Privacy Policy

1. Information We Collect

In the course of providing the Service, we may collect the following categories of information:

• Account information. This may include your name, business email address, company name, job title, login credentials, and other account registration information.
• Billing and transaction information. This may include subscription status, plan selection, billing address details, and transaction metadata processed through our authorized payment service providers. We do not necessarily store full payment card details on our own systems.
• Customer data. This includes data, URLs, prompts, queries, files, text, inputs, and other materials submitted by you or your organization in connection with your use of the Service.
• Usage and technical information. This may include IP address, browser type, device information, operating system, referral source, session activity, page interactions, and other diagnostic or log data relating to how the Service is accessed and used.
• AI input and output data. We may process prompts, URLs, queries, instructions, generated outputs, reports, and other related interaction data in order to operate the Service and return analytics, visibility insights, rankings, recommendations, and related outputs.

2. How We Use Your Information

We may use collected information to:

• Provide, operate, maintain, support, and improve the Service.
• Generate analytics, rankings, reports, recommendations, schema-related outputs, and other Service features.
• Process transactions and administer subscriptions, plan access, and billing.
• Communicate with you regarding account activity, updates, support matters, and security or administrative notices.
• Monitor usage, troubleshoot issues, enforce our terms, and detect, investigate, or prevent fraud, abuse, misuse, or unauthorized activity.
• Comply with legal obligations and protect the rights, property, and safety of HiveLuma, our users, and third parties.

3. Aggregated Analytics and Service Improvement

We may use Customer Data and Service interaction data to operate, analyze, maintain, and improve the Service. This may include the retention, anonymization, aggregation, and analysis of data such as scan targets, URLs, prompts, queried topics, usage patterns, and resulting outputs. We do not sell personally identifiable information to third parties, and we use commercially reasonable efforts to ensure that aggregated or anonymized datasets do not identify you or your organization directly.

4. Information Sharing and Disclosure

We may disclose information in the following circumstances:

• Service providers. We may share information with vendors, contractors, and service providers that perform services on our behalf, including cloud hosting providers, infrastructure vendors, payment processors, analytics providers, customer support tools, and AI or model providers.
• Legal compliance and protection. We may disclose information where we believe such disclosure is necessary or appropriate to comply with applicable law, regulation, legal process, or governmental request, or to protect the rights, safety, property, or security of HiveLuma, our users, or others.
• Business transactions. We may disclose information in connection with an actual or proposed merger, acquisition, financing, reorganization, sale of assets, bankruptcy, dissolution, or similar corporate transaction.
• With your direction or consent. We may disclose information where you request, instruct, or otherwise consent to the disclosure.

5. Data Security

We implement commercially reasonable technical, administrative, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, or alteration. Such measures may include access controls, authentication safeguards, encrypted transmission, and secure handling of sensitive credentials such as connected API keys. However, no method of transmission over the internet and no method of electronic storage is completely secure, and therefore we cannot guarantee absolute security.

6. Data Retention

We retain account-level Customer Data in accordance with the retention period associated with your plan. Depending on plan level, certain report and scan data may remain accessible within your account for 30, 60, or 90 days. After the applicable retention period, such data may be removed from active account access and retained in anonymized or aggregated form for analytics, research, service improvement, and related internal business purposes.

7. International Data Transfers

Your information may be transferred to, processed in, and stored in jurisdictions other than your own, including jurisdictions where data protection laws may differ from those in your province, state, or country of residence. By using the Service, you acknowledge and consent to such transfers, processing, and storage, subject to applicable law.

8. Your Rights

Depending on your jurisdiction and subject to applicable law, you may have the right to request access to, correction of, deletion of, or restriction of the processing of your personal information. You may also have the right to withdraw consent in certain circumstances. To make such a request, please contact us using the contact information set out below. We may need to verify your identity before responding to your request.

9. Cookies and Analytics

10. Children's Privacy

The Service is intended for business users and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take reasonable steps to delete that information.