What we collect. What we don’t.

What data we collect

We collect only what you explicitly hand to the extension. There is no background data collection.

• Wallet address (optional). If you paste a Base 8453 address into the wallet sheet, we store that exact string in chrome.storage.local on your device. We never see it. We never get your private keys either. The extension doesn't ask for them and has no field where you could enter them.
• Receipt data (only what you scan). When you run a Hive agent that processes receipts, the receipt content you paste or upload gets sent to receipts.thehiveryiq.com just long enough for that one call, so the agent can do its job. We don't keep a copy after that single signed response goes out.
• Gmail OAuth token (only what you authorize). Some Hive agents, like a Gmail receipt scanner, ask for Google OAuth permission with the narrowest scope possible. If you grant it, the token sits in chrome.storage.local on your device and gets used only for the calls you authorized in that session. No copy is kept on any Hive server.
• Designer conversation. If you use the Designer tab to draft an agent, we store the conversation and the resulting spec in chrome.storage.local so you can pick up where you left off. You can clear it any time with the Reset button.

We do not collect your name, email address, IP address (beyond what your browser sends to API hosts on its own), device fingerprint, browsing history, or any analytics event stream.

How we use it

We use the data you hand to the extension for three things, in this order, and nothing else:

• Process the receipt or task you submitted, through the Hive agent you picked.
• Sign it so it can't be faked. Every agent run makes a receipt signed twice (Ed25519 and ML‑DSA‑65), tied to your exact request.
• Anchor the receipt on Base 8453 so you (or anyone) can check the signature on-chain, forever, without needing us.

That's the whole list. We don't train models on your data. We don't enrich third-party profiles. We don't run ad attribution. We don't run product analytics.

Where data lives

The Hive Native Client runs entirely on your device. There's no Hive-operated user database.

• On your device: your wallet address, conversation threads, and any OAuth tokens you've authorized get written to chrome.storage.local. Chrome keeps this storage locked to the extension. No website, including thehiveryiq.com, can read it.
• On the Hive API host: agent calls go to receipts.thehiveryiq.com. The host processes each request, sends back the signed response, and keeps only the cryptographic receipt itself, which is meant to be checkable by anyone. Your raw input isn't kept after the call.
• On the Base blockchain: receipt anchors get written to Base 8453. These anchors are meant to be public. That's the whole point of an audit-grade receipt. Only the receipt's fingerprint and its two signatures show up on-chain. Your raw input never does.

If you uninstall the extension, Chrome removes the chrome.storage.local data. Anchored receipts on Base 8453 stay public, because that's how the cryptography works.

Third parties

The extension talks to exactly three outside services. None of them get paid by us to track you.

• Google (OAuth for Gmail-scoped agents only). When you choose to run a Hive agent that reads Gmail, Google handles the OAuth consent screen and gives out a scoped token. Google's own privacy policy covers that. We never see your Google account credentials.
• Base (on-chain anchoring). Hive writes receipt anchors to the Base 8453 chain through the standard public RPC. There's no side channel to a private indexer. We use the same public Base network anyone can check.
• receipts.thehiveryiq.com (Hive agent API). Every agent run, the designer chat, mint requests, and receipt checks go through this host. Hive Civilization runs it. No analytics or ad code runs on this host.

We don't load Google Analytics, Plausible, Mixpanel, Segment, Heap, Amplitude, Fathom, PostHog, Hotjar, FullStory, Microsoft Clarity, or any other tracking code in the extension. We don't load Meta Pixel, Google Ads, TikTok Pixel, or any ad tracker either.

Your rights

• Delete anytime. Remove the extension from chrome://extensions/ and Chrome wipes the local storage. There's no Hive-side "account" to close, because none was ever created.
• Export anytime. Open any receipt in the Receipts tab and use Copy JSON. The full receipt and both signatures are yours to keep.
• Revoke anytime. If you connected Gmail through OAuth for a specific agent, revoke the scope at myaccount.google.com/permissions. The extension loses access right away.
• We can't get to your data even if we wanted to. The extension stores data in browser-scoped chrome.storage.local. Hive has no remote way to read that store. There's no admin panel where a Hive employee could browse user records, because no such records exist.
• GDPR, CCPA, CPRA. Since we don't keep a user database, most of the deletion and access rights under these laws have nothing on our side to act on. You still keep all your rights under those laws no matter where you live. We'll answer any verified request at the contact below.