Privacy Policy

1. What We Collect

1. Account details. Your email address and name when you sign up.
2. GitHub. If you sign in with GitHub, we receive your GitHub identity through OAuth. If you connect repositories, we get access to the repositories you grant, so we can build and deploy them.
3. Billing. Payments are handled by Stripe. We don't store card numbers; we keep the billing records we need, such as your plan, invoices and payment status.
4. Usage metering. How much compute, database storage, bandwidth and build time your account uses, so we can apply plan limits and bill overage.
5. Logs. Build, deployment and application logs for your workloads, and request logs for the console and API.
6. IP addresses. Recorded in request logs.

2. Your Code and AI

1. We store and run the code you deploy only to provide the Services. You own your code.
2. When you use Drone, we send code from your repository to a third-party AI model provider so Drone can build your app and deploy it.
3. .env files and secret files are excluded and are never sent to the AI model provider. If your app needs settings such as environment variables, Drone tells you; you supply the values.
4. Code is sent for analysis only when you deploy or preview a deployment with Drone, and only to prepare that deployment.

3. How We Use Data

We use personal data to:

1. Create and run your account, and sign you in.
2. Build, deploy and run your apps, HivePods and databases.
3. Meter usage, bill you and handle payments.
4. Keep the Services secure, investigate abuse and fix problems.
5. Send service emails, such as sign-in, billing and important account notices.

We do not sell your personal data. Where data protection law requires a legal basis, we process personal data to perform our contract with you, for our legitimate interests in running, securing and improving the Services and preventing abuse, to comply with legal obligations, and with your consent where we ask for it.

4. Cookies

We use only essential session cookies, which keep you signed in to the console. They are httpOnly, so scripts on the page can't read them. We don't use advertising cookies.

5. Service Providers

We share data with these providers only so they can help us run the Services:

1. Stripe for payments and billing.
2. Cloudflare for hosting, network delivery and security of our websites.
3. GitHub for sign-in and access to the repositories you connect.
4. A third-party AI model provider, so Drone can build and deploy your app (see section 2).
5. Our email service provider for sending service emails.

These providers may process data in countries other than yours. [International transfer safeguards to be confirmed by legal review.] We may also disclose data where the law requires it.

6. Retention

1. Console request logs, including IP addresses, are kept for 14 days.
2. Account data is kept while your account is open, and for 30 days after you close it, then deleted, except records we must keep by law (such as billing records).
3. Billing records are kept for as long as tax and accounting law requires.
4. Build, deployment and application logs: kept while the app exists and deleted when you delete the app.

7. Security

We take reasonable technical and organisational measures to protect personal data, and limit access to the people and providers who need it to run the Services. We use encryption in transit (HTTPS/TLS) everywhere, encrypt secrets such as environment variables and stored tokens at rest, isolate workloads from each other, and restrict staff access to accounts protected by two-factor authentication. No system is perfectly secure, so please use a strong password and tell us straight away if you think your account has been compromised.

8. Your Rights

You can ask us to:

1. Access the personal data we hold about you.
2. Export it in a portable format.
3. Delete it, including closing your account.
4. Correct anything that is wrong.

Email [email protected] to make a request. We may need to confirm your identity first. Depending on where you live you may have further rights, including complaining to your data protection authority. We respond to requests within 30 days.

9. Children

The Services are for adults building software. They are not directed at children, and we don't knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

10. Changes to This Policy

We may update this policy. For material changes we'll give notice by email or in the console before they take effect, and we'll update the date at the top of this page.

11. Contact

Questions about this policy or your data:

• [email protected]
• DockHive Inc.
  131 Continental Dr, Suite 305
  Newark, DE 19713, United States