Privacy Policy
This explains what Hive collects, why, and what you can do about it. Short version: we keep what's needed to run your account; your conversations stay in your browser; your AI requests go to the providers whose keys you add.
What we store on our servers
- Account: your email address, a salted scrypt hash of your password (never the password itself), when you signed up, and your plan.
- Your API keys and settings: encrypted with AES-256-GCM before they're stored, and decrypted only to make requests you ask for.
- Usage: counts of requests per day and per model, recent request metadata (time, which job ran, how long it took, token counts) for your activity view and limits. Not the text of your conversations.
- Billing: if you subscribe, Stripe handles your payment details. We keep your Stripe customer ID and subscription status, never your card number.
What stays in your browser
- Your chat history is saved in your browser's local storage, not on our servers. Clearing your browser data deletes it; you can also download or delete it in Settings.
- If you connect a folder, the permission and folder handle stay in your browser. File contents are only sent to the AI models as part of requests in a chat, when Hive reads a file to answer you.
Where your requests go
To answer you, Hive sends your messages (and any file contents read in that chat) to AI model providers using your keys, for example NVIDIA, Groq, OpenRouter, Google, Cloudflare, Mistral, or Anthropic if you add a Claude key. Each provider handles that data under its own privacy policy and terms; some free tiers may use requests to improve their models. With no keys added, a few public starter models are used. Code that Hive tests may run in Vercel Sandbox, an isolated machine with no internet access that is deleted after the test.
Service providers
Hive runs on Vercel (hosting, storage and sandboxes). Payments go through Stripe. Password-reset emails, if enabled, are sent through Resend. These companies process data only to provide their service to us.
Cookies
We use one essential cookie to keep you signed in. No advertising or tracking cookies. We count page visits with Vercel Web Analytics, which uses no cookies and doesn't identify you.
Keeping and deleting data
We keep your account data while your account exists. Deleting your account in Settings removes your account record, keys and settings from our storage right away; backups and logs held by our providers expire on their own schedules. We don't sell your personal information.
Your rights
You can see and change your data in the app, download your chats, and delete your account at any time. Depending on where you live (for example in the EU, UK or California), you may have further rights to access, correct or delete your data, or to object to processing. To use them, contact us below.
Security
Connections use HTTPS. Keys are encrypted at rest, passwords are hashed with scrypt, and sessions use signed, HTTP-only cookies. No system is perfectly secure; tell us right away if you find a problem.
Children
Hive is not for anyone under 18.
Changes
If we change this policy in a meaningful way, we'll tell you in the app or by email before it applies.
Contact
See the contact link at the bottom of the home page.