Privacy Policy

This policy explains what personal data Đào Công Tiến, Hanoi, Vietnam (“we”, “us”) collects through this website, hivepaas.com, and the HivePaaS portal, portal.hivepaas.com, and what HivePaaS installations send us. We are the controller of that data. Contact: [email protected].

In short

• This website counts visits without cookies.
• The portal keeps what it needs to give you trials and licenses, and to renew them.
• Paddle, our merchant of record, takes payments; we never see your card details.
• HivePaaS sends no telemetry. With a license key installed, a daily check sends only the key and the installation ID, and it can be turned off.
• We do not sell personal data, and we show no ads.

This website

• Visit counts. We use Umami Cloud, which uses no cookies and does not store IP addresses. It records the pages visited, the referring site, and the browser, operating system, device type and country, and shows them to us only as totals.
• Fonts. The site's fonts come from Google Fonts, so your browser fetches them from Google's servers, which see your IP address.
• Server logs. The web server records requests (IP address, page, time and browser) to run and protect the site, and keeps them only for a short time.

The portal

When you use portal.hivepaas.com, we keep:

• Your account: your name, email address, password (only as a secure hash), and your sign-in security settings, such as two-factor authentication and trusted devices.
• Your licenses: the installation IDs you give us, the license keys we issue (each carries your account's name and email address), your trials, and the moves of a license from one installation to another.
• Your subscriptions: what Paddle tells us about them: the plan, the billing period, the status and dates, and Paddle's customer ID for you.
• A security log of sign-ins and changes to your account and licenses, with the IP address and browser they came from.

We email you your keys, renewals and account messages through an email delivery provider. The portal keeps your sign-in session in your browser's local storage, uses no tracking cookies, and has no analytics. Its pricing and checkout pages load Paddle's checkout, which Paddle's own privacy notice covers.

Payments

Paddle.com is the merchant of record for all our orders. Paddle collects the details needed for the payment, such as your name, email address, country, payment details and tax information, and processes them under Paddle's privacy notice. We receive the order and subscription details, never your payment details.

HivePaaS installations

HivePaaS runs on your servers, and your apps, data and secrets stay there. It sends us no telemetry: no usage data, counts, host names or versions.

• Without a license key, an installation sends us nothing.
• With a license key, it checks once a day for a renewed key, and again when someone clicks “Check for a newer key”. The check sends only the license key and the installation ID to portal.hivepaas.com. Our server sees the address the request comes from. The portal keeps no record of these checks beyond the counters that limit how often they may be made: the address's for a minute, and the key's, as a hash, for a day.
• The check can be turned off in the installation's configuration, and keys keep working: they are checked offline, and renewed keys also arrive by email. See the documentation.

An installation also contacts the services you set it up to use, such as Git hosts, container registries and backup storage. None of that reaches us.

Who processes data for us

• Paddle: payments, tax, invoices and refunds, as merchant of record.
• Our hosting provider: the servers that run this website and the portal.
• Our email delivery provider: the portal's emails.
• Umami: this website's visit counts.
• Google Fonts: this website's fonts.

Some of them may process data outside your country. Where the law requires it, such transfers are covered by safeguards such as the European Commission's standard contractual clauses.

Why we may use your data

• To perform our contract with you: your account, trials, licenses, keys and their renewal.
• Our legitimate interests: keeping the portal and website secure, and counting visits without identifying you.
• Legal obligations: the records that tax and accounting law requires us to keep.

How long we keep it

• Your account, licenses and keys: while your account exists. Close it and we delete them, except as below.
• Records of orders and licenses: as long as tax and accounting law requires.
• The security log: for a limited time, to investigate abuse.
• License checks: only the rate-limit counters, for a minute and for a day.

Your rights

You can ask for a copy of your data, and to correct, delete, restrict or move it, or object to how we use it. Write to [email protected]. You can also complain to your data protection authority.

Children

The portal is not meant for anyone under 16, and we do not knowingly collect their data.

Changes

We will post any change to this policy here, with a new date, and tell account holders by email about a change that matters.