Legal

Privacy Policy

Published by Quotafy Consulting. HiVi Labs is a product brand operated by Quotafy Consulting.

Effective September 23, 2026 · Applies to https://hivi.ai and the HiVi platform

1. Who we are

HiVi Labs is a product brand operated by Quotafy Consulting. Quotafy Consulting is the legal entity behind HiVi Labs and provides the technology, software and services offered through the HiVi platform.

In this policy, “we”, “us” and “our” mean Quotafy Consulting. “HiVi”, “HiVi Labs” and “the platform” mean the products, software and services Quotafy Consulting provides under the HiVi brand, including the website at https://hivi.ai.

Quotafy Consulting is the data controller for the personal information described in this policy, except where we act as a processor on a customer's behalf — see section 4.

2. Scope

This policy covers personal information we handle when you visit our website, contact us, use one of our calculators or tools, create an account, or use the HiVi platform — including any advertising accounts you choose to connect to it. It does not cover the practices of third parties whose services you separately use, including Amazon.

3. Information we collect

3.1 Information you give us

Enquiry and lead information — name, email address, company, phone number, the product or service you are asking about, and anything you write in a message or chat.
Tool inputs — the figures you enter into our calculators and assessments, together with the results we generate for you.
Account information — the credentials and profile details you supply when an account is created for you, which may include name, email, phone, address and an avatar.
Engagement information — anything you share with us in the course of a project, including feedback and support correspondence.

3.2 Information collected automatically

Technical data — IP address, browser and device type, referring page, and the pages you view, recorded in server logs and alongside submitted forms.
Campaign attribution — UTM parameters and the page a form was submitted from, so we know which campaign an enquiry came through.
Analytics — aggregated usage measurement through Google Analytics, where it is enabled.
Anti-abuse — signals collected by Google reCAPTCHA to tell real submissions from automated ones.

3.3 Information from connected platforms

If you connect a third-party advertising or business account to the HiVi platform, we receive data from that platform under the authorization you grant. For Amazon Advertising this is covered in the next section and in our Amazon Advertising Integration overview.

4. Advertising platform data

Where you connect an advertising account, we access that platform's data on your instruction and on your behalf. For that data Quotafy Consulting acts as a processor and you remain the controller.

For the Amazon Advertising API specifically, we access account and profile identifiers, campaign structure, performance metrics, and the authorization tokens needed to refresh them. We use that data only to provide the reporting, measurement and campaign workflows you have asked for.

We do not sell, rent or license advertising data.
We do not combine one advertiser's data with another's, or publish it in benchmarks or aggregate products.
We do not use it to build audiences or profiles outside your own account, or to train machine-learning models.
We do not request or store Amazon shopper personal information.

You can revoke our access at any time from within the platform or directly with the provider. Full detail — including scopes, retention and deletion — is set out on the Amazon Advertising Integration page.

5. How we use information

To respond to enquiries, deliver requested reports, and arrange strategy sessions and demos.
To provide, operate, secure and support the HiVi platform and the services you have engaged us for.
To produce the dashboards, reports and measurement you have asked us to produce.
To administer accounts, authenticate users and manage permissions.
To improve our website and products in aggregate, and to understand which content is useful.
To send service communications, and marketing communications where you have opted in or where we are otherwise permitted to — you can opt out at any time.
To detect and prevent abuse, fraud and security incidents, and to meet legal obligations.

6. Legal bases

Where the GDPR or a comparable regime applies, we rely on: contract (to provide services you have requested); legitimate interests (to run, secure and improve our business, balanced against your rights); consent (for optional analytics and marketing, which you may withdraw at any time); and legal obligation (where we are required to retain or disclose information).

7. Cookies and similar technologies

We use a small number of cookies and equivalent technologies:

Strictly necessary — session and CSRF cookies that keep you signed in and protect form submissions. The site does not work without these.
Analytics — Google Analytics, where enabled, to measure aggregate usage.
Security — Google reCAPTCHA, to distinguish human from automated submissions.

You can block or delete cookies in your browser settings; blocking strictly necessary cookies will break parts of the site.

We do not sell your personal information. We share it only with:

Service providers acting on our documented instructions — hosting, infrastructure, email delivery, analytics and support tooling — bound by written agreements.
Your own team, and any agency or partner you have authorized to access your workspace.
Authorities, where we are legally required to disclose, and where necessary to establish, exercise or defend legal claims.
A successor entity, if Quotafy Consulting is involved in a merger, acquisition or asset sale — in which case this policy continues to apply until replaced, and you will be notified of any material change.

9. International transfers

We and our service providers may process information in countries other than your own. Where personal data is transferred out of a region that restricts such transfers, we rely on an appropriate safeguard — such as the European Commission's standard contractual clauses — and take the additional measures those safeguards require.

10. Retention

Enquiries and tool submissions — kept while there is an active or prospective relationship, and for up to 24 months after the last contact, unless you ask us to delete them sooner.
Account data — kept for the life of the account and deleted or anonymized after closure, subject to legal retention periods.
Connected advertising data — kept while the connection is active and for the reporting history agreed with you (up to 24 months of performance history). Deleted within 30 days of a deletion request or of the connection being removed.
Logs and security records — kept for a short rolling window for security and troubleshooting.

11. Security

We protect information with controls proportionate to its sensitivity:

TLS for all traffic; encryption at rest for stored data and credentials.
API tokens and secrets held in a dedicated secret store, never in source control or logs.
Role-based access control, least-privilege staff access, and per-customer data isolation.
Application and access logging, with alerting on anomalous activity and failed authentication.
A documented incident-response process. Where an incident affects your data, we notify you — and any regulator or platform we are required to notify — without undue delay.

To report a vulnerability, email security@hivi.ai. Please give us a reasonable opportunity to remediate before any public disclosure.

12. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your personal information, to receive a portable copy, and to withdraw consent. Where we act as a processor for a customer, we will refer your request to that customer and support them in answering it.

To exercise a right, email privacy@hivi.ai. We respond within the period the applicable law requires, and within 30 days where no other period applies. You also have the right to complain to your local data-protection authority.

13. Children

The HiVi platform is a business product and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

14. Changes to this policy

We may update this policy as the platform and the law change. The effective date at the top of the page always reflects the current version, and we will give notice of material changes through the platform or by email.

15. Contact us

This policy is published by Quotafy Consulting, the company that operates HiVi Labs.

Privacy and data requests: privacy@hivi.ai
Legal: legal@hivi.ai
Security: security@hivi.ai
General: hello@hivi.ai