Privacy Policy
How khive cloud handles your data.
Effective: October 14, 2026
What we collect.
- Account data: your email address and identity-provider account identifier, used to sign you in and provision your tenant.
- Billing data: handled by Stripe. Card details never touch our systems; we store only the Stripe customer and subscription identifiers, the record of each credit purchase, and the details of your plan needed to operate it: the plan and billing period, its status, the date the current billing period ends, the trial end date and whether you have had a trial, and whether a cancellation is scheduled.
- Tenant content: the memories, entities, notes, and other data you store through the service. It lives in per-tenant isolated storage and is processed only to serve your requests.
- Operational data: request logs, usage counters, and error diagnostics needed to run, secure, and bill the service.
Website analytics. Our website measures its own traffic in two ways. Neither uses cookies or a third-party analytics service. First, it runs Umami, an open-source analytics tool that we host ourselves at analytics.khive.ai. For each page you view, Umami records the full page address, the page title, the address of the page that linked you there as your browser reports it, your browser, operating system, device type, screen size and language, and your approximate location (country, region and city). Umami works out the location from your IP address on our own server and does not store the address. It groups the pages you view into visits with an identifier computed from your IP address and browser details, and that identifier changes every month. Second, the website keeps daily totals of page loads for each of its pages, broken down by the domain of the site that linked to the page and by the campaign tags in the link (utm_source and utm_campaign). These totals hold no IP address, browser details, cookie, or time of day, and are not linked to any individual visitor. We delete Umami records after 12 months, and we keep the daily totals for as long as the website runs.
What we do not do. We do not sell your data. We do not use your tenant content to train models. We do not read your tenant content except when required to investigate an incident, abuse, or a support request you initiate, and then only to the minimum extent needed.
Service providers. We use a small set of subprocessors to run the service: Stripe (payments), Fly.io (application hosting), Vercel (website and dashboard hosting), Resend (transactional email), and your chosen identity provider for sign-in. Each receives only what its function requires.
Retention and deletion. Tenant content is retained while your account is active. When you close your account, or on a verified deletion request to contact@khive.ai, we delete your tenant content within 30 days, except records we must keep for legal, billing, or security reasons.
Security. Tenants are isolated from each other, API keys are stored hashed, signing keys are encrypted at rest, and access to production systems is restricted. No system is perfectly secure; if a breach affects your data we will notify you without undue delay.
Your rights. You can access and export your data through the service, correct account data, and request deletion. Depending on where you live you may have additional legal rights; write to contact@khive.ai and we will handle the request.
Changes. We will post updates here and notify you of material changes.