1. Introduction
ManuHive ("we", "us", "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, and share your data when you use the ManuHive platform.
This policy applies to all users of the Service, including Workspace owners, team members, and visitors to our website. We process data in compliance with the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679), Greek Law 4624/2019, and the ePrivacy Directive.
2. Data Controller
The data controller responsible for your personal data is ManuHive, based in Thessaloniki, Greece. For data protection inquiries, contact us at privacy@manuhive.com.
3. Data We Collect
Account Information
- Full name, email address, and profile avatar.
- Workspace name, organization details, country, and timezone.
- Authentication credentials (hashed passwords, PINs — we never store plaintext passwords).
Business Data (Your Content)
- Manufacturing jobs, orders, stock, and customer records you create.
- Custom field data and file attachments uploaded to jobs.
- Logistics data: shipping addresses, tracking numbers, delivery photos, driver assignments.
- Analytics and scheduling data generated from your usage.
- ERP integration credentials and synced data (stored encrypted).
Automatically Collected Data
- Device information, browser type, IP address, and approximate location (derived from timezone).
- Usage data: pages visited, features used, actions performed.
- Authentication logs and session data.
4. Legal Basis for Processing (GDPR Art. 6)
- Contract performance (Art. 6(1)(b)): Processing necessary to provide the Service under our Terms.
- Legitimate interest (Art. 6(1)(f)): Security monitoring, fraud prevention, and service improvement.
- Legal obligation (Art. 6(1)(c)): Tax records, regulatory compliance, and responding to lawful requests.
- Consent (Art. 6(1)(a)): Marketing communications and optional analytics cookies (you may withdraw consent at any time).
5. How We Use Your Data
- Providing, maintaining, and improving the Service.
- Processing payments and managing subscriptions via Stripe.
- Sending transactional emails (account verification, password resets, workspace invitations, notifications).
- Monitoring security, detecting abuse, and preventing unauthorized access.
- Generating aggregated, anonymized analytics to improve the Service (never sold to third parties).
7. International Data Transfers
Some of our sub-processors operate outside the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs) and adequacy decisions by the European Commission, in compliance with GDPR Chapter V.
8. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. After account deletion, your data is permanently removed within 30 days, except where we are required by law to retain certain records (e.g., billing records for tax purposes may be retained for up to 10 years under Greek tax law).
Anonymized, aggregated analytics data that cannot identify you may be retained indefinitely for product improvement purposes.
9. Your Rights Under GDPR
As a data subject in the EU, you have the following rights:
- Right of access (Art. 15) — Request a copy of the personal data we hold about you.
- Right to rectification (Art. 16) — Request correction of inaccurate data.
- Right to erasure (Art. 17) — Request deletion of your personal data ("right to be forgotten").
- Right to restrict processing (Art. 18) — Request that we limit how we use your data.
- Right to data portability (Art. 20) — Receive your data in a structured, machine-readable format.
- Right to object (Art. 21) — Object to processing based on legitimate interest.
- Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise these rights, contact us at privacy@manuhive.com. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA — dpa.gr) or the supervisory authority in your country of residence.
11. Security Measures
We implement industry-standard security measures including: encryption in transit (TLS 1.2+) and at rest, Row-Level Security (RLS) for multi-tenant data isolation, hashed passwords using bcrypt, regular security audits, and access controls based on the principle of least privilege. While we strive to protect your data, no method of electronic storage is 100% secure.
12. Children's Privacy
The Service is designed for business use and is not intended for individuals under the age of 15. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 15, we will promptly delete it.
13. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or applicable law. Material changes will be communicated via email or in-app notification at least 30 days before they take effect. The date at the top of this page indicates when the policy was last revised.
14. Contact & Data Protection Officer
For any privacy-related questions or to exercise your data subject rights, contact our Data Protection team at:
You may also contact the Hellenic Data Protection Authority (HDPA) at www.dpa.gr if you believe your data protection rights have been violated.