Privacy Policy

Last updated · April 30, 2026

This Privacy Policy explains how [Operator] ("we", "us", "our") collects, uses, and shares information about you when you use Hive Reels (the "Service"). By using the Service you consent to the practices described here.

The short version: we process your files to wash them, then delete them. We never train models on your media. We never sell your data.

1. Information we collect

1.1 Account information

When you sign up, our authentication provider (Clerk) collects the email address (and optionally OAuth provider profile data, e.g. Google name) you supply at signup. We receive a stable Clerk user identifier and the email address; we store these in our own database to associate your activity with your account.

1.2 Payment information

When you purchase credits, payment is processed by Stripe. Stripe collects your full card details directly; we never see or store your card number. We receive a Stripe customer identifier and metadata about the transaction (amount, pack purchased, currency, timestamp) which we link to your account so you can view your purchase history through the Stripe-hosted Customer Portal.

1.3 Uploaded content

Videos and images you upload to be processed are stored on our servers only as long as needed to deliver outputs to you (see Retention below). We do not view, share, or analyze your content beyond what is required to run the requested processing pipeline.

1.4 Usage and activity logs

We log basic activity for security and operational purposes: account sign-ins, credit grants and deductions, processing-job submissions and outcomes, and rate-limit-relevant request metadata (IP address, timestamp). These logs are retained for up to 12 months and are not used for advertising.

1.5 Cookies

We use the following cookies:

Authentication cookie (set by Clerk) — a session cookie required for you to stay signed in. Without it the Service cannot function for signed-in users.
Stripe fraud-prevention cookies (set by Stripe on the Checkout and Customer Portal pages they host) — used by Stripe for risk scoring on your transactions.

We do not use advertising cookies or third-party analytics cookies.

2. How we use information

We use the information we collect to:

operate and maintain the Service (process your uploads, track your credit balance, deliver outputs);
authenticate you and protect your account;
process and reconcile payments;
communicate with you about your account, billing, and material changes to these policies;
detect, investigate, and respond to abuse, fraud, and violations of our Terms of Service;
comply with legal obligations.

3. Third-party services

The Service relies on the following sub-processors:

Clerk — authentication and session management. See Clerk's privacy policy.
Stripe — payment processing and customer billing portal. See Stripe's privacy policy.
Cloudflare Turnstile — bot challenge served on signup to prevent automated abuse.
Hosting infrastructure — the application and its database run on infrastructure operated by [Operator] and may be backed by a major cloud provider; uploaded content and account data are stored only there.

Each sub-processor receives only the minimum data needed to perform its function. We do not sell your personal information to anyone.

4. Retention

Uploaded content: source files and processed outputs are stored in a per-user staging area for up to 24 hours, then automatically deleted by a background sweeper. Outputs you download go to your own machine; we do not keep a copy after the staging period ends.
Account data (email, Clerk identifier, credit balance, purchase history, Stripe customer identifier): retained for as long as your account is active, plus a short period afterwards for accounting and dispute purposes.
Activity logs: retained for up to 12 months and then deleted.
Payment records: retained by Stripe per their own retention policy; we keep only summary metadata for the same period as account data.

5. Your rights

Depending on your jurisdiction, you may have rights regarding your personal information, including the right to:

access the personal information we hold about you;
correct inaccurate information;
request deletion of your account and the personal information associated with it;
export your data in a machine-readable format;
object to or restrict certain processing;
withdraw consent where consent was the legal basis for processing;
file a complaint with your local data protection authority.

To exercise any of these rights, email us at [support email]. We will respond within 30 days. Account deletion can also be initiated from the account settings inside the Service.

6. Security

We use industry-standard practices to protect your data, including HTTPS for all transit, hashing or encryption of sensitive identifiers at rest, and access controls on our backend. No system is perfectly secure, and we cannot guarantee that an attacker will never compromise your information; we will notify you and the relevant authorities if a security incident affects your data.

7. Children

The Service is not directed at children under 18, and we do not knowingly collect personal information from anyone under 18. If you believe we have collected such information, please contact us and we will delete it.

8. International transfers

Our hosting infrastructure and sub-processors may operate in jurisdictions different from yours, including the United States. By using the Service you consent to the transfer of your data to those jurisdictions. Where required by law (for example, the EU's GDPR) we rely on the relevant standard contractual clauses with our sub-processors to safeguard cross-border transfers.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a new "Last updated" date. Continued use of the Service after a change constitutes acceptance of the updated policy.

10. Contact

Privacy-related questions or data-rights requests can be sent to [support email].