Privacy Policy

Your privacy is important to us. Learn how we collect, use, and protect your data.

Last updated: October 5, 2026

Compliance:
SOC 2 Type II
ISO 27001
GDPR
UAE PDPL
CCPA

1. Introduction

Veehive.ai ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Hive Studio platform and related services.

Name change: Hive Studio was previously called Veehive Studio. Only the name changed — the service, the company operating it (Veehive.ai) and the way your data is handled are otherwise unaffected.

We are headquartered in the United Arab Emirates and operate globally. This policy is designed to comply with applicable data protection laws, including:

UAE Regulations

  • UAE Federal Decree-Law No. 45 of 2021 (PDPL)
  • DIFC Data Protection Law 2020
  • ADGM Data Protection Regulations 2021

International Standards

  • GDPR (European Union)
  • CCPA (California, USA)
  • ISO 27001 & SOC 2 Type II

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, password, profile picture
  • Payment Information: Billing address, payment method details (processed by secure third-party providers)
  • User Content: Documents you upload, scripts you create, and videos you generate
  • Communications: Support tickets, feedback, and correspondence with us

2.2 Information Collected Automatically

  • Device Information: IP address, browser type, operating system, device identifiers
  • Usage Data: Pages visited, features used, time spent, click patterns
  • Log Data: Access times, error logs, referral URLs
  • Cookies: Session cookies, preference cookies, analytics cookies

2.3 Information from Third Parties

  • Social login providers (if you sign in with Google, etc.)
  • Analytics and advertising partners
  • Payment processors for transaction verification

3. How We Use Your Information

We use the information we collect to:

Service Delivery

  • • Provide and maintain the Service
  • • Process your documents and generate videos
  • • Manage your account and subscriptions
  • • Process payments and send invoices

Improvement & Analytics

  • • Analyze usage patterns and trends
  • • Improve our AI models and features
  • • Debug issues and optimize performance
  • • Develop new products and services

Communication

  • • Send service notifications
  • • Respond to support requests
  • • Share product updates (with consent)
  • • Send marketing communications (opt-in)

Security & Compliance

  • • Detect and prevent fraud
  • • Enforce our Terms of Service
  • • Comply with legal obligations
  • • Protect users and the platform

4. Legal Basis for Processing

Under GDPR and UAE PDPL, we process your personal data based on the following legal grounds:

Legal BasisExamples
Contract PerformanceProcessing documents, generating videos, account management
ConsentMarketing emails, cookies, analytics
Legitimate InterestService improvement, fraud prevention, security
Legal ObligationTax records, regulatory compliance, law enforcement

5. Data Sharing & Disclosure

We do not sell your personal data. We may share your information with:

5.1 Service Providers

  • Cloud Infrastructure: Google Cloud Platform (data centers in multiple regions)
  • AI Services: Google Vertex AI for video and content generation
  • Payment Processing: Stripe for secure payment handling
  • Analytics: Privacy-focused analytics providers

5.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

6. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure adequate protection through:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Data Processing Agreements with all third-party processors
  • Adequacy decisions where applicable
  • UAE-specific protections as required by PDPL

Primary Data Centers: Our primary infrastructure is hosted in GCP regions including Europe (Belgium), Middle East (Doha), and North America, ensuring compliance with data residency requirements.

7. Data Retention

We retain your data for as long as necessary to provide the Service and fulfill the purposes described in this policy:

Data TypeRetention Period
Account InformationUntil account deletion + 30 days
User Content (Documents, Videos)Until deleted by user + 90 days backup
Payment Records7 years (legal requirement)
Log Data12 months
Analytics Data26 months (anonymized thereafter)

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access & Portability

Request a copy of your personal data in a portable format

Rectification

Correct inaccurate or incomplete personal data

Erasure ("Right to be Forgotten")

Request deletion of your personal data

Restriction

Limit how we process your personal data

Object

Object to processing based on legitimate interests

Withdraw Consent

Withdraw consent at any time where processing is based on consent

To exercise your rights: Email us at privacy@veehive.ai or use the privacy settings in your account dashboard. We will respond within 30 days.

9. Security Measures

We implement industry-leading security measures to protect your data:

🔐

Encryption

AES-256 at rest, TLS 1.3 in transit

🛡️

Access Control

Role-based access, MFA required

📊

Monitoring

24/7 security monitoring, audit logs

Certifications: Our security practices are validated through SOC 2 Type II audits and ISO 27001 certification. We conduct regular penetration testing and vulnerability assessments.

10. Cookies & Tracking

We use cookies and similar technologies to enhance your experience:

Cookie TypePurposeDuration
EssentialAuthentication, security, basic functionalitySession
FunctionalPreferences, language settings1 year
AnalyticsUsage patterns, performance monitoring2 years

You can manage cookie preferences through your browser settings or our cookie consent banner.

11. Children's Privacy

Hive Studio is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected such information, please contact us immediately at privacy@veehive.ai.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the updated policy on this page
  • Updating the "Last updated" date
  • Sending an email notification for significant changes
  • Displaying an in-app notification

13. Contact Us

For privacy-related inquiries or to exercise your rights:

Data Protection Officer

Email: dpo@veehive.ai

Privacy Team

Email: privacy@veehive.ai

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated. In the UAE, contact the UAE Data Office.