Hyvo Security

1. 1.1Hyvo operates its own physical servers and GPUs. All customer data is stored and processed on this Hyvo-owned hardware.
2. 1.2Hyvo AI runs on our own GPUs, so your content is not sent to third-party AI model providers.
3. 1.3The Hyvo team secures and manages the entire system end to end, from data storage to AI processing.

1. 2.1All data in transit is encrypted with TLS (HTTPS).
2. 2.2Data at rest, including social account access tokens, is encrypted.
3. 2.3Passwords are stored only as salted hashes.
4. 2.4Regular encrypted backups protect against data loss.

1. 3.1Physical and administrative access to our servers is restricted to authorized Hyvo team members, and all access is logged.
2. 3.2Each workspace is isolated, so content from one client cannot be viewed or published from another.
3. 3.3Roles and approval workflows control who can draft, approve and publish.

1. 4.1Social accounts are connected only through Hyvo's verified integration partners, using each platform's official authorization.
2. 4.2Hyvo never asks for or stores your social media passwords.
3. 4.3We request only the permissions needed to publish, reply and read analytics.
4. 4.4You can revoke access at any time, from Hyvo or from the platform itself.

1. 5.1Manual mode (default): a person must review and approve AI-written posts and replies before they go live.
2. 5.2Auto mode (optional): Hyvo AI publishes and replies only within the rules you set, and you can switch it off at any time.
3. 5.3Every automation run is logged, showing which step ran and why it stopped.

1. 6.1Payments are handled by a PCI DSS-compliant payment processor. Hyvo never stores full card numbers.

1. 7.1Our systems are monitored for errors and suspicious activity.
2. 7.2If a security incident affects your personal data, we notify you without undue delay.
3. 7.3For personal data from the EU, EEA and UK, we notify the relevant supervisory authority within 72 hours where the law requires.

Security is shared between Hyvo and you. To keep your account secure, you should:

• use a strong, unique password and keep your login credentials confidential;
• give roles and workspace access only to people who need them, and remove access promptly when someone leaves your team;
• review the rules you set for Auto mode and automations;
• tell us immediately at support@gethyvo.com if you suspect unauthorized access to your account.

1. 9.1Email legal@gethyvo.com with the subject "Security Report" and the steps to reproduce the issue.
2. 9.2Give us reasonable time to investigate and fix the issue before any public disclosure.
3. 9.3Do not access other users' data, disrupt the Service or run automated attacks while testing.
4. 9.4Hyvo will not take legal action against good-faith research that follows these rules.

1. 10.1No system is completely secure, and Hyvo cannot guarantee that unauthorized access, loss or disclosure will never occur. Our legal obligations are set out in our Terms of Service and Privacy Policy.

Hyvo Inc., 127 N Higgins Ave, Ste 307D #3155, Missoula, MT 59802, USA