Privacy Policy

Effective date: DRAFT — pending attorney review. Last updated July 2026.

This policy explains how HiveMarket ("we", "us"), a Beehive product operated by Maxivize, collects, uses, and protects information when you use myhivemarket.com and the HiveMarket application.

The short version

• Agencies enter client information to run their food programs. That data belongs to the agency; we process it only to provide the service.
• Health-related client information is treated as Protected Health Information (PHI) under HIPAA, handled under Business Associate Agreements.
• We do not sell personal information. Ever.
• We keep an immutable audit log of activity in the application because our customers' programs require it.

Information we collect

Account information. Name, email address, and sign-in credentials for agency staff, vendor users, and platform operators. Client shoppers sign in with one-tap email links; we store their email address and language preference.

Program information entered by agencies. Client names, contact details, household size, dietary needs, delivery addresses, and service authorizations. This is the agency's data; HiveMarket processes it on the agency's behalf to run their food program.

Order and delivery information. Orders, delivery confirmations, and delivery-proof photos uploaded by vendors or agency staff.

Usage information. Sign-ins and actions taken in the application are recorded in an audit log. If product analytics are enabled, we collect page-view events with identifiers — never client health information. We do not use advertising trackers.

Messages you send us. If you use the contact form or chat, we receive what you send so we can reply.

How we use information

• To provide the service: ordering, delivery coordination, billing worksheets, and audit documentation.
• To operate and secure the platform: authentication, fraud and abuse prevention, troubleshooting.
• To communicate: transactional email about orders, deliveries, invitations, and account activity. We do not send marketing email to client shoppers.
• To improve the product, using aggregate, de-identified usage patterns.

Protected Health Information

Client information that qualifies as PHI is processed under HIPAA rules and Business Associate Agreements with our customers and infrastructure providers. Our practices include: encryption in transit and at rest, database-enforced tenant isolation, role-based least-privilege access, no PHI in email notifications, and access logging. See our Security page.

Who we share information with

• Service providers that host and operate the platform (database and file hosting, email delivery, payments), bound by contract to use the data only to provide their service to us.
• Vendors fulfilling orders receive only the delivery information needed: recipient name, delivery address, phone, and the order contents — never program, medical, or dietary details beyond the items ordered.
• Legal requirements. We disclose information if required by law, and we'll tell the affected agency unless the law prevents it.

We do not sell personal information, and we do not share it for advertising.

Retention

Program records (orders, deliveries, billing records, audit logs) are retained for as long as the agency's account is active and thereafter as required for program compliance. Agencies may request export or deletion of their tenant data, subject to legal retention obligations.

Your choices

Agency and vendor users can update their account details in the app. Client shoppers can ask their agency to correct their information or turn off shopping access. For any privacy request, contact us at the address below.

Children

HiveMarket is a business tool for agencies and vendors and is not directed at children. Client household information is entered and managed by agencies.

Changes

We will post updates here and note the effective date. Material changes will be announced in the application.

Contact

Privacy questions: use the contact form or write to Maxivize, operator of HiveMarket.

DRAFT FOR ATTORNEY REVIEW — this policy has not yet been reviewed by counsel and is not final.