Privacy Policy

1. Who we are

ShootHive (“ShootHive”, “we”, “us”, or “our”) is a production-management workspace for photo and video studios, operated by Viacheslav Yakobchuk (the “Operator”). You can reach the Operator by email at slava.yakobchuk@shoothive.net.

This Privacy Policy explains what personal data we collect when you visit www.shoothive.net or use the ShootHive application (together, the “Service”), why we collect it, how we use and share it, how long we retain it, and what rights you have.

2. Scope of this policy

This policy applies to personal data processed by ShootHive through the Service. It does not apply to third-party services you may connect to ShootHive (for example, Google), which are governed by their own privacy policies.

3. Data we collect

3.1 Information you provide directly

• Name and email address when you sign up or contact us.
• Workspace content you create — projects, shoots, contacts, releases, budgets, notes, files you upload.
• Messages you send to support.

3.2 Information from Google when you sign in or connect Google Drive

When you choose to sign in with Google or connect Google Drive, ShootHive receives the following from Google’s OAuth servers, with your consent:

• Your Google account email address.
• Your name as registered with Google.
• The URL of your Google profile picture.
• A unique Google account identifier (the OpenID sub claim).
• An OAuth access token and refresh token, used to call Google APIs on your behalf for the scopes you have authorized.

3.3 Files accessed via the Google Drive drive.file scope

ShootHive requests the https://www.googleapis.com/auth/drive.file scope. This is a per-file scope: it grants ShootHive access only to files that you explicitly select via Google’s file picker, or that ShootHive itself creates while you are using the app. ShootHive cannot read, list, or modify any other file in your Google Drive.

For files you select or that ShootHive creates, we may access:

• File metadata: name, MIME type, size, modified time, owner, thumbnail link.
• File contents (binary bytes) when needed to display, import, transcode, or otherwise process the file you chose inside ShootHive.

3.4 Technical and usage data

• Server logs — IP address, user-agent, request paths, response codes, timestamps, error reports.
• Cookies — a session cookie for authentication, a locale-preference cookie (NEXT_LOCALE), and minimal product-analytics events for service health.

4. How we use data

We use the data above to:

• Authenticate you and operate your account.
• Display, import, render, and otherwise process the Google Drive files you choose to connect to ShootHive.
• Provide and improve the Service — feature delivery, performance monitoring, debugging, abuse prevention.
• Communicate with you about your account, support requests, and material service updates.
• Comply with applicable legal obligations.

We do not use data received from Google APIs to develop, improve, or train generalized or non-personalized AI/ML models.

5. Limited Use of Google user data

ShootHive’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

• We use Google user data only to provide or improve user-facing features that are prominent within the ShootHive interface.
• We do not transfer Google user data to third parties except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets, with the user’s consent where required.
• We do not use Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
• We do not allow humans to read Google user data unless we have the user’s affirmative agreement for specific files, it is necessary for security purposes (e.g., investigating abuse or a security incident), to comply with applicable law, or the data has been aggregated and anonymized for internal operations such as capacity planning.

6. How we share data

We do not sell personal data and we do not share it with advertisers. We share the minimum data necessary with the following categories of processors, who act on our written instructions and under contractual confidentiality obligations:

• Hosting & edge: Vercel Inc. (United States) for application hosting; Cloudflare Inc. (United States) for DNS and edge delivery.
• Database & storage: the managed PostgreSQL provider used to host the ShootHive workspace database.
• Email delivery: the transactional email provider used to send sign-in, account, and support messages.
• Payments: Paddle.com acts as the Merchant of Record for paid plans and processes payment and card data on our behalf; ShootHive does not store your card details.
• Application analytics: Vercel Inc. (United States) for privacy-friendly, cookieless web analytics (anonymous page views and performance metrics; no cross-site tracking).

Data accessed via the drive.file scope is processed in transit through ShootHive’s servers only as needed to render or import the file you selected. We do not transfer Google user data to other third parties beyond the infrastructure providers listed above.

7. Where data is stored and international transfers

ShootHive is hosted on infrastructure located primarily in the United States and the European Union. By using ShootHive, you consent to such international transfers. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses with our processors.

8. Data retention

• Account data is retained while your account is active and for up to 30 days after account closure (for backup rotation), then deleted or irreversibly anonymized.
• Google OAuth tokens are retained until you disconnect your Google account or close your ShootHive account; then deleted promptly.
• Drive file contents accessed under drive.file are not stored beyond the duration of the operation that needs them (for example, generating a thumbnail or rendering a preview). Derivatives such as thumbnails or imported assets are stored only when you explicitly choose to import a file, and you can delete them from your workspace at any time.
• Server logs are retained for up to 90 days, then deleted.

9. Security

We use TLS to protect data in transit, store passwords as one-way hashes (Argon2id or bcrypt), encrypt OAuth refresh tokens at rest, and restrict access to production systems on a least-privilege basis with audit logging. No system can be guaranteed perfectly secure; if we become aware of a breach affecting your personal data, we will notify you and the competent authorities in accordance with applicable law.

10. Your rights

Subject to applicable law (including the GDPR for users in the EEA and the UK), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Delete your account and associated personal data.
• Export your workspace content.
• Object to or restrict certain processing, and withdraw consent at any time where processing is based on consent.
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, email slava.yakobchuk@shoothive.net with the subject “Privacy request”. We will respond within 30 days.

You can also revoke ShootHive’s access to your Google account at any time at myaccount.google.com/permissions. Revoking access stops further data sharing from Google to ShootHive but does not by itself delete data we have already received; to request deletion of that data, follow the procedure above.

11. Children

ShootHive is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please email slava.yakobchuk@shoothive.net and we will delete it.

12. Changes to this policy

We may update this policy from time to time. Material changes will be communicated to active users by email and reflected by an updated “Last updated” date at the top of this page. We encourage you to review this page periodically.

13. Contact

Operator: Viacheslav Yakobchuk
Email: slava.yakobchuk@shoothive.net
Website: https://www.shoothive.net

For privacy questions, including requests to exercise your rights, please email slava.yakobchuk@shoothive.net with the subject line “Privacy”. You can also reach us through the contact form.