1. Who we are
HelloGov AI Inc. operates agenthive.co and the AgentHive app. For the personal data of our customers (you), we are the controller. For the personal data you hand to your agents about other people (your customers, leads, staff), you are the controller and we process it for you under our terms.
Privacy questions: privacy@agenthive.co.
2. What we collect
- Account details: name, email address, profile picture if you add one, and sign-in events. Authentication is handled by our identity provider; we never see your password.
- Business details you give during onboarding: what your business does, the answers you pick, the hive name, and the agents you hire.
- Content: messages you send agents, tasks you create, files you attach, routine settings, and the output your agents produce.
- Billing: plan, invoices and payment status. Card details go straight to our payment provider; we store only a token and the last four digits.
- Usage and device data: pages viewed, actions taken, AI tokens used and their cost, browser type, IP address, approximate location from IP, and crash or error logs.
- Preferences: theme, timezone, and similar settings, stored in cookies or local storage.
3. Why we use it
- To provide the service: run your agents, show your tasks, send the morning briefing, and bill you correctly.
- To keep it safe: detect abuse, enforce budgets and caps, prevent fraud and protect accounts.
- To improve it: understand which features are used and where things break. We use aggregated or de-identified data for this where we can.
- To talk to you: service emails (receipts, budget alerts, security notices) and, if you opt in, product news. You can unsubscribe from news any time.
- To meet legal obligations: tax, accounting, and responding to lawful requests.
Where the GDPR or UK GDPR applies, our legal bases are performance of our contract with you, our legitimate interests (security, improvement, communication), your consent where we ask for it, and legal obligations.
4. AI processing
When an agent works, the relevant content (your instructions, the task, recent messages and attachments) is sent to a third-party AI model provider to generate a response. We route requests through an API gateway that selects a model automatically unless you choose one.
We only use providers whose API terms commit not to train on customer inputs or outputs. Providers may retain requests briefly for abuse monitoring under their own policies. We do not use your content to train models ourselves.
Agents can be wrong. Where an agent processes personal data about other people, you’re responsible for having a lawful basis to share it, for reviewing output, and for honoring those people’s rights.
7. How long we keep it
Account and content data: for as long as your account is open. After you close it we delete or anonymise within 30 days, except for records we must keep for legal, tax or security reasons (typically up to 7 years for billing records).
Logs and usage data: up to 13 months, then aggregated or deleted.
Backups roll off on a fixed schedule, so deleted data may persist in backups for a short period before it’s gone for good.
8. Security
Data is encrypted in transit and at rest. Access inside the company is limited to people who need it to do their job and is logged. Agents run with per-hive credentials and spending limits so one hive can’t reach another’s data or budget.
No system is perfectly secure. If a breach affects you, we’ll notify you and the relevant authorities as the law requires.
9. Where data goes
We’re based in the United States and our providers operate there and in other countries. If you’re outside the US, your data will be transferred to and processed in the US. Where required, we rely on recognized transfer mechanisms such as standard contractual clauses.
10. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. You also have the right to complain to your local data-protection authority.
To exercise a right, email privacy@agenthive.co from the address on your account. We’ll respond within 30 days. You can also change most details, download your work and close your account from inside the app.
We don’t discriminate against you for exercising your rights, and we don’t “sell” or “share” personal data for cross-context behavioral advertising as those terms are defined in US state privacy laws.
11. Children
The service is for businesses and adults. We don’t knowingly collect personal data from anyone under 18. If you think a child has given us data, contact us and we’ll delete it.
12. Changes to this policy
We’ll update this policy when our practices change. For significant changes we’ll email you or show a notice in the app before they take effect. The date at the top tells you when it was last revised.