Back
The HYVE

Datenschutzerklärung / Privacy Policy

Last updated: April 2026

1. Verantwortliche Stelle / Data Controller

Stefan Mohaupt Unipessoal Lda (Mohaupt Bringts)
NIF: PT519159195
E-Mail: hello@mohaupt-bringts.com

2. Welche Daten werden erhoben / Data We Collect

  • Account data: Name, email address, HYVE role (provided during invitation)
  • Authentication data: Login timestamps, session tokens (HTTP-only cookies)
  • Activity data: Timestamps of Git pushes, broadcast reads, and dashboard interactions
  • Audit data: IP addresses for security logging (automatically deleted after 90 days)

3. Rechtsgrundlage / Legal Basis

  • Contract fulfillment (Art. 6 para. 1b GDPR): Account data and activity data are necessary to provide HYVE services.
  • Legitimate interest (Art. 6 para. 1f GDPR): Security logging and audit trails to protect the platform.

4. Datenspeicherung / Data Storage

All data is stored in the European Union (Frankfurt, Germany) using Supabase (PostgreSQL) and Vercel hosting. Data is encrypted in transit (TLS 1.3) and at rest (AES-256).

5. Datenweitergabe / Data Sharing

We do not sell or share personal data with third parties. Data processors:

  • Supabase Inc. — Database hosting (DPA in place)
  • Vercel Inc. — Application hosting (DPA in place)
  • Google Workspace — Email delivery (standard data processing)

6. Ihre Rechte / Your Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request deletion of your data
  • Restrict processing
  • Data portability
  • Object to processing

Contact: hello@mohaupt-bringts.com

7. Cookies

HYVE uses only essential cookies for authentication (HTTP-only session cookies via Supabase Auth). We do not use tracking cookies, analytics cookies, or third-party cookies. No cookie consent banner is required.

8. Aufbewahrungsfristen / Data Retention

  • Account data: retained while account is active
  • Audit log IP addresses: automatically deleted after 90 days
  • Deactivated accounts: data retained for 30 days, then permanently deleted upon request