Privacy Policy

Introduction

HiveSight ("we", "us", or "our") provides a relationship-intelligence platform that helps go-to-market teams surface warm-introduction paths from their existing network into target accounts. This Privacy Policy explains what information we collect, how we use it, how we share it, how we store it, and the choices you have. It applies to our website, our authenticated web application, and any supported browser or productivity-app extensions we ship.

We take a data-minimization posture: we only ingest what is required to deliver the features you enable, and we do not sell, rent, or trade your data. Where our features involve third-party integrations (for example Google Workspace or LinkedIn), we honor the policies each of those providers requires — most notably the Google API Services User Data Policy, described in its own section below.

Information We Collect

We collect the following categories of information when you use HiveSight:

• Account & contact details. Your name, email address, work title, company, LinkedIn URL, and other information you provide during onboarding or in your account settings.
• Authentication metadata. Identifiers issued by our authentication provider (Clerk) so we can verify you when you sign in.
• Gmail data. When you connect a Gmail account via our OAuth flow, we receive access under the gmail.readonly scope. See the Google API section below for the specific fields we read, how we use them, and how to remove them.
• Google Calendar data. When you connect a Google Calendar account, we read the events on that calendar (attendees, subject, start/end time) so we can identify who you have met with and surface that context inside the app.
• LinkedIn export data. When you upload a LinkedIn Data Export (a file LinkedIn provides for you to download), we parse your connections, sent invitations, and message history so we can build your personal network graph inside HiveSight.
• CRM data. When you connect a supported CRM (HubSpot, Salesforce, or Attio) via Nango, we sync deal, account, contact, and owner records so the app can correlate your pipeline with your network.
• Product telemetry. Anonymized product-usage analytics via PostHog and server logs (e.g. request IDs, error signals) so we can debug and improve the service. We do not include email content or LinkedIn message bodies in telemetry.
• Cookies. Standard session cookies to keep you signed in, plus analytics cookies where permitted by your browser preferences.

Google API Services User Data Policy — Limited Use

HiveSight's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. This section describes how our use of Google user data complies with those requirements.

Scopes we request:

• https://www.googleapis.com/auth/gmail.readonly— read-only access to the authenticated user's Gmail messages and settings.
• https://www.googleapis.com/auth/calendar.readonly— read-only access to the authenticated user's Google Calendar events.

Gmail data we read and store:message participants (from, to, cc), subject lines, sent-at timestamps, thread identifiers, message identifiers, and message bodies. We use this data solely to populate the authenticated user's own in-app Contacts page, interaction ledger (last-emailed date, thread count), and warm-intro surfaces that correlate people they have emailed with the LinkedIn network they have imported. Google Calendar data (event summary, start time, attendee list) is used for the parallel purpose of surfacing people the user has met with.

How we DO NOT use Google user data:

• We do not transfer Google user data to third parties, except as necessary to provide or improve user-facing features that are prominent in HiveSight's user interface, or as required by law.
• We do not use Google user data for serving advertisements, and we do not sell or license Google user data.
• We do not use Google user data to train or improve any generalized or third-party artificial intelligence or machine-learning models. The only AI/ML we run over Google-sourced content is scoped to a single user's own account and produces outputs only visible to that user (for example, a suggested reply draft rendered for that user).
• We do not read the content of a workspace teammate's Gmail on their behalf. Every Gmail connection is per-user and grants HiveSight access only to the connecting user's own inbox.
• We do not allow humans to read Google user data, except (a) with the explicit affirmative agreement of the user for specific messages, (b) for security purposes such as investigating abuse, (c) to comply with applicable law, or (d) where the data (including derivatives) is aggregated and de-identified for internal operations.

Retention and deletion of Google user data.Ingested Gmail and Calendar data is retained while the corresponding Google integration is connected, so we can render your interaction history and keep the sync incremental. When you disconnect an integration in HiveSight (Settings → Mailboxes / Calendars → Disconnect), our server marks the integration as disconnected and stops syncing new data. You may also request full deletion of ingested Google user data at any time by emailing justin@hivesight.so; we will remove all stored Gmail messages, message metadata, and calendar events associated with your account within thirty (30) days of the request. You can additionally revoke HiveSight's OAuth grant at any time in your Google Account settings (myaccount.google.com → Security → Third-party apps with account access).

Security. Google user data is encrypted in transit (TLS) and at rest, stored on managed database infrastructure with access restricted to production services and a small number of authorized personnel under least-privilege access controls.

How We Use Your Information

We use the information we collect to (a) provide the HiveSight product to you and your workspace teammates — including the Contacts page, network graph, warm-introduction surfaces, briefings, and reminders — (b) authenticate you and prevent abuse, (c) respond to your support requests, (d) communicate service-related notices such as outages or policy updates, and (e) improve the product through aggregated, non-identifying analytics. We do not use your information for advertising, and we do not sell your personal information.

Sharing Your Information

We share your information only with a small set of service providers required to run the product, under contractual obligations to protect your data and use it only on our behalf. These include: our cloud hosting and database providers (Vercel, Neon, and PlanetScale), our authentication provider (Clerk), our integration proxy (Nango, which brokers our Google and CRM OAuth connections), our AI providers (Anthropic and OpenAI, used for feature-scoped inference described above and under a no-training data agreement), our transactional email provider (Resend), and our product analytics provider (PostHog). We do not sell, rent, or trade your personal information.

Data belonging to a workspace can be visible to other members of that workspace — for example, contacts and interactions that a rep has opted to share with their team. Data ingested via a personal Gmail or Calendar integration is scoped to the connecting user and is not exposed to other workspace members through our interfaces.

We may disclose information when required to do so by law, to enforce our terms, or to protect the rights, property, or safety of HiveSight, our users, or the public.

Data Retention

We retain your account information for as long as your account is active. Data ingested from third-party integrations (Gmail, Google Calendar, LinkedIn export, connected CRM) is retained while those integrations are connected and for a short reconciliation window after disconnection so we can complete any in-flight processing. You can request full account deletion, or deletion of specific integration data, at any time by contacting us; we honor those requests within thirty (30) days of receipt.

Cookies and Tracking

We use cookies to keep you signed in and remember lightweight UI preferences. We use PostHog for product analytics to understand which features are used and to debug issues; PostHog is configured to respect Do-Not-Track and to avoid capturing sensitive fields. You can control cookie behavior through your browser settings.

Security Measures

We implement industry-standard technical and organizational safeguards to protect your personal information, including encryption in transit (TLS) and at rest, network isolation between production and non-production environments, least-privilege access controls, and regular review of vendor security postures. No transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security. Please report suspected security incidents to justin@hivesight.so.

Your Choices

You have the right to access, update, correct, export, and delete your personal information. You can disconnect any integration at any time from within the app (Settings → Mailboxes / Calendars / Integrations). You can request a copy of your data or full account deletion by emailing justin@hivesight.so. Users in the EEA, UK, and California have additional statutory rights (including the right to object to processing and to lodge a complaint with a supervisory authority), which we honor on request.

Children

HiveSight is a B2B product intended for use by adults in a professional context. It is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us so we can delete it.

Changes to this Policy

We may update this policy to reflect changes in our practices, product features, or legal requirements. We will update the “Last updated” date at the top of the page and, for material changes, we will notify affected users by email or an in-app notice before the change takes effect.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at justin@hivesight.so.