Privacy Policy

StickyHive ("we," "our," or "us") is a comprehensive community management platform that includes a Chrome extension designed to enhance community management on platforms like Skool, Circle, and Mighty Networks with AI-powered features. This Privacy Policy explains how we collect, use, disclose, store, and protect your information when you use our platform, services, and Chrome extension.

By installing and using StickyHive, you agree to the collection and use of information in accordance with this policy.

What We Collect:

• Platform Authentication Tokens: We capture session cookies, CSRF tokens, and authentication tokens from the community platforms you visit (Skool, Circle, Mighty Networks) to enable backend API access on your behalf
• StickyHive Account: When you log in via our website (stickyhive.ai), we receive:
  • Access and refresh tokens (for authentication)
  • User ID (anonymous identifier)

To provide our community management features, we collect and process content from your designated community platforms:

• Post Content: Post titles, text content, post URLs, post IDs, timestamps, engagement metrics (like counts, comment counts)
• Comments & Messages: Comment text, reply threads, timestamps
• Author Information (Anonymized): Author names are automatically pseudonymized to "First Name + Last Initial" (e.g., "John D.") before being sent to our backend. We do NOT collect full names, email addresses, or other personally identifiable information about post authors
• Community Metadata: Community/group names, community IDs, space IDs, platform-specific identifiers

Network Monitoring & API Interception:

The extension monitors network activity ONLY within your designated community platforms to provide faster content loading and caching:

• API Requests: We intercept GET requests to platform APIs (Skool, Circle, Mighty Networks) to cache post and comment data locally in your browser
• HTTP Requests/Responses: Content of API responses is stored in browser sessionStorage
• URLs/Domains: API endpoint URLs accessed within community platforms
• Browser Storage: Session cookies and authentication tokens from community platforms

Click & Navigation Monitoring:

• Click Events: Document-wide click listener detects navigation within community platforms (used to update extension UI when you navigate between pages)
• Scroll Events: Passive scroll listener for viewport-based content loading optimization
• Page Navigation: URL changes within your community platform

• Extension Data: Extension version, installation ID
• Browser Data: Browser type, version, user agent
• Error Logs: Crash reports and debugging information (currently DISABLED for privacy - errors only logged to console)
• Local Storage: Cached posts, user preferences, draft content stored locally in your browser

We use the collected information EXCLUSIVELY to provide user-facing features:

• Review Dashboard: Display posts and comments from your community for management and review
• Post Actions: Enable Flag, Swipe File, and Digest buttons for organizing and categorizing content
• Quick Response: AI-powered comment drafting and response tools
• Shared Notes: Team collaboration features for community management
• Content Caching: Cache API responses locally for faster loading and offline access
• Navigation Detection: Update extension UI when you navigate between pages in your community
• Authentication: Maintain secure sessions with community platforms and StickyHive backend

We process your data based on:

• Consent: You explicitly consent by installing and using the extension
• Contract Performance: Processing is necessary to provide the services you requested
• Legitimate Interests: Improving our service, preventing fraud, ensuring security

StickyHive Backend API (stickyhive.ai)

• Data Transferred:
  • Authentication tokens from community platforms
  • Post and comment content (with anonymized author names)
  • Community metadata (IDs, names)
  • Screenshots (optional, when you use Swipe File/Digest features)
• Purpose: Store and process your community data, enable Review Dashboard, facilitate team collaboration, enable backend API access on your behalf
• Security: All transmissions use HTTPS encryption
• Justification: Transfer is necessary to provide the single purpose of the extension (community management tools)

Error Tracking (DISABLED)

• Status: Error tracking via Sentry is currently DISABLED for privacy
• What This Means: Errors are only logged to your browser console, not sent to external services

• Sell your personal information to advertisers or data brokers
• Share your data with marketing companies
• Use your data for targeted advertising
• Provide your information to third parties for their own use

We may disclose your information if required by law, such as:

• Complying with court orders, subpoenas, or legal processes
• Protecting our rights, property, or safety
• Investigating fraud or security issues
• Enforcing our Terms of Service

• Local Storage: Post cache, user preferences, and draft content are stored locally in your browser using Chrome's storage API
• Session Storage: Temporary session data that expires when you close your browser
• Backend Servers: User account data, authentication tokens, and community data are stored on our secure servers

We implement industry-standard security practices:

• Encryption: All data transmitted between the extension and our servers uses HTTPS/TLS encryption
• Token Security: OAuth tokens are stored securely using Chrome's encrypted storage
• Access Controls: Strict access controls limit who can access user data on our backend
• Regular Audits: We regularly review our security practices and update them as needed
• Secure Authentication: OAuth 2.0 with Google for secure user authentication

• Authentication Tokens: Stored until you log out or revoke access
• Cached Posts: Stored locally indefinitely until you clear browser data or uninstall the extension
• Account Data: Retained as long as your account is active

You have the right to:

• Access Your Data: Request a copy of all personal data we hold about you
• Correct Your Data: Update or correct inaccurate information
• Delete Your Data: Request deletion of your account and associated data
• Export Your Data: Download your data in a portable format
• Withdraw Consent: Uninstall the extension at any time to stop data collection

You can manage cookies through:

• Chrome browser settings → Privacy and Security → Cookies
• Clearing site data for stickyhive.ai domain
• Using Chrome's incognito mode (note: the extension may have limited functionality)

StickyHive Chrome Extension requests the following permissions:

StickyHive is not intended for use by individuals under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately, and we will delete it.

If you are located outside the United States, please note that:

• Your data may be transferred to and processed in countries with different privacy laws
• We ensure appropriate safeguards are in place for international transfers
• For EU users, we comply with GDPR requirements for international data transfers

We may update this Privacy Policy periodically to reflect changes in our practices, legal or regulatory updates, or new features.

When we make significant changes:

• We will update the "Last Updated" date at the top
• We will notify you via email (if you've provided one)
• We will display a notice in the extension
• You will be prompted to review and accept the new policy

Your continued use of the extension after changes constitutes acceptance of the updated policy.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights:

Your Legal Rights Include:

• Right to Access: Obtain confirmation of data processing and access to your data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Limit how we process your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge a Complaint: File a complaint with your local supervisory authority

Data Protection Authority: If you believe we have not addressed your concerns, you may contact your local data protection authority. For a list of EU data protection authorities, visit: https://edpb.europa.eu/about-edpb/board/members_en

If you are a California resident, you have additional rights:

• Right to Know: What personal information we collect, use, and share
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the "sale" of personal information (we do not sell your data)
• Right to Non-Discrimination: Equal service regardless of exercising your privacy rights

To exercise these rights, contact us at support@stickyhive.ai

By using StickyHive, you acknowledge that you have read and understood this Privacy Policy.