# CortexHive Privacy Policy

**Effective Date:** June 30, 2026
**Last Updated:** June 30, 2026

---

## Introduction

Welcome to CortexHive, an AI agent platform developed by Madero Films. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have over your data.

We wrote this in plain English on purpose. If something is unclear, email us at hello@cortexhive.app.

By using CortexHive, you agree to this policy. If you don't agree, please don't use the platform.

---

## 1. Who We Are

**CortexHive** is a product of **Madero Films operating as CortexHive**.
**Contact email:** hello@cortexhive.app

---

## 2. What Information We Collect

### Account Information
When you sign up, we collect:
- Your email address
- Your password (stored as a one-way hash — we never store your actual password)

### Agent Configuration Data
When you build agents on CortexHive, we store:
- Agent names, descriptions, instructions, and settings you configure
- Tool configurations (what tools your agents are allowed to use)

### Conversation History
We store the messages exchanged between you and your agents — including inputs you send and outputs the agents produce.

### Uploaded Files
If you upload files for your agents to work with, we store those files on your behalf.

### Usage and Cost Data
We track how much you use the platform — including the number of agent runs, API calls made, and cost estimates. This helps you understand your usage and helps us operate the service.

### API Keys
If you use the **Bring Your Own Key (BYOK)** model, you provide your own Anthropic API key. We store it encrypted so your agents can make API calls. We do not share your API key with anyone other than Anthropic when your agent makes a request.

### Technical Information
When you use CortexHive, we automatically collect:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and features used
- Timestamps of activity

---

## 3. How We Use Your Information

We use your information to:

- **Run the platform** — authenticate you, execute your agents, store your configs and conversations, and display your usage data.
- **Improve CortexHive** — understand how people use the product so we can make it better. We look at aggregate patterns, not individual conversations for this purpose.
- **Keep things secure** — detect abuse, prevent unauthorized access, and protect the integrity of the platform.
- **Communicate with you** — send you important notices about the service.

We do **not** use your data to train AI models. We do not sell your data. Ever.

---

## 4. Third Parties We Work With

We rely on a small number of third-party services to operate CortexHive.

### Anthropic
**What they do:** Provide the Claude AI models that power your agents.
**What we send them:** When your agent runs, the messages in that conversation — including your instructions and the agent's context — are sent to Anthropic's API to generate a response.
**Their privacy policy:** anthropic.com/privacy

> **Important:** If you use the BYOK model, requests are made under your own Anthropic API key. You are bound by Anthropic's Terms of Service directly.

### ElevenLabs
**What they do:** Provide voice synthesis for agents that speak.
**What we send them:** If you use a voice-enabled agent, the text the agent generates is sent to ElevenLabs to produce audio.
**Their privacy policy:** elevenlabs.io/privacy

### Render.com
**What they do:** Host our infrastructure. All CortexHive servers and databases run on Render.
**What they see:** Render has access to the servers and storage where your data lives, as our infrastructure provider.
**Their privacy policy:** render.com/privacy

We do not share your data with advertisers, data brokers, or anyone else.

---

## 5. Data Retention

We keep your data for as long as your account is active.

**When you delete your account**, we permanently delete your data within 30 days — including from backup rotation.

If you request deletion of specific data without closing your account, we'll delete it within 30 days of your request.

---

## 6. Your Rights

You have real control over your data:

- **Access** — Request a copy of the personal data we hold about you.
- **Correction** — Update incorrect information in your account settings or ask us to fix it.
- **Deletion** — Delete your account and all associated data at any time. We'll process it within 30 days.
- **Portability** — Request an export of your data in a machine-readable format.

To exercise any of these rights, email us at **hello@cortexhive.app**. We'll respond within 30 days.

---

## 7. California Residents — CCPA Rights

If you're a California resident, the California Consumer Privacy Act (CCPA) gives you additional rights.

**You have the right to:**
- **Know** what personal information we collect and how we use it (this policy covers that).
- **Delete** your personal information (see Section 6).
- **Opt out of the sale of your personal information** — we do not sell personal information, so there's nothing to opt out of.
- **Non-discrimination** — we will not discriminate against you for exercising any of these rights.

**Categories of personal information we collect:**
- Identifiers (email address, IP address)
- Internet or network activity (usage data, pages visited)
- Commercial information (usage and cost tracking)
- Inferences drawn from usage (aggregate patterns for product improvement)

**We do not sell or share personal information for cross-context behavioral advertising.**

To submit a verifiable consumer request, email **hello@cortexhive.app** from the email associated with your account.

---

## 8. Security

We take security seriously:

- **Encryption in transit** — All data between your browser and our servers is encrypted using HTTPS/TLS.
- **Encryption at rest** — Stored data, including your files and conversation history, is encrypted at rest.
- **Hashed passwords** — Your password is never stored in plain text. We use a strong one-way hashing algorithm (scrypt).
- **Encrypted API keys** — Your Anthropic API key is stored encrypted (AES-256-GCM), never in plain text.

No system is 100% secure. If we discover a breach that affects your data, we'll notify you promptly.

---

## 9. Children

CortexHive is not intended for anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, please contact us at hello@cortexhive.app and we'll delete it.

---

## 10. Changes to This Policy

If we make significant changes to this policy, we'll notify you by email and update the "Last Updated" date at the top. Your continued use of CortexHive after those changes means you accept the updated policy.

---

## 11. Contact Us

Questions, requests, or concerns?

**CortexHive — Madero Films operating as CortexHive**
**Email:** hello@cortexhive.app

We aim to respond within 5 business days.

---

*CortexHive is a product of Madero Films operating as CortexHive. Privacy Policy last updated June 30, 2026.*
