1. Introduction

Veehive.ai is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the HiveStudio platform. Headquartered in the UAE with global operations, we align with multiple regulatory frameworks including UAE Federal Decree-Law No. 45 of 2021 (PDPL), DIFC Data Protection Law 2020, ADGM Data Protection Regulations 2021, GDPR, and CCPA.

2. Information We Collect

2.1 Information You Provide

Account details: name, email, password, profile picture
Payment information: billing address, payment method (processed securely by third parties)
User content: uploaded documents, created scripts, generated videos
Communications: support tickets, feedback, correspondence

2.2 Information Collected Automatically

Device information: IP address, browser type, OS, device identifiers
Usage data: pages visited, features used, time spent, click patterns
Log data: access times, error logs, referral URLs
Cookies: session, preference, and analytics cookies

2.3 Information from Third Parties

Social login providers (Google, etc.)
Analytics and advertising partners
Payment processors for transaction verification

3. How We Use Your Information

Service Delivery

Provide and maintain the platform
Process documents and generate videos
Manage accounts and subscriptions
Handle payments and invoicing

Improvement & Analytics

Analyze usage patterns
Improve AI models and features
Debug issues and optimize performance
Develop new products

Communication

Send service notifications
Respond to support requests
Share product updates (with consent)
Send marketing communications (opt-in)

Security & Compliance

Detect and prevent fraud
Enforce Terms of Service
Comply with legal obligations
Protect users and platform

4. Legal Basis for Processing

Under GDPR and UAE PDPL, we process data based on:

Contract Performance: Document processing, video generation, account management
Consent: Marketing emails, cookies, analytics
Legitimate Interest: Service improvement, fraud prevention, security
Legal Obligation: Tax records, regulatory compliance, law enforcement

5. Data Sharing & Disclosure

We do not sell your personal data. Information may be shared with:

Service Providers

Google Cloud Platform (multi-region data centres)
Google Vertex AI (video and content generation)
Stripe (payment processing)
Privacy-focused analytics providers

Legal Requirements

Data may be disclosed if required by law, court order, or government request, or to protect rights and safety.

Business Transfers

Information may transfer during mergers, acquisitions, or asset sales, with user notification.

6. International Data Transfers

Data may be processed outside your country through:

Standard Contractual Clauses (SCCs) approved by European Commission
Data Processing Agreements with third-party processors
Adequacy decisions where applicable
UAE-specific PDPL protections

Primary infrastructure: GCP regions in Europe (Belgium), Middle East (Doha), and North America for compliance with data residency requirements.

7. Data Retention

Account Information: Until deletion + 30 days
User Content (Documents, Videos): Until deleted + 90 days backup
Payment Records: 7 years (legal requirement)
Log Data: 12 months
Analytics Data: 26 months (anonymised thereafter)

8. Your Rights

Depending on your location, you may have the following rights:

Access & Portability: Request a portable copy of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure ("Right to be Forgotten"): Request deletion of your data
Restriction: Limit processing of your data
Object: Object to processing based on legitimate interest
Withdraw Consent: Withdraw consent at any time where applicable

Exercise your rights by emailing privacy@veehive.ai or using your account dashboard privacy settings. Response time: 30 days.

9. Security Measures

Encryption: AES-256 at rest, TLS 1.3 in transit
Access Control: Role-based access, MFA required
Monitoring: 24/7 security monitoring, audit logs
Certifications: SOC 2 Type II audits and ISO 27001 certification. Regular penetration testing and vulnerability assessments.

10. Cookies & Tracking

Essential: Authentication, security, functionality (Session duration)
Functional: Preferences, language settings (1 year)
Analytics: Usage patterns, performance monitoring (2 years)

Manage preferences via browser settings or our cookie consent banner.

11. Children's Privacy

HiveStudio is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware of such collection, contact us immediately at privacy@veehive.ai.

12. Changes to This Policy

Updates will be notified through:

Policy posting on the website
Updated "Last updated" date
Email notification for significant changes
In-app notifications

13. Contact Us

Data Protection Officer: dpo@veehive.ai

Privacy Team: privacy@veehive.ai

Users may lodge complaints with their supervisory authority for data protection violations. UAE residents may contact the UAE Data Office.