Hyvo Privacy Policy

1. 1.1Hyvo Inc., a corporation registered in the State of Montana, USA, is the controller of the personal information we process for your account, billing and use of our website.
2. 1.2Registered address: 127 N Higgins Ave, Ste 307D #3155, Missoula, MT 59802, USA.
3. 1.3For content inside your workspace, such as posts and the comments and messages from your audience, Hyvo acts as a processor on your behalf and you remain the controller. A Data Processing Agreement is available on request from legal@gethyvo.com.

• Account information: name, email address, password (stored only as a salted hash), company, role and time zone.
• Billing information: plan, billing address, VAT ID and payment history. Card details are collected and processed by our payment processor; Hyvo does not store full card numbers.
• Connected account data: profile name, handle, account ID, avatar, access tokens, posts, engagement metrics, comments and messages from the social accounts you connect.
• Content: drafts, media, design imports, prompts, AI output, automation settings and approvals.
• Usage and device data: IP address, browser, device type, pages visited, actions taken and error logs.
• Cookie data: information collected through cookies and similar technologies, as described in our Cookie Preferences policy.
• Communications: support requests, demo bookings and any other messages you send us.

1. 3.1We do not use personal information for purposes incompatible with those listed above without first informing you and, where required, obtaining your consent.

1. 4.1Hyvo AI runs on servers and GPUs owned and operated by Hyvo. Your content is not sent to third-party AI model providers.
2. 4.2Brand Memory learns from your posts for your workspace only. Your content is never used to train AI models for other customers.
3. 4.3In Manual mode, a person reviews AI output before it is published or sent. In Auto mode, Hyvo AI acts only within the rules you set.
4. 4.4Hyvo does not make decisions based solely on automated processing that produce legal or similarly significant effects on you.

We share personal information only with the following recipients, and only as needed for the purposes described in this Policy:

• Verified integration partners, which connect your social accounts to Hyvo using each platform's official authorization.
• Our payment processor, to process subscription payments securely.
• Service providers, such as email delivery, website hosting, website analytics and demo scheduling, which are bound by confidentiality and data protection terms and act only on our instructions.
• Social platforms, when you publish content or connect an account.
• Your team members, whom you invite to your workspaces.
• Authorities, where required by law or necessary to protect rights, property or safety.
• A successor, in the event of a merger, acquisition or sale of assets, subject to this Policy.

Hyvo does not sell personal information and does not share it for cross-context behavioral advertising without your consent.

1. 6.1Customer data is stored and processed on servers and GPUs owned and operated by Hyvo, and managed only by authorized members of the Hyvo team.
2. 6.2Your information may be processed outside the EU, EEA and UK, including in the United States. These transfers are protected by the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or another lawful transfer mechanism.

1. 7.1Account and workspace data is kept for as long as your account is active.
2. 7.2When you delete your account, your data is deleted within 30 days, and from backups within 90 days.
3. 7.3Billing records are kept for as long as tax and accounting laws require.
4. 7.4Disconnecting a social account deletes its access tokens immediately.

1. 8.1We protect personal information with the technical and organizational measures described in our Security policy.
2. 8.2No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee its absolute security.

Residents of the EU, EEA and UK have the right to:

• access, correct or delete their personal information;
• receive their information in a portable format;
• restrict or object to processing, including for direct marketing;
• withdraw consent at any time, without affecting processing carried out before withdrawal;
• lodge a complaint with their local data protection authority.

Residents of the United States, including California, Colorado, Connecticut, Virginia, Texas, Oregon and other states with privacy laws, have the right to:

• know what personal information we collect and how we use it;
• access, correct or delete it;
• opt out of sale, sharing or targeted advertising (we honor Global Privacy Control signals);
• appeal if we decline a request;
• exercise these rights without discrimination.

How to make a request: email legal@gethyvo.com. We verify your identity before acting on a request and respond within one month (EU, EEA and UK) or 45 days (US). You may also make a request through an authorized agent.

1. 10.1The Service is not intended for anyone under 18. We do not knowingly collect personal information from children, and we delete any such information we discover.

1. 11.1The Service connects to third-party platforms and may link to third-party websites. Their collection and use of information is governed by their own privacy policies, not this Policy.

1. 12.1We may update this Policy from time to time. We post updates on this page and notify you of material changes by email or in the app before they take effect.

Hyvo Inc., 127 N Higgins Ave, Ste 307D #3155, Missoula, MT 59802, USA