Privacy Policy

Hivin Corporation OÜ ("Hivin", "we", "us", or "our") is a private limited company registered in Estonia (registration number 16842310), with its registered address at Tallinn, Estonia. Hivin operates the platform available at hivin.ai, which connects entrepreneurs, creators, and professionals to collaborate on projects.

For any privacy-related questions, you may contact us at: hello@hivin.ai

We collect the following categories of personal data when you use our platform or sign up for early access:

Identity & Contact Data - First name and last name - Email address - Gender (optional) - Age (optional)

Profile & Preference Data - Geographical region - Level of education - Employment status - Entrepreneurial interest and sector preferences - How you heard about Hivin

Usage Data - IP address and approximate location - Browser type and version - Pages visited and time spent - Referral source and UTM parameters

Communications - Messages sent via our contact form - Any comments or feedback you voluntarily provide

We do not collect special category data (health, biometric, religious, or political data).

We use your personal data for the following purposes:

To provide and improve our service - Process your waitlist registration and notify you at launch - Match your profile with compatible collaborators - Personalise your experience on the platform

To communicate with you - Send product updates, launch notifications, and important announcements - Respond to your support or contact enquiries

To analyse and improve - Understand how users interact with our platform - Conduct market research and product development - Generate anonymised, aggregated statistics

To comply with legal obligations - Maintain records as required by Estonian and EU law - Respond to lawful requests from public authorities

We will never sell your personal data to third parties.

For users in the European Economic Area (EEA), we process your data on the following legal bases under the General Data Protection Regulation (GDPR):

- Consent (Art. 6(1)(a)): When you opt in to marketing communications or complete optional survey fields. - Contract (Art. 6(1)(b)): To fulfil our obligations when you register or use our services. - Legitimate interests (Art. 6(1)(f)): To improve our platform, prevent fraud, and conduct analytics, balanced against your interests and rights. - Legal obligation (Art. 6(1)(c)): Where we are required to process data by law.

You may withdraw consent at any time by contacting us at hello@hivin.ai.

We share your data only in the following limited circumstances:

Service Providers We use trusted third-party processors who act on our instructions and are bound by data processing agreements: - Vercel (hosting and infrastructure) - Supabase (database and authentication) - Google Analytics (anonymised usage analytics) - Iubenda (cookie consent management)

Legal Requirements We may disclose your data to law enforcement or regulatory authorities if required by applicable law or to protect the rights, property, or safety of Hivin, our users, or others.

Business Transfers If Hivin is involved in a merger, acquisition, or asset sale, your data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

No data is transferred to third parties for advertising or commercial purposes.

Hivin is registered in Estonia and operates within the European Economic Area (EEA). Some of our service providers may process data outside the EEA. Where this occurs, we ensure appropriate safeguards are in place, including:

- Standard Contractual Clauses (SCCs) approved by the European Commission - Adequacy decisions where applicable (e.g., transfers to countries recognised as providing adequate protection)

You may request information about the specific safeguards in place by contacting us at hello@hivin.ai.

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law.

- Waitlist registrations: Retained until 12 months after the platform launch, or until you request deletion. - Contact form submissions: Retained for up to 24 months for support and correspondence records. - Usage and analytics data: Retained in anonymised or aggregated form indefinitely; identifiable usage data is retained for up to 26 months. - Legal and compliance records: Retained for the period required by applicable law (typically 7 years).

After the retention period, data is securely deleted or anonymised.

Under GDPR and applicable data protection laws, you have the following rights:

- Right of access: Request a copy of the personal data we hold about you. - Right to rectification: Request correction of inaccurate or incomplete data. - Right to erasure: Request deletion of your personal data ("right to be forgotten"). - Right to restriction: Request that we limit how we process your data in certain circumstances. - Right to data portability: Receive your data in a structured, machine-readable format. - Right to object: Object to processing based on legitimate interests or for direct marketing. - Rights related to automated decision-making: We do not make solely automated decisions that produce legal or similarly significant effects.

To exercise any of these rights, contact us at hello@hivin.ai. We will respond within 30 days. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee) or the supervisory authority in your country of residence.

We take the security of your data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, or disclosure. These include:

- Encrypted data transmission (TLS/HTTPS) - Encrypted storage of sensitive data at rest - Access controls limiting who can view personal data - Regular security reviews and vulnerability assessments

While we strive to use commercially acceptable means to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

Hivin is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child under 16, please contact us immediately at hello@hivin.ai and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, by sending you an email notification.

We encourage you to review this policy periodically. Continued use of our platform after changes become effective constitutes your acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your data, please contact us:

Hivin Corporation OÜ Tallinn, Estonia Email: hello@hivin.ai

We aim to respond to all privacy-related enquiries within 5 business days.