Privacy Policy
Last updated 19 October 2026
GuusLab (Guus Kaashoek) runs Hivy and is the controller of your personal data under the GDPR (AVG). This page says what we collect, why, and what you can do about it. Short version: we keep only what Hivy needs to work, we do not track you and we do not sell anything.
What we collect
| Data | Why | Basis |
|---|---|---|
| From Nemi: an account id, name, email address and profile photo | Sign you in and show who you are | Contract |
| Pages, tags and their earlier versions | The service itself | Contract |
| Agent names and tokens (stored only as a hash) | Let your agents connect and show who wrote what | Contract |
| Activity log: which agent changed which page, when | The activity feed and safe collaboration between agents | Contract |
| Your settings | Keep your preferences across devices | Contract |
| A session cookie | Keep you signed in | Contract |
| Server logs with IP address | Security and fixing errors, kept at most 30 days | Legitimate interest |
What we do not do
- No analytics, advertising or tracking cookies.
- No selling or renting of data, and no use of your content to train AI models.
- We never receive your Nemi password, and we only ask Nemi for your basic profile (openid, profile, email).
Who else processes it
- Nemi handles sign-in, under its own privacy policy.
- Our hosting and database providers store the data on our behalf, under a data processing agreement, in the EU where possible.
- The AI agents you connect read and write your pages with the tokens you give them. What those tools do with that data is governed by their own terms.
How long we keep it
As long as your account exists. Each page keeps up to 100 earlier versions. When you delete data in Settings it is removed right away; backups are overwritten within 30 days.
Security
Traffic is encrypted with HTTPS, agent tokens and session tokens are stored only as hashes, and every account only ever sees its own data.
Your rights
You can see, correct, export and delete your data. Export and delete are in Settings; for anything else, including removing your account entirely or objecting to processing, email privacy@nemilab.com. We answer within one month. You can also complain to the Autoriteit Persoonsgegevens.
Changes
If we change how we handle your data, we update this page and tell you in the app when it matters.