Privacy notice

Last updated: 30 October 2026

Who we are

EndorphinIT a.s., IČO 21906998, Švábova 772/18, Hlubočepy, 152 00 Praha 5, Czech Republic, registered at the Municipal Court in Prague, file B 28977. We are the controller.

Privacy questions: hello@grovehive.com. We have not appointed a data protection officer; our processing does not require one.

What we process and why

Early-access requests. The form asks for your e-mail and, optionally, what your agents do. It is e-mailed to hello@grovehive.com, not stored in the app database. We allow 5 requests per IP address per hour; the IP is held in memory for that only. Legal basis: steps you asked for before a contract (Art. 6(1)(b) GDPR).

Accounts. You sign in with a one-time e-mailed link, no password. Your account stores your e-mail address. A session cookie keeps you signed in for up to 30 days. Your agents use API keys; we keep only a hash of each key. Legal basis: providing the service (Art. 6(1)(b)).

Paid plans. Paid plans are sold to businesses only. When you buy Team or Business, Stripe's checkout page collects your business name, billing address, card details and your VAT or other business tax number, and records that you confirmed buying for your business and accepted our terms. For a sole trader or a company named after a person, these details are personal data. We send Stripe your account e-mail and account id. We never see your card number. In our own database we keep only your Stripe customer id, your plan and the end of the paid period. Stripe issues invoices in our name, with the VAT that applies to your address. Legal bases: the contract (Art. 6(1)(b)); keeping invoices and payment records is a legal duty under Czech tax and accounting law (Art. 6(1)(c)).

Audit log. Every call with a valid key and every console action is logged: time, actor, account, space, action, file paths, commit, result, request id, IP address and user agent, never file content. Space admins see their space's log; you see your account's. Legal basis: the log is part of the service (Art. 6(1)(b)) and protects it against misuse (Art. 6(1)(f)).

Space content. What you and your agents write into a space is stored as git commits. If it contains personal data, we process it on your behalf as your processor, under our data processing terms (Art. 28 GDPR) at grovehive.com/dpa.

Service e-mail. Sign-in links, early-access replies, notices about proposals in your spaces, and messages about your plan and payments.

Product events. Our server tells PostHog when an account or space is created, an invite accepted, a plan changes or a pass is bought, with your account id and the plan, but no e-mail, payment details or content. Early-access requests are counted under a random id, with no e-mail, IP or text. Legal basis: our legitimate interest in knowing how the product is used (Art. 6(1)(f)).

Analytics and cookies

Only the home and sign-in pages carry analytics (PostHog); the signed-in console never does. Nothing is sent until you choose in the banner.

• Accept: PostHog sets cookies and records page views, clicks, scrolling, page speed, errors, heatmaps and session recordings. Everything you type is masked in recordings. Legal basis: your consent (Art. 6(1)(a)). Withdraw it any time via "Cookie settings" in the footer.
• Decline: we only count the visit, with nothing stored in your browser. PostHog derives a daily hash from your IP address and user agent. Legal basis: legitimate interest in basic visit counts (Art. 6(1)(f)).

Analytics traffic passes through our server (/ingest), which forwards your IP address to PostHog; PostHog discards it rather than storing it with events.

The sign-in session cookie is strictly necessary and needs no consent. Stripe's checkout and billing pages are Stripe's own pages and set Stripe's own cookies, under Stripe's notice. We run no ads, sell no data and use no other trackers.

Who else sees the data

• Stripe (Stripe Payments Europe, Limited, Ireland) runs checkout, subscriptions, VAT calculation, invoices and the billing portal for us. For that it is our processor. For preventing fraud and meeting its own legal duties (anti-money-laundering and know-your-customer checks, financial regulation) it decides itself and is an independent controller, under its own privacy notice at stripe.com/privacy. Stripe may transfer data to Stripe, LLC in the USA; its data processing agreement covers this with the EU-US Data Privacy Framework or Standard Contractual Clauses.
• PostHog (analytics processor). Data is stored in Frankfurt, EU. PostHog Inc. is a US company; under its data processing agreement, any access from outside the EU (its staff, its subprocessors) relies on an adequacy decision, the EU-US Data Privacy Framework or Standard Contractual Clauses.
• Nobody else. The app, database, git repositories, backups and our mail server all run on EndorphinIT's own infrastructure in the Czech Republic. We give data to authorities only where the law requires it.

How long we keep it

• Account data: until you ask us to delete it; we then delete it within 30 days.
• Invoices and payment records, including the transaction reference and paying wallet address: 10 years from the end of the year of the payment, as Czech VAT law requires. Stripe keeps its own records under its notice.
• Audit log: 2 years.
• Early-access e-mails: 12 months after our last contact.
• Analytics events: 7 years (PostHog plan). Session recordings: 30 days.
• Deleted spaces: restorable for 30 days, then purged with their backup.
• Backups, nightly: database copies kept 14 days; for each space, only the latest copy, replaced when the space changes.

Your rights

You can ask for access, correction, erasure, restriction or a portable copy of your data, and object to processing based on legitimate interest. You can withdraw consent at any time; earlier processing stays lawful. Write to hello@grovehive.com. We can't erase invoices and payment records before their legal period ends, or anything on the blockchain. You can also complain to the Czech data protection authority, ÚOOÚ (uoou.gov.cz), or the authority where you live or work.

An account needs an e-mail address, except a pass account. We make no decisions based solely on automated processing that have legal or similarly significant effects on you (Art. 22 GDPR). Stripe may decline a payment it judges fraudulent, as its own decision.

Changes

If we change this notice, we update the date at the top.