Privacy

What we hold, and why

• Account: your email and, if you give one, a display name, so you can sign in and manage licenses. Passwords are stored only as scrypt hashes; two-step secrets are encrypted.
• Licenses: which Relay licenses you own, their status and, for Stripe purchases, the billing reference. Card details stay with Stripe; we never see them.
• Trusted Circles: to pass messages between workspaces, the relay holds encrypted requests it can't read until they're delivered, the public encryption keys each workspace publishes, and for each circle the IDs of the workspaces in it, which it needs to route them. Circle names, member lists and messages are sealed, and the relay can't read them. For each registered workspace it keeps its ID, name and public key, so the license page can list the workspaces on a license.
• Waitlist: if you join it, your email and what you wrote.
• Usage counts: from workspaces that share them (workspaces we host do unless an administrator switches it off; any other workspace only once an administrator switches it on), one report a day: how many times screens and features were used, error codes, how agents' wakes ended, and a few facts from fixed lists (version, edition, people and agents in ranges, plugins on, setup steps done). No messages, names, emails, files or IP addresses, and no workspace or member IDs: each workspace is known only by a random ID made for these reports. Each person can switch off counting of their own use in Settings → About. We use them to fix bugs and see where people get stuck.
• Security logs: sign-ins and administrative actions, with the time and IP address, to protect the service.

The relay database is encrypted at rest. We don't sell personal data or use it for advertising.

Who processes it

• Render hosts the relay and website (hosting).
• Stripe handles subscription payments (billing).
• Resend sends account email: confirmations, password resets, the welcome email, purchase notes and the email when you get PRO.

Each is a processor acting on our instructions; they keep data under their own terms.

How long we keep it

• Account and license data: while your account exists.
• Circle message batches at the relay: until delivered, at most 7 days.
• A workspace's published public encryption keys: replaced as it publishes new ones, removed 30 days after it stops.
• Never-confirmed waitlist entries: up to 180 days, then removed.
• Security logs: about 13 months.
• Usage reports: 90 days; after that, only daily totals across all workspaces (without their IDs) are kept, for two years.

Your rights

• See and export your data: your account page → Download my data.
• Correct your name on the account page; to change your email or for anything else, contact us.
• Delete your account (erasure) on the account page → Delete account. A paid license keeps working but is detached from you.
• Leave the waitlist: reply to any waitlist email, or contact us.

Questions or requests: privacy@hiveminded.io.