01Who we are
BI Bee is an analytics product operated by HYVE Labs ("HYVE", "we"). It turns files and connected data sources into governed dashboards, reports and alerts inside a private customer workspace. This policy describes what we process when you use BI Bee at bi-bee.vercel.app.
02Data we process
- Account data — your name, work email, and a salted scrypt hash of your password. We never store your plain-text password.
- Workspace content — the datasets you upload or connect (CSV rows, connector imports), the dashboards, metrics, alerts, reports and comments you create. This content belongs to your workspace and is processed only to provide the product.
- Connector credentials — OAuth tokens and API credentials you authorize are encrypted with AES-256-GCM before storage, are never returned to the browser, and are destroyed when you disconnect a source.
- Usage and audit records — sign-ins, source changes, syncs, dashboard revisions and report actions produce workspace-scoped audit events, retained as your security evidence. Session records store a hash of the session token, a hashed network identifier, and browser user-agent.
- Booking data — if you book a discovery call: name, email, company, and goals you provide.
- Billing data — payments are processed by Stripe. We store subscription state and plan, not card numbers.
03How we use data
We process workspace content solely to provide BI Bee to your workspace: ingestion, profiling, dashboard generation, alerting, reporting and security auditing. We do not sell your data and we do not use your workspace content to advertise to you or to train models for other customers.
04Analyst and AI disclosure
BI Bee can use an external AI model, provided by Google (Gemini API) or Groq as set up for the service, for two features: the dashboard analyst, which answers questions and edits dashboards, and the dashboard planner, which designs a dashboard when data is uploaded or synced. The external AI model is on by default for new workspaces. A workspace owner or admin can switch it off in workspace settings; both features then run on BI Bee servers only, and no workspace data is sent to an AI provider.
When it is on, the analyst sends field names, labels and types, counts of distinct and blank values, date ranges, calculated-metric formulas, the dashboard layout, your question and up to six earlier messages from the same conversation, then the totals, averages, counts and lists of category values it asks BI Bee to compute. The planner sends the dataset name, row count and date range, field names and types, counts of distinct and blank values, the lowest and highest value of number and date fields, up to eight of the most common values of category fields, how often a detected status such as "Late" occurs, and the names of fields detected as personal. It may then send findings that BI Bee wrote from fields that are not restricted, to be reworded.
Raw rows are never sent. Fields your workspace marks as PII or confidential are sent by name and type only, never their values, and fields excluded from analysis are not sent. A question that quotes a value of such a field is answered on BI Bee servers. Every AI-proposed change is validated server-side against your governed fields before it is applied, and remains versioned and reversible.
The assistant on our website sends the message you type to the same AI providers to write its answer. It has no access to workspace data.
05Connected providers and Google Limited Use
When you connect Google Analytics, Shopify or Meta Ads, BI Bee imports only the reporting data described on the connection screen, over the date window you choose. BI Bee's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Disconnecting a source destroys its stored credential. Uninstalling the Shopify app revokes access immediately, and Shopify redaction requests remove the related datasets and dashboards.
06Storage and security
Workspace data is stored in PostgreSQL under a tenant-scoped schema; every query for protected resources is filtered by the authenticated workspace. Sessions are opaque HTTP-only cookies whose tokens are stored only as hashes. Transport is HTTPS with HSTS. A live description of implemented controls is available on our security page, and workspace owners can export trust evidence from inside the product.
07Subprocessors
We rely on the following infrastructure providers to operate BI Bee: Vercel (application hosting), Supabase (managed PostgreSQL), Stripe (payments), Resend (transactional email), Sentry (error reports: what failed and where in our code, with user details, request contents, cookies, email addresses and web-address parameters removed before sending), Google (Gemini API) and Groq (AI models, as described in section 4), and — only when you connect them — Google, Shopify and Meta APIs. Each processes data to provide their service to us; Stripe also keeps payment records under its own legal obligations.
08Retention and deletion
Workspace content is retained while your workspace is active. You can delete individual sources (which destroys their credentials), and workspace owners can delete the entire workspace from the workspace settings page, which permanently removes its sources, datasets, dashboards, reports, alerts, members and audit history. You can also delete your user account: workspaces where you are the only member are deleted with it, and ownership of a workspace that still has other members must first be transferred to one of its admins. When a paid workspace is deleted, its subscription ends as described in our terms; once it has ended, the saved card and billing profile are deleted at Stripe. Invoices and payment records are kept as tax law requires, and Stripe keeps some data under its own legal obligations. A billing profile with an unpaid invoice is kept until the invoice is settled.
09Your rights
You can access and export your data from inside the product, correct your account details, and delete your workspace or account as described above. For any other request — including questions about this policy or data-protection rights that apply in your jurisdiction — contact contact@hyvelabs.tech and we will respond promptly.
10Changes
If we make material changes to this policy we will update this page and the date above. Continued use of BI Bee after a change constitutes acceptance of the updated policy.