Privacy
What we do with your personal data when you visit the site, write to us, request the download link, place an order or use the HiveProtect plugin.
Who is responsible for your data
The data controller is SEO INTERNET, a simplified joint-stock company with a sole shareholder whose registered office is at 66 avenue des Champs-Élysées, OCP Business Center 4, 75008 Paris (see the legal notice). For any question about your data, write to [email protected].
When you visit the site
| Item | Details |
|---|---|
| Data | In particular your IP address, the date and the pages viewed, the time spent and scrolling, the number of clicks, your browser, your device and your screen size, the site you came from, the country and city inferred from your IP address, and a visitor identifier (see the Cookies page). |
| Why | To operate the site, protect it against attacks and bots, and measure its traffic. |
| How long | Visit statistics and bot visits: 90 days. Security logs: 60 days, and the login log: one year. Server access logs: a few months, depending on traffic. An address blocked for attacking remains blocked until the block is lifted. |
| Legal basis | Our legitimate interest: the security of the site and knowing how much traffic it receives. |
To infer the country and city, the IP address is sent to a geolocation service (ip-api.com).
When you write to us
| Item | Details |
|---|---|
| Data | Your email address, your name and the content of your message. |
| Why | To reply to you. |
| How long | For as long as it takes to handle your request, then until you ask for it to be deleted. |
| Legal basis | Your request, and our legitimate interest in replying to it. |
When you request the download link
| Item | Details |
|---|---|
| Data | Your first and last name, your email address, your website address and the language of the page; your IP address and your browser; the dates of your requests and downloads, how many there were, the identifier of each download, and the delivery status of the link and of its copy in our customer follow-up tool. |
| Why | To email you your personal download link (valid for 7 days, for 3 downloads of each plugin, HiveProtect and HiveCache), to link your downloads to the installation of the plugin, and to contact you about HiveProtect. |
| How long | On our site, your request is deleted 3 years after your last activity (last request or last download); your IP address and browser are erased 12 months after the request. The link itself is not stored: we only keep a fingerprint of it, used to recognize it during its 7 days of validity and deleted along with your request. The copy in our customer follow-up tool is kept until you ask for it to be deleted. |
| Legal basis | Your consent, given by ticking the box on the form. You can withdraw it at any time by writing to [email protected]. |
Your request is also copied into Prospect Hub, our customer follow-up tool. This copy is sent by your browser, which also passes on to Prospect Hub your IP address and technical measurements of your visit used to recognize bots. To do this, your browser loads a Prospect Hub script as soon as the form page opens. These measurements and the source of your visit (for example, the page you came from) pass through our site, which keeps them for 15 minutes at most, just long enough for this copy.
To keep bots out, the form uses Turnstile, Cloudflare's anti-bot service: your browser loads its verification module, and our site sends Cloudflare the verification code produced by this module, together with your IP address.
To limit abuse, we count requests per IP address, per email address and per domain: these counters only keep a one-way fingerprint of this information, deleted after two days.
Each file you download (HiveProtect or HiveCache) contains a small telechargement.json file: a random identifier, the name and version of the plugin and the day of the download. It contains neither your name, nor your email address, nor your IP address. Our site keeps the link between this identifier and your request, and deletes it with your request; it is used to link this download to the installation of the plugin. You can delete this file: the plugin works without it.
If the copy into our tool fails, your request is emailed to us with your IP address and your browser. The technical cookie hs_tl_relais (15 minutes) is strictly necessary for this copy (see the Cookies page). As for any page, the server access logs record the addresses visited, and therefore your link when you open it.
When you place an order
| Item | Details |
|---|---|
| Data | Your name, your company name where applicable, your billing address, your country, your email address, your phone number if requested, your VAT number if you are a business, the language of your order, where your visit came from (search engine, link, advertisement), your IP address and your browser, as well as the content of the order. |
| Payment | You enter your card details directly with Stripe: we never see the number, and only keep the payment references that Stripe sends us (customer and transaction identifiers). |
| Why | To process your order, invoice you, calculate VAT and meet our accounting obligations. For VAT, your country is determined from your billing address. A business's VAT number is checked with the European VIES service. |
| How long | For the duration of the business relationship, then for the period required by law for accounting records (ten years). |
| Legal basis | Fulfillment of your order and our legal obligations. |
If you start an order without completing it, the email address entered in the checkout form may be kept along with the cart contents, in order to follow up with you. It is kept until we delete it.
When you use the HiveProtect plugin
The plugin works on your site. Here is what it keeps on your side, and the main exchanges it has with hiveprotect.ai and with external services.
| Item | Details |
|---|---|
| License and trial | At activation, then at regular intervals, the plugin contacts hiveprotect.ai to create the trial, check the license, look for updates and send it operating information (protection status, security statistics). In particular, it sends your site's address, the license key, the versions of WordPress, PHP and the plugin, and the language. This information is kept as long as your site is registered with us, and deleted at your request. |
| HiveShield collective defense | When an address is blocked for attacking, the plugin sends hiveprotect.ai information about the attack, in particular the blocked IP address, the type of attack, its severity, the address of the targeted page and the time, in order to alert the other protected sites. |
| Your visitors' data | The logs, visit statistics and IP addresses that the plugin records are stored in your site's database; some of it leaves it, in particular in the cases described on this page. You are responsible for informing your visitors. Depending on the features you enable, external services are involved, in particular: IP address geolocation (ip-api.com), looking up the abuse contact for an address (Abusix), analysis of messages by artificial intelligence (by Anthropic or OpenAI, with your own key: the content analyzed does not pass through hiveprotect.ai) and the QR code image for two-factor authentication (api.qrserver.com). |
Who receives data
| Recipient | Role |
|---|---|
| OVH SAS | Hosting of the site, databases and email. |
| Cloudflare, Inc. | Network that speeds up access to the site and protects it: it sees all requests sent to the site. Its Turnstile service also checks that the download form is not sent by a bot. |
| Stripe, with Google, Apple and hCaptcha | Card payment, express payment buttons and anti-bot verification. |
| Online storage | External copy of backups. |
| ip-api.com | Geolocation of IP addresses. |
| Prospect Hub | SEO INTERNET's contact management tool: it receives the messages from the forms you connect to it with the plugin (Forms Creator), as well as the download link requests made on this site. |
| VIES (European Commission) | Verification of a business's VAT number. |
| Gravatar (Automattic) | Author avatar shown on product pages: your browser may contact this service to display it. |
| Dropbox | Video from a blog article: your browser contacts this service to display it (see the Cookies page). |
Several of these providers are established in the United States or may process data there: this is the case in particular for Cloudflare, Stripe, hCaptcha, Google, Apple and Gravatar, as well as our online storage provider.
Security and backups
Exchanges with our site are encrypted (HTTPS). The site is backed up regularly, including to external storage; the oldest automatic backups are replaced as new ones are made, and one-off copies are also made before certain technical interventions.
Your rights
- Obtain a copy of the data concerning you, and have it corrected.
- Request its erasure or the restriction of its use.
- Object to processing based on our legitimate interest.
- Receive your data in a commonly used format.
- Withdraw your consent when processing depends on it.
- Give instructions about what happens to your data after your death.
To exercise your rights, write to [email protected]: we reply within one month. If a request does not satisfy you, you may lodge a complaint with the Commission nationale de l'informatique et des libertés (cnil.fr).
Ready to protect your site?
Try HiveProtect free for 15 days, with all features included.