Privacy Policy
Learn how we collect, use, and protect your personal data in compliance with GDPR.
Last updated: October 3, 2025
1. Overview
This Privacy Policy describes how Hyyve ("we," "our," or "us") collects, uses, and protects your personal information when you visit our website https://hyyve.ai or use our services.
We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Data Controller
The data controller responsible for your personal data is:
Company: Hyyve
Email: mail@webvise.io
Address: Eva-Laube-Weg 5, 14473 Potsdam
3. Data We Collect
We may collect the following types of personal data: authentication data (email, hashed password, session identifiers via Better Auth), account and billing data (via Polar), chat messages and conversation metadata, AI-generated content and prompts, brand framework and settings, calendar/scheduling data, connected social account identifiers and posting metadata (for X/Twitter, Instagram and LinkedIn), and file uploads for chat (max 5 files, 5MB each; uploads are processed for generation and not persisted).
Website Visits: IP address, browser type and version, operating system, pages visited and time spent, device information, and product analytics events (e.g., page views, clicks) captured via PostHog with IP anonymization.
Contact Forms: Name and email address, phone number (if provided), message content, any other information you voluntarily provide
Cookies: We use cookies and similar tracking technologies. For details, see our Cookie Policy.
4. Legal Basis for Processing
We process your personal data based on:
Consent: When you provide explicit consent (analytics and cookie-based tracking require consent)
Legitimate Interest: For security and core service operations (analytics are only processed with your consent)
Contract Performance: To provide requested services
Legal Obligation: To comply with legal requirements
5. Data Sharing and Third Parties
We do not sell your personal data. We may share information with:
Service Providers: Vercel (hosting, Frankfurt/EU), Neon (Postgres database, Frankfurt/EU), Inngest (background jobs, Frankfurt/EU), Better Auth (authentication), Resend (transactional email), Polar (billing/subscriptions), PostHog (product analytics, EU data residency with IP anonymization enabled), OpenAI (LLM processing via Vercel AI SDK), and social media APIs (X/Twitter, LinkedIn, Instagram) strictly for scheduling and publishing.
Legal Requirements: When required by law
Business Transfers: In connection with mergers or acquisitions
All third parties are contractually obligated to protect your data. Hosting and primary processing occur in the EU (Frankfurt) through Vercel (app), Neon (database), and Inngest (jobs). PostHog is configured for EU data residency with IP anonymization; analytics events are pseudonymous. OpenAI processes prompts/content for model inference; we avoid sending unnecessary personal data and use EU endpoints when available. Where transfers outside the EEA are necessary, we rely on appropriate safeguards (e.g., Standard Contractual Clauses).
6. Data Retention
We retain your personal data only as long as necessary to provide the service and comply with legal obligations. Account data is retained while your account remains active. You can delete chats and generated content at any time. File uploads used during chat are processed for generation, not stored long-term, and are discarded after processing:
Contact inquiries: 3 years from last contact
Website analytics: 26 months
Legal obligations: As required by law
7. Your Rights
Under GDPR, you have the following rights:
Access: Request a copy of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your data
Data Portability: Receive your data in a structured format
Object: Object to processing based on legitimate interests
To exercise these rights, contact us. We will respond within 30 days. Contact us at mail@webvise.io.
8. Data Security
We implement appropriate measures to protect your data against unauthorized access, accidental loss, destruction, or unlawful processing.
Our security measures include encryption, access controls, and regular assessments.
9. Changes to This Policy
We may update this Privacy Policy periodically.
We will notify you of significant changes by posting updates on our website and updating the date. If required by law, we will request renewed consent for analytics cookies.
For material changes, we may send email notifications.
10. Contact Us
If you have questions about this Privacy Policy, contact us:
Email: mail@webvise.io
Address: Eva-Laube-Weg 5, 14473 Potsdam
You have the right to lodge a complaint with your local data protection authority.