Privacy Policy

The data controller is EPIWANIX, SAS (société par actions simplifiée), Paris Trade and Companies Register (RCS Paris) 944 129 451, 60 rue François Ier, 75008 Paris, France. For any privacy request, email support@hivedeck.dev. This policy explains what we collect through hivedeck.dev and the Hivedeck app, why, and your rights under the EU General Data Protection Regulation (GDPR), the UK GDPR and the French Data Protection Act.

Your code, files, prompts, agent conversations and terminal output never reach our servers. They stay on your Mac. The AI tools you choose to run (for example Claude Code, Codex, Gemini CLI or a Groq API key) may send data to their own providers under your accounts with them; their privacy policies apply to that data, and we have no access to it. The app has no analytics or tracking.

• Account: email address, password (stored only as a salted hash by our authentication provider), sign-in timestamps, and your role.
• Subscription and billing: plan, status and renewal dates; the name, billing address, country and optional VAT number you enter at checkout; invoices and payment status. Card details are collected and processed by Stripe — we never see or store your full card number.
• License and device: your license key, an anonymous identifier of your Mac (a one-way SHA-256 hash computed by the app — not your serial number), the name of your Mac (for example "Jane's MacBook Pro", so you can recognise it in your account), the app version and the date of the last license check.
• Support: the emails you send us and our replies.
• Technical logs: IP address, browser user agent and requested pages, kept by our hosting provider for security and troubleshooting.
• Waitlist: your email address, if you joined the waitlist before launch.

• To create your account, sell and manage your subscription, deliver and verify your license, send service emails (sign-in links, password resets, receipts, security alerts) and provide support — performance of our contract with you.
• To keep invoices and accounting records — legal obligation.
• To secure the Service, prevent license sharing, fraud and abuse (for example rate limiting and one-Mac-per-key enforcement) — our legitimate interests.
• To email waitlist members when Hivedeck launches — your consent, which you can withdraw at any time.

We do not sell or rent your data. We share it only with the providers that run the Service:

• Supabase — accounts, licenses and database (servers in Frankfurt, Germany);
• Stripe — payments, invoices and fraud prevention (Stripe Payments Europe, Ireland);
• Resend — transactional emails (sent from Ireland);
• Vercel — website hosting and logs;
• Cloudflare — DNS, app downloads and update files, forwarding of emails sent to support@hivedeck.dev;
• Google (Gmail) — mailbox where we read and answer support emails.

We may also disclose data if the law or a competent authority requires it, or to defend our rights.

Some of these providers are based in the United States or may access data from there. These transfers are covered by the EU–US Data Privacy Framework where the provider is certified, and otherwise by the European Commission's Standard Contractual Clauses, with additional safeguards where needed.

• Account and license data: while your account is open, then deleted within 3 years of your last activity.
• Device records: until you remove the Mac from your account or close your account.
• Invoices and accounting records: 10 years, as required by French commercial law.
• Support emails: 3 years after the last exchange.
• Technical logs: a few weeks at most.
• Waitlist emails: until launch, or until you unsubscribe.

You can ask to access, correct, delete or export your data, to restrict or object to its processing, to withdraw your consent, and (in France) to give instructions about your data after your death. Email support@hivedeck.dev from the address of your account; we answer within one month. Some data must be kept despite a deletion request (for example invoices).

If you think your rights are not respected, you can lodge a complaint with the French data protection authority (CNIL, cnil.fr) or with the authority of your country.

Data is encrypted in transit (HTTPS) and access to our databases is restricted by row-level security and separate credentials. License checks use signed tokens. Passwords are never stored in plain text. No system is perfectly secure: if a breach likely to affect you occurs, we will notify you and the authorities as the law requires.

Hivedeck is intended for adults (18+) and is not directed at children.

We may update this policy. We will notify you by email of any significant change, and the date at the top of this page always shows the latest version.