clauses or equivalent safeguards offered by each processor.

8. How long we keep things

Data	Retention
Account data	Until you delete your account
Tests, reports, captured page content	Until you delete them, or 24 months after creation, whichever is sooner
Screenshots	12 months from capture
Server logs	90 days
Billing records	7 years, as required for tax and accounting
Anonymized benchmark statistics	Indefinitely, with no link to you or your URLs

Deleting your account deletes everything above except billing records we are legally required to keep, and anonymized statistics that cannot be traced back to you.

9. Your rights

Depending on where you live, you have some or all of the following rights:

Access a copy of your personal data
Correct inaccurate data
Delete your data
Export your data in a portable format
Object to or restrict certain processing
Withdraw consent for marketing at any time
Complain to your local data protection authority

California residents: you have the right to know, delete, correct, and opt out of sale or sharing of personal information. We do not sell or share personal information as those terms are defined by the CCPA. You will never be discriminated against for exercising a right.

India: under the DPDP Act, 2023, you may access, correct, and erase your personal data, nominate another person to exercise your rights, and raise a grievance with us before approaching the Data Protection Board.

To exercise any right, email hello@hivebizz.com. We respond within 30 days. See our Data Deletion Policy for the deletion process specifically.

10. Security

All traffic encrypted in transit with TLS
Data encrypted at rest by our database provider
Row-level security so your workspace data is only accessible to your account
No passwords stored, we use magic links and Google sign-in
Access to production systems limited to the business owner

No system is perfectly secure. If we become aware of a breach affecting your personal data, we will notify you and any required regulator without undue delay, and within 72 hours where GDPR applies.

11. Cookies

We use only what is necessary to run the service, plus optional analytics. See our Cookie Policy.

12. Children

Hivebizz is not directed at anyone under 18 and we do not knowingly collect data from children. If you believe a child has given us data, email hello@hivebizz.com and we will delete it.

13. Changes

We will post any changes here and update the date above. For material changes affecting how we use your data, we will email you before they take effect.

14. Contact

hello@hivebizz.com

Hivebizz, sole proprietorship, Bangalore, Karnataka, India.

Privacy Policy