Privacy Policy

Draft for legal review. Written to meet the GDPR (EU 2016/679) and Dutch law (UAVG, Telecommunicatiewet). Have it reviewed by a lawyer before launch.

This policy explains how Hivello Ltd ("we", "us") handles personal data when you use Flint ("the Service"). We are the controller for the account, billing and usage data described below.

Who we are

Hivello Ltd, the Netherlands. Privacy questions and requests: [email protected].

What we collect, why, and on what legal basis

Data	Why we use it	Legal basis (GDPR art. 6)
Account: email address, name (if given), team membership and role	Create and run your account, sign you in, let teams work together	Contract (6(1)(b))
Billing: balance, top-ups, transactions, invoices, billing address you give Stripe	Take payment, bill usage, issue invoices	Contract (6(1)(b)); legal obligation for tax records (6(1)(c))
Usage: instances, volumes, models and API keys you use, run times, token counts	Run and meter the Service, show you your usage	Contract (6(1)(b))
Security data: IP address, browser type, sign-in events, API key and SSH key fingerprints	Keep accounts secure, prevent fraud and abuse	Legitimate interests (6(1)(f)): protecting you, other customers and the Service
Country of your IP address at sign-up, payment and API use, worked out on our own servers from a downloaded IP-to-country list (no address is sent anywhere); blocked attempts are logged	Comply with EU and US sanctions law	Legal obligation (6(1)(c))
Support and contact messages	Answer you	Contract (6(1)(b)) or legitimate interests (6(1)(f))
Service email: sign-in links, receipts, balance and instance alerts	Run your account	Contract (6(1)(b))
Product analytics (only if you accept): pages viewed, features used, errors, and session replays with form fields and keys masked	Understand how the Service is used and fix problems	Consent (6(1)(a)); withdraw any time in the cookie settings
Sign-in with Google Workspace (if you choose it): name, email, your Workspace domain	Sign you in and add you to your organisation's team	Contract (6(1)(b))
Product news (only if you opt in)	Tell you about new features	Consent (6(1)(a)); you can withdraw it at any time

We don't make decisions about you based solely on automated processing that have legal or similarly significant effects. Automatic actions such as pausing instances when your balance runs out follow the rules in our terms.

Your content

The code, data and models you run on your instances, store on volumes or send to the inference API ("Your Content") are yours. For Your Content we act as your processor: we process it only to provide the Service, under the Data Processing Agreement available on request. We don't sell it, train models on it, or look at it except to keep the Service running, investigate abuse or where the law requires. We don't keep inference requests and responses beyond serving them and counting tokens.

Cookies and similar technologies

Sign-in cookies that keep you signed in (strictly necessary; no consent needed).
Browser storage for your preferences, such as theme and dismissed notices (functional; stays on your device).
Campaign attribution: if you arrive from a link with campaign tags, we keep those tags on your device for 30 days to see which campaigns bring sign-ups.
Analytics (PostHog, EU), only with your consent. Nothing is set or sent until you accept in the cookie banner, and you can change your choice at any time under "Cookie settings" at the bottom of every page. Typed input is masked, and pages showing keys, billing or the browser terminal are never recorded.
Your cookie choice itself is kept in a cookie for six months so we don't ask again.

We don't use advertising or cross-site tracking cookies.

We use these service providers (sub-processors). Each works under a contract that requires it to protect your data:

Provider	What for	Where
DigitalOcean	Hosting the Service, database and backups	Amsterdam, the Netherlands (EU)
Stripe	Card payments and invoicing	EU (Stripe Payments Europe, Ireland); some processing in the US
Resend	Sending sign-in links, receipts and alerts	EU region where available; US otherwise
PostHog	Product analytics, session replay, error tracking (with consent)	EU (Frankfurt)
Grafana Labs (Grafana Cloud)	Service logs and monitoring	EU region
Google (Workspace sign-in)	Sign-in, only if you choose it	Google's processing locations
Cloudflare	Network protection and routing	Global edge network

IP-to-country data: IP Geolocation by DB-IP, licensed under CC BY 4.0. It is a downloaded file, not a service: DB-IP receives no data from us.

We don't sell personal data. We may disclose data where the law requires, for example to tax authorities or under a court order.

International transfers

Your account and billing data are stored in the EU. Where a provider processes data outside the EEA, we rely on an adequacy decision (such as the EU-US Data Privacy Framework for certified providers) or the European Commission's Standard Contractual Clauses, with extra safeguards where needed. Ask us at [email protected] for a copy.

How long we keep data

Data	Kept for
Account data	While your account is open; erased when you delete your account
Invoices and financial records	7 years, as Dutch tax law requires (art. 52 AWR)
IP addresses and browser details in sign-in and security logs	12 months, then removed
Email delivery logs	12 months
Support emails	24 months
Instance disks	Deleted when you terminate the instance
Volumes	Deleted when you delete them or your account
Expired sessions and invitations	30 days after they expire
Analytics (only if you accepted)	12 months
Backups	Rotated out within 30 days

Your rights

Under the GDPR you can:

access your data and get a copy, and take it with you (portability): use Settings › Your data › Download my data in the dashboard;
delete your account and personal data: use Settings › Your data › Delete account. We keep financial records for as long as the law requires;
correct inaccurate data: in your settings, or by asking us;
object to processing based on legitimate interests, and restrict processing in some cases;
withdraw consent for product news at any time, without affecting earlier processing.

Email [email protected] for anything you can't do in the dashboard. We reply within one month. We may need to confirm your identity first.

You can also complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or the authority in your own EU country.

Security

We encrypt data in transit and at rest, isolate customer instances from each other, limit staff access to what their role needs, and log administrative access. If a breach puts your rights at risk, we'll tell you and the regulator as the law requires.