How Hive Due collects, uses, and protects your data.
Last updated:
1. Scope and responsibilities
This policy explains personal-data processing for the Hive Due websites and applications, including the Site Hesap Turkish service, provided by Buhane Bilgi Teknolojileri. It applies to visitors, community administrators, residents and other authorized users.
Community management generally controls the resident, unit, debt, payment, document and announcement data it enters. We process those records to provide the service under the community’s instructions. We also determine the purposes of limited processing for our own account security, support, service administration and legal obligations.
2. Personal data we process
Depending on the features you use, we process:
Account and contact information, such as name, email, telephone number, role and account preferences.
Community and unit information, resident assignments, announcements and messages entered by authorized users.
Financial records, including debts, payments, advances, bank-movement descriptions and receipts uploaded or imported by the community.
Documents, support requests and related correspondence.
Technical and security information, such as IP addresses, browser or device information, session, error, access and audit records.
3. Why we use personal data
We use data to provide accounts and access controls, operate community-management features, deliver notifications and support, investigate errors and abuse, protect data integrity and meet legal obligations.
Processing depends on its purpose and applicable law: this may include performance of our service agreement, legal obligations, legitimate interests in operating and securing the service, or consent where required. Community management is responsible for the lawful basis for the records it supplies. Optional website analytics requires your consent.
4. Access and service providers
Users can access community records according to the permissions assigned to them. Staff access is limited to what is needed for service operation, security or support.
We use providers for hosting, authentication, email, notifications, storage and other infrastructure. Connected services receive the data needed for the features you enable. We may disclose information when legally required by a competent authority. Providers may process data outside your country; the applicable data-protection requirements and safeguards depend on the processing and the parties’ roles.
5. Paddle subscription payments
Paddle processes payments for web software subscriptions. Checkout sends your billing details directly to Paddle; the application retains provider references, subscription status and billing history to manage access and support. Community and checkout references are included to associate payment confirmation with the correct subscription. Card details are entered in Paddle checkout and are not stored in this application.
Paddle acts as Merchant of Record for purchases through its checkout and processes payment and billing data under its own privacy policy. Billing information can include contact details, billing address and tax information required for the purchase. Contact Paddle directly for its payment records; contact us for the subscription records we hold.
6. Security, retention and deletion
We use measures such as role-based access, session controls, audit records, software updates and infrastructure monitoring. No internet service can guarantee absolute security. Do not share your password, and report suspected unauthorized access promptly.
Data is retained as needed for the service relationship, the community’s processing instructions, legal retention duties, dispute resolution and security. When service ends, export, deletion or anonymization requests are assessed against those requirements and backup processes. Ending a subscription does not itself immediately delete community or legally required billing records.
7. Cookies and analytics
We use essential technologies for session management and security. On the website, Google Analytics measures visits only after you accept analytics; its tag is not loaded before consent. Declining does not prevent you from using the site. Change your choice through Cookie preferences in the footer. Your choice is remembered separately for each domain in this browser and requested again on your next visit after 180 days.
If you accept website analytics, Google Analytics receives visit and interaction information to help us understand site use. Withdrawing consent stops future analytics collection by the website; it does not automatically erase data already processed. Contact support about a related data request.
8. Your privacy rights
Depending on the law applicable to you, you may have rights to information about processing, access, correction, erasure, restriction, objection, portability and withdrawal of consent. Where applicable, you may complain to a data-protection authority. These rights are subject to the conditions and exceptions of the applicable law; withdrawing consent does not undo lawful processing already performed.
For personal data entered by your community, contact community management first. For processing we control, contact [email protected] or [email protected]. Explain your request and provide enough information to identify the relevant account. We may need to verify your identity securely. Do not include passwords or full payment-card details.
This policy may change as the service, legal requirements or security practices change. The revision date appears above. Material changes will be communicated on this page or through an appropriate in-app channel.
We use Google Analytics to understand which pages are useful. It activates only if you accept. You can change your choice using Cookie preferences in the footer.