HiviX AI

Privacy policy

Last updated 15 October 2026

HiviX AI (“HiviX”, “we”) operates the HiviX AI growth platform at hivix.ai. This policy explains what we collect when a business connects its workspace and its accounts to HiviX, why, how it is protected, and how to have it removed.

Who this covers

HiviX is a business tool. Our customers are companies (“workspaces”) and the people they invite as members. We process data on behalf of each workspace to provide the features that workspace turns on. We do not sell personal data and we do not use it for advertising.

What we collect

Account and workspace data

  • Your name, email address and password hash (authentication is provided by Supabase).
  • Workspace details you enter: brand name, website, markets, members and their roles.
  • Content the workspace creates or approves in HiviX: articles, posts, images, videos, briefs.
  • Usage and audit records: who did what in the workspace, when — kept so a workspace can review its own history.

Data from services you connect

Each connection is optional and is made by an administrator of the workspace. We only read what the feature needs.

  • Instagram (Instagram API with Instagram Login): the professional account id, username and account type; a long-lived access token; the publishing quota; and, for content HiviX published on your behalf, its permalink and insights (views, reach, likes, comments, saves, shares). We publish only content a member of your workspace approved.
  • Google Search Console and Google Analytics: the email address of the signed-in Google account, the list of properties it can see, and, for the property you choose, search performance rows (queries, clicks, impressions, positions), index and sitemap status, and analytics reports (sessions, sources, conversions).
  • Google Calendar: the email address of the signed-in Google account, the names and colours of its calendars, and the events of the calendars you switch on. Events are read from Google when the calendar is shown or when you ask the assistant about them; HiviX does not keep its own copy of your calendar. HiviX creates, changes or deletes an event only when a member of your workspace does so in the calendar, or asks the assistant and confirms.
  • YouTube: the channel id, name and subscriber count, and an access token. HiviX uploads only videos your workspace approved or set to publish automatically, and marks them as altered or synthetic content. For those videos it reads views, likes and comment counts, reads the comments, and may answer comments on your behalf within the rules your workspace set.
  • Telegram: a bot token you create and the channel it posts to.
  • WordPress: your site URL, a user name and an application password used to publish.
  • Other services you choose to connect (search-data subscriptions, email sending, design files, webhooks): the API credential you enter and the data that service returns for your requests.

Public social-media data

When a workspace adds a public Instagram profile, hashtag, Telegram channel or YouTube channel to its watch list, HiviX reads the public posts, captions, engagement counts and media of that source, mirrors the media into private storage, and derives signals (for example a post gaining likes faster than usual). This is public information about the accounts the workspace chose to follow — typically its own accounts, competitors and topics in its market.

How we use it

  • To run the features a workspace turns on: research, content, publishing, analytics and alerts.
  • To publish, on your instruction, the content your workspace approved to the channels you connected.
  • To show you how that content and your site perform.
  • To keep the platform secure, honour rate limits and account for spend per workspace.

Google user data

HiviX’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the features your workspace turned on. We do not sell it, use it for advertising, or use it to train AI models. When you ask the assistant about your calendar, or HiviX writes an answer to a comment, the part needed for that answer is processed by the AI model providers that power HiviX, only to produce that answer.

How credentials and tokens are protected

  • Every credential and access token is encrypted at rest with AES-256-GCM, bound to the workspace it belongs to. No API ever returns a stored secret.
  • Tokens are used only from our servers, over TLS, to call the service they belong to.
  • Media is stored in private object storage and served through short-lived signed links.
  • Access to a workspace’s data is limited to that workspace’s members, enforced in the database.

Who else processes it

We run on Amazon Web Services (us-east-1) and Supabase (authentication and database). AI model providers process the text, images and video needed to produce research, content, creative and answers on our instructions. Connected platforms — Meta, Google, Telegram, your WordPress host — receive the requests needed to provide their part of a feature, under their own terms. Public social-media data is retrieved through data-access providers acting on our instructions. We do not share workspace data with anyone else, except where the law requires it.

Retention and deletion

  • Disconnecting a service in Settings → Integrations deletes its stored credential or token immediately and stops the channels wired to it.
  • Removing HiviX from your Instagram account (Instagram → Settings → Apps and websites) or sending a data-deletion request through Meta deletes the access token and the connection on our side and gives you a confirmation code; see data deletion.
  • Revoking Google access at myaccount.google.com/permissions invalidates the stored refresh token; the connection then shows as needing attention and can be removed.
  • Closing a workspace deletes its content, connections, mirrored media and audit records. Backups age out within 30 days.
  • You may ask us to delete your personal data at any time at the address below.

Your choices

Workspace administrators decide which services are connected and which content is published. Members can review the audit log of their workspace. You can object to, correct or request a copy of personal data we hold about you by contacting us.

Changes

When this policy changes, the date at the top changes with it. Material changes are announced in the product.

Contact

HiviX AI · info@hivix.ai