Privacy Policy
What hivein collects, how it uses data from Google and the other applications you connect, and the choices you have.
1. Who we are
hivein (“hivein”, “we”, “us”) is a copilot for the applications you already run. This policy covers this website, hivein.ai, and the hivein app at app.hivein.ai, including the copilots you build there and the applications you connect to them.
hivein is not yet a registered company; this policy will name the company once it is. For anything in this policy, including requests about your data, write to sales@hivein.ai.
2. What we collect
When you register interest
If you register interest before you have an account, we record your name, work email, and — if you give them — your company, your role, the applications you would like to connect and your note. We use them only to contact you about hivein: we email you a confirmation, and send your details to our team so someone can get in touch.
Your account
When you sign in with Google or LinkedIn we receive your name, email address, profile picture and the basic profile the provider returns. If you sign in with a password, we keep it only as a salted hash. Each sign-in is recorded as a session with your browser’s user agent and IP address, which you can see and end in the app.
Data from the applications you connect
When you connect an application such as Google Workspace or Microsoft 365, that application gives hivein an access token, and usually a refresh token, within the permissions you approve. hivein uses it to read or change data in that application when you, or a copilot working on your request, ask it to. Google data is covered in detail in section 3.
Your content
Your conversations with your copilots; the results of the actions they take, such as the text of an email or a file a copilot read to answer you; the guidelines and settings you write; and the connection details of any database you connect.
Website analytics
How you use hivein.ai and app.hivein.ai, through Google Analytics, and how you use the pages of hivein.ai, through Microsoft Clarity, subject to your cookie choice. See section 8.
3. Google user data
What we access
When you sign in with Google, hivein asks only for your name, email address and profile picture. When you connect Google Workspace, you choose which Google services to connect, and Google shows you the exact permissions before you approve them. Depending on the services you choose, hivein can ask for access to:
- Gmail — to read, search, label, draft and send messages;
- Google Calendar — to read calendars and create and change events;
- Google Drive — to find, read, share and organise files;
- Google Docs, Sheets and Slides — to read, create and edit documents, spreadsheets and presentations.
How we use it
Only to provide the features you use: to answer your questions about your email, calendar and files, and to draft, send, create or change items when you ask. Actions that change something — sending an email, editing a file, booking a meeting — are shown to you for confirmation before they run. hivein reaches your Google account only while a copilot is working on a request you made; it does not poll or monitor your account in the background.
How we store it
The access and refresh tokens are stored in our database so the connection keeps working between sessions. The results of actions — for example the text of a message a copilot read to answer you — are stored with the conversation as part of its history, and conversation messages are indexed so a copilot can recall them (see section 4).
Who we share it with
We do not sell Google user data, and we do not use it for advertising. We share it only with the AI model provider that generates your copilot’s response (section 4), and with the providers that host our servers, in each case only to provide the features you use. We would otherwise disclose it only where the law requires it.
No model training
We do not use Google user data, including data obtained through Google Workspace APIs, to develop, improve or train generalised artificial intelligence or machine-learning models.
Who can read it
People at hivein do not read your Google user data, except: with your explicit permission, for example when you ask for help with a specific item; when necessary for security, such as investigating abuse; to comply with applicable law; or when the data has been aggregated and anonymised for internal operations.
hivein’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Removing access
You can disconnect Google Workspace in the app at any time, which deletes the tokens hivein holds. To also cancel them at Google, remove hivein from your Google Account’s third-party access page. To delete the Google data stored with your conversations, see section 7.
4. AI model providers and recall
A copilot answers by sending the relevant part of your conversation — which can include data from the applications you connected — to the AI model its settings name: Anthropic (Claude models) or OpenAI (GPT models), through their APIs. Under their API terms, neither uses data sent through its API to train its models: see Anthropic’s commercial terms and OpenAI’s API data commitments.
So that a copilot can recall earlier conversations, messages in your conversations are converted into embeddings with an OpenAI embedding model and stored in a search index kept separately for each account.
5. How we use information
- To provide the service: run your copilots, act on your requests, and keep your connections working.
- To keep it secure: record sign-in sessions, limit repeated attempts, and investigate abuse.
- To talk to you about your account, and to answer when you write to us.
- To improve this website and the app, using analytics about how pages are used — never using data from the applications you connect.
6. Who we share information with
We do not sell personal information. We share it only with:
- the providers that host our servers and databases;
- Brevo, which sends our emails, such as the confirmation when you register interest;
- Anthropic and OpenAI, to generate responses and recall embeddings (section 4);
- Google, for website analytics, subject to your cookie choice, and YouTube, only when you play the demo video (section 8);
- Microsoft, for heatmaps and session recordings of hivein.ai through Clarity, subject to your cookie choice (section 8);
- authorities, where the law requires it;
- a buyer or successor, if hivein is sold or merged — in which case we will tell you first.
7. Retention and deletion
We keep your account, your conversations, the results of your copilots’ actions, the recall index and the credentials of your connected applications for as long as your account exists; none of it is deleted automatically today. Interest registrations are kept until you ask us to delete them. Sign-in sessions expire on their own.
You can disconnect an application in the app at any time, which deletes its stored credentials. To delete your account and everything held with it — conversations, stored action results, the recall index and credentials — or an interest registration, email sales@hivein.ai from the address you used. We will complete the deletion, and confirm it to you, within one month.
8. Cookies and analytics
hivein.ai and app.hivein.ai use Google Analytics to count visits and learn which pages help. In the European Economic Area, analytics cookies stay off until you allow them. Everywhere else, including the United Kingdom and Switzerland, they are on unless you turn them off, and we use them only for statistics about how the site is used, to improve it. Advertising storage and ad personalisation are always off.
- hv_consent — remembers your cookie choice, for one year, on hivein.ai and app.hivein.ai.
- _ga, _ga_* — Google Analytics, only while analytics is on, for up to two years.
hivein.ai also uses Microsoft Clarity, which records how its pages are used — clicks, scrolling, mouse movement and what is on screen — as heatmaps and session recordings, so we can see which parts of a page help. Text typed into fields is masked. If you deny, Clarity does not run. Until you choose, it runs without cookies in the European Economic Area, the United Kingdom and Switzerland, treating each page view on its own; elsewhere it sets its cookies unless you deny. Advertising storage is never turned on. Microsoft’s privacy statement applies to its handling of this data.
- _clck, _clsk — Microsoft Clarity, while it is allowed to: a pseudonymous ID for up to a year, and one that joins a visit’s page views for a day.
- MUID, CLID and related — Microsoft’s own cookies, which Clarity may set on its domains; Microsoft uses them across its services.
The demo video on the home page plays from YouTube in its privacy-enhanced mode (youtube-nocookie.com). Nothing is requested from YouTube until you open it; once you do, YouTube receives your request, may store data in your browser, and its own privacy policy applies.
The app also keeps your sign-in in your browser’s storage so you stay signed in. You can change your choice at any time with “Cookie settings” at the foot of every page on hivein.ai.
9. Security
Traffic between your browser and hivein is encrypted with TLS. Passwords and sign-in refresh tokens are stored only as salted hashes, and every sign-in is a session you can review and end. No system is perfectly secure; if you find a problem, please tell us at sales@hivein.ai.
10. Your rights
You can ask us for a copy of your personal data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable form, and you can turn analytics off at any time with “Cookie settings”. Write to sales@hivein.ai; we will answer within one month.
If you are unhappy with our answer, you can complain to the UK Information Commissioner’s Office at ico.org.uk, or to the data protection authority where you live.
11. International transfers
Your data may be processed in countries other than your own, including by our AI model providers in the United States. Where the law requires it, we rely on the safeguards those providers offer for such transfers.
12. Children
hivein is a tool for work and is not directed at children. You must be at least 18 to use it, and we do not knowingly collect data from anyone younger.
13. Changes to this policy
When this policy changes we will update the date at the top, and for a material change we will tell you by email or in the app before it takes effect. The Terms of Service cover the rest of our agreement with you.
14. Contact
Questions and requests about this policy or your data: sales@hivein.ai.