Privacy Policy

Hiveship is an agent-first issue tracker and project-management tool. For data collected through your use of the product, the workspace you belong to is the data controller and Hiveship acts as a processor on its behalf. For data we collect directly (the website, the waitlist, billing, and account sign-up), Hiveship is the controller.

• Account data. Your name, email address, and authentication details. If you sign in with Google or GitHub, we receive your basic profile (name, email, avatar) from that provider.
• Workspace content. The issues, projects, comments, attachments, and other content you and your teammates create in the product. This is your data; we process it to provide the service.
• Agent & integration data. Bearer tokens, personal access tokens, and the activity AI coding agents stream while working on issues (sessions, status changes, linked pull requests).
• Billing data. Your plan, subscription status, and billing contact. Card payments are handled entirely by Stripe; we never see or store your full card number (PCI DSS SAQ A).
• Waitlist & attribution. Your email, the referring page, and any utm_source, utm_medium, and utm_campaign values in the URL when you join the waitlist.
• Usage analytics. Product analytics (via PostHog) about how the site and app are used. Non-essential website analytics are only collected if you accept analytics cookies. We also keep operational logs and error reports (via Sentry) to keep the service reliable and secure.

• To provide, maintain, and secure the Hiveship application and your workspace.
• To operate the waitlist and send you a one-time invite when access opens.
• To process billing and manage your subscription (via Stripe).
• To send service and account emails, plus occasional product updates (you can opt out).
• To detect, prevent, and investigate abuse, fraud, and security incidents.
• To measure which channels bring interest, so we can improve our messaging.

Data is encrypted in transit (TLS) and at rest, access is scoped and authenticated, and sensitive secrets (such as two-factor seeds) are encrypted with a dedicated key. Our full security posture (encryption, data residency, subprocessors, and vulnerability disclosure) is documented on our Security page.

Your data is hosted in the EU. We do not sell your data. We share it only with the service providers (subprocessors) that help us run Hiveship: hosting, infrastructure, payments, email, error-monitoring, and analytics. Each works under a contract that limits how it can use your data. The current list is published and kept up to date on our Security page.

We only set non-essential analytics cookies after you accept them in our cookie banner. You can reject them, and we will not load analytics. You can change your choice at any time via Cookie preferences.

We keep workspace and account data for as long as your account is active, and for a reasonable period afterward to meet legal, accounting, and security obligations. When you delete your account or a workspace is closed, we remove the associated content. Waitlist data is kept until launch and for a reasonable period afterward to send your invite. If you unsubscribe or ask us to delete your data, we remove it promptly.

• Access, correct, or delete the information we hold about you. For data inside a workspace, your workspace administrator can also action these requests.
• Export your data, and object to or restrict certain processing.
• Withdraw consent for analytics cookies at any time.
• Unsubscribe from marketing emails using the link in any message we send.

Hiveship is a tool for engineering teams and is not directed to anyone under 16. We do not knowingly collect data from children.

We may update this policy as the product evolves. When we make a material change, we will update the “Last updated” date above and, where appropriate, notify you.

Questions or requests? Email privacy@hiveship.app.