Privacy policy

This Privacy Policy explains how HIVE COMPUTING SERVICES SA, operating publicly under the Hivenet brand, collects, uses, shares, and otherwise processes personal data when you use Hivenet websites, apps, APIs, support channels, and services, including Store, Send, Compute, Hivenet S3-compatible storage, Hivenet Inference API, GPT, Private AI, and related services.

It also explains your rights and choices.

1. Who this Policy applies to

This Policy applies to personal data we process when you:

1. visit our websites or landing pages;
2. create or use a Hivenet account;
3. use Store, Send, Compute, Hivenet S3-compatible storage, Hivenet Inference API, GPT, Private AI, or another Hivenet service;
4. contact support, sales, or us through forms, chat, email, or community channels;
5. attend events, sign up for updates, or otherwise interact with us; or
6. act on behalf of a business customer, partner, prospect, or vendor.

This Policy does not apply to personal data that our customers process on their own behalf using Hivenet services where we act only as a processor. In those cases, the customer is responsible for its own privacy notice and lawful basis, and we process personal data under the customer's instructions and the applicable agreement.

2. Who controls your personal data

Unless a separate signed agreement expressly identifies another Hivenet affiliate for a specific service, the controller of personal data covered by this Privacy Policy is:

HIVE COMPUTING SERVICES SA
Rue de Lyon 77
1203 Genève
Switzerland

Swiss enterprise ID: CHE-469.482.964

In this Policy, “Hivenet,” “we,” “our,” and “us” mean HIVE COMPUTING SERVICES SA.

Depending on the service and business relationship, Hivenet affiliates and service providers may act as processors, sub-processors, separate controllers, or joint controllers for specific purposes such as service delivery, billing, support, security, enterprise contracting, or regional infrastructure.

For privacy questions, contact us at hello@hivenet.com.

3. Personal data we collect

The personal data we collect depends on the service you use and how you interact with us.

3.1 Account and identity data

This may include:

• name;
• email address;
• username or user identifier;
• password hash and authentication data;
• account preferences;
• organization name and role;
• language and country; and
• account status and plan information.

3.2 Billing and transaction data

This may include:

• billing address and country;
• tax information where required;
• invoices, receipts, subscription and payment status;
• transaction identifiers; and
• limited payment-related metadata from payment providers.

We do not store full payment-card details when a third-party payment provider processes the payment.

3.3 Service usage, device, and technical data

This may include:

• IP address and geographic information derived from it, such as country, region, city, or approximate coordinates;
• browser, operating system, device, and app-version information;
• security and authentication logs;
• session and feature-use information;
• crash reports, errors, diagnostics, and performance information;
• network and app state where relevant to troubleshooting or product measurement;
• pseudonymous analytics identifiers;
• referral, campaign, and acquisition information; and
• region or location choices you make for service delivery.

3.4 Support and communications data

If you contact us, we may collect:

• the contents of your messages;
• support-ticket information;
• screenshots, files, or attachments you choose to send us;
• chat transcripts and contact history;
• troubleshooting information; and
• diagnostic logs you choose to submit.

3.5 Data by service

Store and similar personal storage services

When you use Store or a similar personal storage service, we may process account information, device and sync metadata, storage usage, sharing metadata, photo-backup state, support information, and encrypted content needed to provide the service.

If you enable an encryption passphrase, Hivenet does not store that passphrase and cannot recover it for you. Losing it may prevent you from accessing content protected by that passphrase.

Send and similar transfer services

When you use Send or another transfer service, we may process technical delivery data, transfer metadata, file-count and file-size metadata, service-usage information, abuse-prevention signals, limited operational logs, and encrypted transfer data needed to deliver the transfer.

Transfer data is retained according to the retention period or service rules shown for the transfer and may be deleted when that period ends.

Compute and S3-compatible storage

When you use Compute, Hivenet S3-compatible storage, or related infrastructure services, we may process account and billing data, instance or storage metadata, region choices, usage and metering records, public keys or other credentials you provide, endpoint and network configuration, bucket or object-storage configuration, support and incident data, and technical logs needed to operate the service.

Customer workloads, objects, datasets, applications, or other content may contain personal data. Where we process that personal data on behalf of a business customer, our role and obligations are governed by the applicable agreement and data-processing terms.

Hivenet Inference API

When you use Hivenet Inference API, we may process account and billing information, organization and API-key metadata, model and deployment choices, endpoint and region information, request and token counts, performance and error metrics, usage and metering information, and support or incident data.

API requests, prompts, files, model inputs, and outputs may contain personal data if you or your users include it. How that content is processed and retained depends on the service configuration and any applicable agreement.

GPT, Private AI, and related AI services

When you use GPT, Private AI, or another AI service, we may process account, onboarding, administrative, deployment, support, and usage data, together with personal data included in prompts, files, sources, outputs, or other customer content as needed to provide the service.

Enterprise or customer-specific AI services may be subject to additional privacy, security, data-processing, or service terms.

3.6 Website and product analytics

We use analytics to understand whether our websites and products work, which features people use, where flows fail, and how users reach Hivenet.

Website analytics

We use PostHog on hivenet.com. PostHog analytics on the public website are loaded only after you consent to statistics cookies through our website cookie controls.

Website analytics may include a randomly generated browser identifier, pages or routes visited, referral and campaign information, browser and device information, and geographic information derived from your IP address.

We do not configure hivenet.com analytics to send your Hivenet account name, email address, or account information to PostHog. We do not use PostHog session replay on hivenet.com.

Website analytics requests may pass through a Hivenet-owned domain before reaching PostHog. Our PostHog analytics environment is hosted in the European Union, in Frankfurt, Germany.

You can change or withdraw your website statistics-cookie choice using the cookie controls available on hivenet.com. Withdrawing consent stops future website analytics collection that depends on that consent.

Product analytics

In Hivenet products, we may use PostHog to collect pseudonymous events about product use, reliability, and operational outcomes. The exact events depend on the product and platform and may include:

• product, platform, and app version;
• feature and screen usage;
• upload, download, transfer, backup, signup, account, and billing milestones;
• whether an operation succeeded or failed and related diagnostic information;
• file-size and file-type metadata, without the file contents themselves;
• network type and app state where relevant; and
• pseudonymous user, item, or transfer identifiers.

Depending on the product and analytics configuration, we use data-minimization measures such as transforming internal identifiers before analytics storage, omitting email addresses by default, and reducing the precision of IP addresses.

We do not send file contents, photo contents, or encryption passphrases to PostHog as product-analytics event data.

Where an analytics purpose links activity to identifiable account information, uses session replay, or otherwise requires consent, we apply the relevant consent controls before relying on that processing.

3.7 Marketing and event data

If you sign up for updates, events, demos, or sales contact, we may collect:

• your contact details;
• company and role information;
• interests and event-registration details; and
• communication preferences.

3.8 Website AI assistant

We use an AI-powered assistant on hivenet.com to answer questions, help visitors find relevant Hivenet services, and support sales enquiries.

When you use the assistant, we may process the content of your conversation, related session and technical information, and any contact or business information you choose to provide. We may use this information to respond to your questions, understand your enquiry, improve the quality of the interaction, and direct you to the appropriate Hivenet service or team.

A service provider processes this information on our behalf to operate the assistant.

4. Sources of personal data

We collect personal data:

1. directly from you;
2. from your organization or account administrator;
3. automatically from your device, browser, app, or use of a service;
4. from payment providers, identity providers, analytics providers, and fraud-prevention tools;
5. from business partners and referral sources; and
6. from publicly available sources where relevant for business contact, security, compliance, or due-diligence purposes.

5. How we use personal data and our legal bases

We use personal data only where we have a valid legal basis.

5.1 To provide and operate the services

We use personal data to create and manage accounts, authenticate users, deliver features, route transfers, provide storage, compute or AI services, meter usage, manage subscriptions, and operate the services.

Legal basis: contract, or pre-contractual steps at your request.

5.2 To secure the services and prevent abuse

We use personal data to prevent fraud and abuse, detect misuse, investigate incidents, enforce our Terms, maintain service integrity, and protect users and infrastructure.

Legal basis: legitimate interests, legal obligation, and, where relevant, contract.

5.3 To provide support and respond to requests

We use personal data to answer support tickets, troubleshoot issues, review diagnostic material you send us, respond to privacy or legal requests, and communicate with you about your account or service.

Legal basis: contract, legitimate interests, consent where applicable, and legal obligation where required.

5.4 To process payments and maintain records

We use personal data to bill you, collect payment, issue invoices, manage taxes, detect payment fraud, and maintain accounting records.

Legal basis: contract and legal obligation.

5.5 To measure, improve, and develop the services

We use data about website visits, service usage, feature adoption, performance, errors, and operational outcomes to understand how Hivenet works in practice and to improve reliability, usability, and product decisions.

We minimize or pseudonymize analytics data where appropriate.

Legal basis: legitimate interests; contract where processing is necessary to operate or maintain a service; and consent where required for analytics, device storage, identified tracking, or similar technologies.

5.6 To communicate with you

We use personal data to send service messages, security notices, transactional emails, product information, and support communications.

We may send marketing or promotional communications where permitted by law. Where consent is required, we ask for it. You can unsubscribe using the link in the message or another preference control we provide.

Legal basis: contract, legitimate interests, and consent where required.

5.7 To manage business relationships

We use personal data to manage customer, prospect, partner, and vendor relationships, including demos, sales enquiries, procurement, contracting, onboarding, renewals, account management, and helping us understand which Hivenet services may be relevant to an enquiry.

Legal basis: legitimate interests and pre-contractual steps.

5.8 To comply with law and protect legal rights

We use personal data to comply with legal obligations, respond to lawful requests, maintain required records, establish or defend legal claims, and protect our rights, users, and business.

Legal basis: legal obligation and legitimate interests.

5.9 Corporate transactions

We may process and disclose personal data in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar corporate transaction.

Legal basis: legitimate interests and legal obligation where relevant.

6. When Hivenet acts as controller and when it acts as processor

Hivenet generally acts as a controller for personal data used for our own purposes, including:

• account registration and identity;
• billing and payment records;
• website and product analytics relating to our own services;
• support and communications;
• security, anti-fraud, and abuse prevention;
• compliance, audit, and legal records; and
• sales, marketing, and customer relationship management.

Hivenet may act as a processor when a business customer uses our services to store, transfer, process, or run personal data on that customer's behalf.

Where we act as a processor, the customer remains responsible for its lawful basis, privacy notices, instructions, and data-subject requests, and we process data according to the applicable agreement and data-processing terms.

7. How we share personal data

We do not sell your personal data.

We may share personal data with the following categories of recipients where needed for the purposes in this Policy:

1. Hivenet affiliates involved in service delivery, support, billing, contracting, or administration;
2. infrastructure, hosting, storage, network, and security providers;
3. payment processors, accounting tools, and fraud-prevention providers;
4. identity, customer-support, CRM, communication, ticketing, AI-assistant, and sales-support providers;
5. analytics and product-performance providers, including PostHog, subject to applicable consent and privacy controls;
6. professional advisers, auditors, insurers, and similar advisers;
7. regulators, courts, law-enforcement bodies, or other authorities where required by law or necessary to protect rights or safety; and
8. a buyer, successor, or other relevant party in a corporate transaction.

Where a service provider processes personal data on our behalf, we require appropriate data-processing and confidentiality terms. Where we use subprocessors while acting as a processor for a customer, the applicable customer agreement and data-processing terms govern that use.

8. International data transfers

Hivenet is based in Switzerland. Hivenet, its affiliates, and service providers may process personal data in Switzerland, the European Economic Area, and other countries.

Our PostHog analytics environment is hosted in the European Union, in Frankfurt, Germany.

Where personal data is transferred from the EEA, UK, Switzerland, or another jurisdiction with transfer restrictions to a country or territory that is not recognized as providing an adequate level of protection, we use safeguards required by applicable law. Depending on the transfer, these may include standard contractual clauses, an applicable UK transfer mechanism, Swiss-approved clauses, or another lawful safeguard.

You can request more information about safeguards relevant to your personal data by contacting us.

9. Data retention

We keep personal data only for as long as needed for the purposes described in this Policy, including to provide the services, meet legal obligations, resolve disputes, maintain security, prevent fraud, and enforce agreements.

We do not use one retention period for every type of data. We consider the type of data, the service involved, why the data is needed, legal requirements, security needs, and any applicable agreement.

For example:

• account and profile data are kept while your account is active and for a reasonable period afterward where needed for closure, security, disputes, or legal obligations. Eligible free Store and Send accounts are also subject to the dormant-account lifecycle described below;
• billing, tax, and transaction data are kept for periods required by accounting, tax, and other laws;
• support records and diagnostic material are kept for as long as needed to resolve the issue and maintain an appropriate support history;
• security, abuse-prevention, and operational logs are kept for periods based on risk, technical need, and legal requirements;
• analytics data is retained according to its purpose and the analytics configuration in use; and
• customer content is retained according to the service, your settings, the applicable agreement, and legal requirements. After termination, content may be deleted, anonymized, or returned subject to service rules, backup cycles, legal holds, and security needs.

Dormant free Store and Send accounts

For eligible free Store and Send accounts, we use account and service activity to determine whether the account remains in use. If there has been no sign-in on any Hivenet client, no file upload, download, share, or Send activity, and no authenticated API call for 12 consecutive months, the account may qualify as inactive. Any of those activities resets the inactivity period.

The dormant-account lifecycle does not apply while an account has an active paid subscription or unused paid credits. If a paid subscription ends, the inactivity period begins no earlier than the date the subscription ends. We may also postpone suspension or deletion while there is an open billing dispute, an open support case that requires the account to remain available, a legal hold, or another retention requirement.

Before suspending an inactive account, we send advance notice to the verified email address associated with the account. The notice states the scheduled suspension and deletion dates and explains how to keep the account active.

On the scheduled suspension date, we may suspend access without deleting the account or its content. We keep the suspended account intact for 30 days so that support can restore it on request. If the account is not restored during that period, we may delete the account identity, workspace, and Customer Content from active systems. Residual copies may remain until normal backup cycles complete, or longer where a separate lawful retention requirement applies.

For audit purposes after a dormant account is deleted, we may retain a hashed account identifier and the deletion date. We may retain other information only where a separate lawful reason requires it, such as billing, security, fraud prevention, dispute handling, or a legal obligation.

An account created more than 30 days earlier may be deleted without the dormant-account warning process if its email address has never been verified, it has never been used or signed into, and it has no Customer Content, active paid subscription, or unused paid credits.

If you ask us to delete personal data, we will do so where required, unless we need to keep it for another lawful reason.

10. Security

We use technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction.

Depending on the service and risk, these measures may include encryption, access controls, logging, monitoring, network protections, segregation, incident-response procedures, and vendor due diligence.

No security measure can guarantee complete security. You also play an important role in protecting your account and data, including by protecting credentials, passphrases, API keys, and devices under your control.

11. Cookies, SDKs, and similar technologies

We use cookies, SDKs, local storage, and similar technologies for purposes such as:

1. strictly necessary security, authentication, session management, and core service operation;
2. remembering preferences;
3. measuring website and product performance and usage; and
4. communications or marketing where permitted.

On hivenet.com, non-essential PostHog statistics analytics are loaded only after you consent through our website cookie controls.

You can manage or withdraw website cookie choices through the controls available on the site. Withdrawing consent stops future collection that depends on that consent.

Hivenet apps may also use analytics SDKs. Where an analytics purpose requires consent, we ask for it before relying on that processing and provide a way to withdraw it.

12. Your rights and choices

Depending on where you live and the context of the processing, you may have the right to:

• access personal data we hold about you;
• correct inaccurate or incomplete personal data;
• ask us to delete personal data;
• restrict certain processing;
• object to processing based on legitimate interests;
• withdraw consent where processing relies on consent;
• receive a portable copy of certain personal data; and
• lodge a complaint with a competent supervisory authority.

If Hivenet acts as a processor for the personal data in question, we may direct your request to the relevant customer or assist that customer as required by the applicable agreement.

You can exercise your privacy rights by contacting hello@hivenet.com. You can also contact support@hivenet.com, and we will route the request appropriately. We may ask you to verify your identity before acting on a request.

Where processing relies on consent, withdrawing consent does not affect processing that was lawful before the withdrawal.

You can unsubscribe from marketing emails using the unsubscribe link in the message.

13. Data breaches

If we become aware of a personal data breach, we will assess it and take the measures required by applicable law.

Where required, we will notify the relevant supervisory authority and affected individuals.

14. Children

The services are not directed to children and are not intended for anyone below the age at which they can lawfully use the relevant service under applicable law.

If you believe a child has provided personal data to Hivenet unlawfully, contact us and we will investigate and take appropriate action.

15. Third-party websites and services

Our websites and services may link to or integrate with third-party websites, payment services, identity providers, developer tools, repositories, community spaces, models, or other services.

Those third parties control their own privacy practices where they act independently. We encourage you to review the privacy information that applies to any third-party service you choose to use.

16. Changes to this Policy

We may update this Privacy Policy from time to time, including when our services, processing practices, providers, corporate structure, or legal obligations change.

If we make a material change, we will post the updated Policy and, where appropriate or required, notify affected users by email, in-product message, or another suitable method.

A Privacy Policy update is a notice about our processing. If a change requires your consent, we will ask for that consent separately rather than treating continued use of Hivenet as consent to the new processing.

The “Last updated” date at the top of this Policy shows when the latest revision took effect.

17. Contact us

For privacy questions, requests, or complaints, contact:

HIVE COMPUTING SERVICES SA
Rue de Lyon 77
1203 Genève
Switzerland

Swiss enterprise ID: CHE-469.482.964
Privacy and legal contact: hello@hivenet.com
Customer support: support@hivenet.com

Our Data Protection Officer is Andrei Vicențiu Hîncu. You can contact the DPO at andrei.hincu@antimatter.com.