Legal

Privacy Policy

How Hven collects, uses, and protects your data.

Last updated: April 2026

1. Introduction

Hven (“we”, “us”, or “our”) is operated by Graham Chukwuma. This policy explains what data we collect, how we use it, and the rights you have over it. It applies to visitors to websites that use Hven, to Hven account holders, and to merchants who install the Hven app on Shopify.

For any privacy enquiry, email privacy@hven.io.

2. What data we collect

From website visitors (when the Hven tracking script is installed on a site):

IP address (used for company identification and coarse geolocation)
Page view data — URL visited, timestamp, and time spent on the page
Chat messages entered into the Hven AI chat bot
Contact details submitted through the bot (name, email, phone) — only when voluntarily provided by the visitor

From Hven account holders (when you create a Hven account):

Name, email address, and company name
Password (stored only as a bcrypt hash — never in plain text)
Plan selection and subscription status

From Shopify merchants (when you install the Hven app):

Shop domain (e.g. your-store.myshopify.com)
Theme access credentials required to install the tracking snippet

3. How we use it

To identify company visitors arriving from corporate networks
To power the AI chat bot’s responses on your behalf
To build lead profiles in your Hven pipeline
To provide market intelligence data relevant to your audience
To send account, transactional, and notification emails
To operate, secure, and improve the Hven service

4. Data storage & security

Data is hosted on Railway infrastructure in the EU and US regions.
Our primary database is MongoDB, encrypted at rest.
Visitor event data is retained for 12 months, after which it is purged.
Account data is retained for as long as your account remains active, plus a short recovery window after deletion.
Third-party access tokens (such as Shopify access tokens) are encrypted in storage and never logged.

All data is transmitted over TLS. Tenant data is logically isolated at the database level so one customer’s data is never visible to another.

5. Shopify specific

When you install Hven on your Shopify store, we request only the scopes needed to operate the tracker:

read_themes and write_themes — solely to install the tracking snippet into your live theme.

We do not access orders, customers, products, discounts, payments, or any other store data. Our use of theme access is limited to inserting and maintaining the Hven tracker tag. Uninstalling the Hven app from your Shopify admin immediately revokes our access and disables the tracker on your store.

6. GDPR rights (for EU and UK visitors)

If you are located in the European Economic Area or the United Kingdom, you have the following rights over your personal data:

Right of access — you can request a copy of the data we hold about you.
Right to erasure — you can ask us to delete your data by emailing privacy@hven.io.
Right to data portability — you can request your data in a machine-readable format.
Right to object — you can object to processing based on legitimate interests.
Right to lodge a complaint — you can complain to the UK Information Commissioner’s Office (ICO), or your local EU data protection authority.

We will respond to any rights request within 30 days.

7. Cookies

The Hven tracking script does not use cookies to identify visitors. Visitor identification is performed via IP address lookup.
Your Hven account session uses a JSON Web Token (JWT) stored in your browser’s localStorage, not in a cookie.

For the full cookie breakdown, see our Cookie Policy.

8. Third parties

We use the following sub-processors to deliver the Hven service. Each handles data under its own privacy policy and, where applicable, a data processing agreement:

Resend — transactional email delivery
Apollo.io — company data enrichment
SerpAPI — market intelligence data
Railway — hosting and infrastructure
Cloudinary — logo and image storage
Anthropic (Claude) — AI chat bot response generation

We do not sell your data, and we do not use it for advertising.

9. Contact

Data controller: Hven (Graham Chukwuma)
Email: privacy@hven.io
Address: United Kingdom

10. Updates to this policy

Last updated: April 2026. We may update this policy from time to time. When we make material changes, we will notify active account holders by email and update the date above.