Privacy Policy

This Privacy Policy explains how [REGISTERED ENTITY NAME — OPC](“GHive”, “we”) collects, uses, shares and protects personal data when you use the Platform. It is designed to meet India’s Digital Personal Data Protection Act, 2023 (DPDP) and, for users in the EU/EEA/UK, the GDPR.

1. Who is the data controller

GHive is the controller for personal data processed about account holders. For data inside a Renter’s workloads/containers, the Renter is the controller and GHive/Hosts act as processors or merely provide infrastructure; enterprise customers can sign a DPA.

2. What we collect

• Account data: name, email, password (hashed), role (renter/host).
• Payment data: we use Razorpay as our payment processor. Card/UPI/bank details are handled by Razorpay — GHive stores only transaction records (amount, status, order/payment IDs), not full card numbers.
• Technical data: IP address, device/browser information, cookies/session tokens.
• Usage & logs: rentals, instances, metering samples, wallet transactions, and security/audit events.
• Host telemetry: for Hosts, machine identifiers and hardware specs (GPU model, VRAM, utilisation, temperature) reported by the host software.

We do notintentionally access the contents of a Renter’s compute workloads. Renter sessions to Host machines are end-to-end encrypted (SSH); our relay transports encrypted traffic it cannot read.

3. Why we use it (purposes & legal bases)

• To provide the marketplace, run rentals, meter usage and process payments — performance of a contract.
• To prevent fraud, abuse and illegal use, and to secure the Platform — legitimate interests / legal obligation.
• To comply with tax, accounting and legal obligations — legal obligation.
• To communicate service and support messages — contract / legitimate interests.
• Marketing emails, if any, only with consent (where required), with opt-out.

4. Who we share it with

• Payment processor — Razorpay, to take payments and (for Hosts) make payouts.
• Infrastructure — our cloud hosting provider (e.g. AWS) for the control plane and database.
• Hosts — receive only what is needed to run a rental (e.g. the Renter’s SSH public key and the instance request). Hosts do not receive your payment details.
• Authorities — where required by law, or to investigate fraud, abuse or safety.
• We do not sell personal data.

5. International transfers

Data may be processed in India and other countries where our providers operate. Where we transfer EU/UK personal data internationally, we rely on appropriate safeguards (e.g. Standard Contractual Clauses).

6. Retention

We keep personal data for as long as your account is active and as needed to provide the service, then for the period required by law (e.g. tax/accounting records are typically retained for several years). Security/audit logs are retained for a limited period for fraud prevention.

7. Security

We use measures including hashed passwords, encrypted sessions (HTTPS), httpOnly cookies, rate limiting, per-agent token authentication, access controls and audit logging. No system is perfectly secure; you also play a part by keeping credentials and keys safe.

8. Your rights

Subject to applicable law (DPDP/GDPR), you may request to access, correct, update, or delete your personal data, object to or restrict certain processing, withdraw consent, and (GDPR) data portability. To exercise these, contact support@ghive.co.in. You may also lodge a complaint with your data protection authority.

9. Cookies

We use strictly necessary cookies for authentication and security (e.g. your session). We do not use them to track you across other sites. Any future analytics cookies will be subject to consent where required.

10. Children

The Platform is not directed to children under 18, and we do not knowingly collect their data.

11. Grievances & contact

Privacy queries: support@ghive.co.in. Grievance Officer (India, as required under DPDP/IT Rules): Chandrashekar Shetty, support@ghive.co.in, Bengaluru 560098, Karnataka, India. We aim to acknowledge grievances promptly and resolve them within the statutory timeframe.

12. Changes

We may update this Policy; material changes will be notified in-product or by email.