Privacy Policy

HiveMind (formerly Veehive Mind) is an AI marketing platform operated by Veehive Tech FZ-LLC, a company registered in the United Arab Emirates (“Veehive,” “we,” “us,” or “our”) at veehivemind.com. It helps brands and agencies plan, create, and publish marketing content across connected channels. This Privacy Policy explains what data we collect, how we use it, how we store and protect it, who we share it with, and the choices and rights you have.

This policy applies to the accounts and organizations that use HiveMind, and to the channel accounts (such as Instagram Business accounts) that our users connect to the platform.

1. Information we collect

• Business and brand information that you provide — brand names, descriptions, voice and style guidelines, target audiences, and campaign goals.
• Content you create and approve inside the platform — drafts, captions, schedules, and the images and video we generate for your campaigns at your direction.
• Connected-channel data for the accounts you choose to connect, described in detail in Section 3.
• Account and usage data — your login identity, the organization you belong to, and basic operational logs needed to run and secure the service.
• Demo requests: the name, company, work email and message you send on /book-a-demo, emailed to our team to arrange the demo and not added to any mailing list.

2. How we use your information

We use the information above to:

• operate the platform and generate marketing content you request;
• publish content you have explicitly approved to the channels you connected;
• report back performance of content we published so you can measure your campaigns;
• secure the service, prevent abuse, and meet legal obligations.

Human-in-the-loop. Nothing is published to any connected account without explicit human approval inside the platform. The agents draft and schedule; a person approves before anything goes live.

We do not sell your personal data, and we do not use your content or your connected-account data to train foundation models.

3. Connected channels

Instagram

When you connect an Instagram Business account (via the Instagram API with Instagram Login), we access only what is needed to run your campaigns for that account:

• Basic profile of the connected account (its ID and username);
• Publishing — the ability to publish posts to that account, only for content you have explicitly approved;
• Insights — reach, impressions, likes, comments, and saves for posts that we published on your behalf.

We do not read your direct messages, we do not access posts we did not publish, and we do not collect data about your followers. Our use of Instagram data complies with the Meta Platform Terms and Developer Policies, and we use Instagram data solely to provide the features described here.

YouTube

HiveMind uses YouTube API Services. When you connect a YouTube channel, we request a single permission — upload videos to your channel — and we use it only to publish videos you have explicitly approved.

For videos we published on your behalf, we read public statistics (views, likes, and comment counts) so we can report campaign performance back to you. We do not read the contents of comments, we do not access videos we did not publish, we do not modify or delete anything on your channel, and we do not collect data about your subscribers.

Your use of HiveMind’s YouTube features is also governed by the YouTube Terms of Service, and Google’s handling of your data is described in the Google Privacy Policy. You can review and revoke HiveMind’s access to your Google account at any time at myaccount.google.com/permissions.

LinkedIn

When you connect a LinkedIn account, we request your basic profile and email address to identify the connected account, and permission to post on your behalf. We publish only content you have explicitly approved, to your personal profile. We do not read your feed, your connections, or your messages.

Email

When you use email campaigns, we send the campaigns you configure through our email provider (Resend) and process delivery, open, and click webhooks so we can report campaign performance back to you.

Content generation

We generate images and video for your campaigns using Google Vertex AI. Generated assets belong to your organization and are stored with your other content.

4. How we store and secure your data

• Encrypted access tokens. Access tokens for connected accounts are stored encrypted in Google Secret Manager. They are never exposed in the browser.
• Tenant isolation.Your data is isolated per tenant/organization. There is no cross-tenant access — one organization can never read another organization’s data.
• Managed infrastructure. We run on Google Cloud, which provides encryption in transit and at rest for the underlying storage.

5. Third parties we share data with

We share data only with the service providers required to operate the platform, and only for that purpose:

• Google Cloud — hosting, storage, and Google Secret Manager for encrypted tokens;
• Meta / Instagram — to publish approved posts and retrieve insights for the account you connected;
• Google / YouTube — to upload approved videos to the channel you connected and read public statistics for those videos;
• LinkedIn — to publish approved posts to the account you connected;
• Resend — to deliver the email campaigns you configure;
• Google Vertex AI — to generate the images and video for your campaigns;
• Google Analytics — to count page views and product use, only as described in Analytics cookies below.

We do not sell your data to anyone.

7. Data retention

We retain your organization’s data for as long as your account is active. When you disconnect a channel, the stored access token for that channel is revoked and deleted. When you request deletion of your data, or close your account, we delete your organization’s data as described on our Data Deletion page.

8. Your rights and choices

• Disconnect a channel at any time from Settings → Connections. Disconnecting revokes and deletes the stored access token for that channel.
• Request deletionof your organization’s data at any time — see the Data Deletion page for instructions.

9. Government and law enforcement requests

We may receive requests from courts, regulators, law enforcement or other public authorities for personal data we hold. We treat every such request under the following process.

• We review legality. Every request is reviewed before any data is disclosed, to confirm it comes from an authority with jurisdiction over us, is issued under a valid legal basis, and is served through proper legal process. We do not disclose personal data on an informal or voluntary request.
• We challenge requests we consider unlawful. Where a request is overbroad, lacks a valid legal basis, or conflicts with the law of another jurisdiction that applies to us, we will object, seek to narrow it, or challenge it through the available legal channels before responding.
• We disclose the minimum necessary. Where we must comply, we disclose only the specific data the request actually compels, for the individuals actually named. We do not hand over an entire account, organization or dataset when a narrower response satisfies the request.
• We document everything. We record each request, who made it, its legal basis, the reasoning applied, who decided, what we disclosed, and when.
• We tell you. We notify the affected customer before disclosing their data unless we are legally prohibited from doing so, in which case we notify them as soon as that prohibition lapses.

10. Contact

The data controller responsible for personal data processed through HiveMind — including data received from connected platforms such as Meta, Google and LinkedIn — is Veehive Tech FZ-LLC, United Arab Emirates.

For any privacy question or request, contact us at privacy@veehive.ai.