Privacy policy

Hive is run by AI CoLab, a cross-sector alliance of government, non-profit, industry and academic organisations in Australia. Questions, requests and complaints about privacy go to admin@aicolab.org.

When you sign in

• If you sign in with Google or Microsoft, we receive your name, email address and profile picture from them, as permitted by your settings with that provider. We never receive or store your password for that service.
• If you sign in with an emailed code, the code is stored only as a hash and expires in ten minutes. We never hold a password: Hive has none.
• A display name. We assign one; you may change it at any time.

When you use a hive

• The files and documents you upload or write, and their names.
• An activity log for the hive: who joined, left or changed role, and who added or changed what, with times.
• Pins, recently opened items and similar settings that make the hive yours.

Automatically

• Your IP address, browser type and approximate location, recorded with sign-in sessions and in our hosting provider's request logs for security and operations.
• One first-party cookie that keeps you signed in. No advertising or analytics cookies.

• To sign you in and keep your account secure.
• To run each hive: show its members what is in it and who is in it.
• To send sign-in codes and invitations by email.
• To keep the service working and to investigate problems and misuse.

We do not use personal information for advertising, and we do not sell it.

Other members of a hive you belong to see your display name, your avatar and the content you put in that hive. They never see your email address: Hive does not show one member's email to another, not even to the hive's owners or admins. Your display name is the one you choose to keep; it does not have to be your real name.

We work with third-party service providers to provide hosting, storage, backup and email delivery. These providers access personal information only to perform those services on our behalf and under our instruction. Beyond that, we disclose personal information only where the law requires it.

Our service providers store and process data in data centres around the world, which means your information may be held outside Australia.

• Every connection is encrypted in transit (TLS 1.3, HTTPS only).
• Stored data is encrypted at rest by our hosting provider.
• Access to a hive is controlled by role (owner, admin, member, viewer), checked on every request.
• The sign-in cookie is marked secure and cannot be read by page scripts.

If a breach of security affects your personal information, we will tell you and, where the law requires, the Office of the Australian Information Commissioner.

Your account and the content you put in hives stay while you use Hive. If you leave or ask us to remove your account, we delete your personal information within a month, except where we must keep a record by law. Content you added to a hive that other members still rely on may remain in that hive, attributed to your display name.

You may ask to see the personal information we hold about you, to correct it, or to have it deleted. Write to admin@aicolab.org. We answer within 30 days.

If you are not satisfied with our answer, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.

When this policy changes, the date at the top changes with it. Material changes are announced to members by email or in Hive.