Fenfire Privacy Policy

Who operates Fenfire

Fenfire is the new name of Social Bee. The service, your account and your connected accounts are unchanged, and this policy applies under both names. Fenfire is operated by HYVE LABS LLC in the United Arab Emirates. HYVE LABS LLC is the controller of account and service data described in this policy, except where we process data solely on a customer workspace's instructions.

Information we collect

• Account, workspace, brand, team-member, role, support, and billing-administration information.
• Content, media, drafts, approvals, schedules, publishing results, and audit records created through Fenfire.
• Connected-account identifiers, account names, permission state, encrypted access credentials, provider delivery status, and live analytics returned by supported providers.
• Competitor figures you record or your connected Instagram account reads through Meta's business discovery, each with its source and date.
• Security and operational information such as sign-in events, request identifiers, device and browser data, and error logs.

The answers you give while setting up your account (your brand, markets, goals and how you work) are stored with your account and used to configure your workspace.

Meta platform data

When an authorized user connects a Facebook Page or Instagram professional account, Fenfire may receive the Page or Instagram account identity, media and publishing data, insights, comments, mentions, conversations, messages, sender identity, and attachments that the account, Meta permissions, and enabled Fenfire features allow.

We use this data only to provide the connected workspace's requested publishing, analytics, inbox, and community-management functions; maintain account and delivery integrity; secure the service; and meet legal obligations. We do not sell Meta platform data.

Other connected platforms

When an authorized user connects an account on another supported platform, such as a LinkedIn Page or an X account (the Connections page lists every platform you can connect), Fenfire receives the account identity, permission state, publishing results and the analytics that the account, the platform's permissions and the enabled Fenfire features allow. We use that data in the same way as Meta platform data: to provide the connected workspace's publishing and analytics functions, maintain delivery integrity, secure the service and meet legal obligations. We do not sell it. The platform's own terms govern the account you connect, and you can disconnect it at any time from Connections.

Free social audit

When you request a free social audit, we collect the website address, email address, market, industry and report language you enter, any social profile links and competitors you add, and the time you agreed to these terms. We use your email address to confirm the request and send your report. We also keep a short record of each request: the website address, email address, market, industry and report language you entered, when you made the request, confirmed your email and received your report, how the audit ended, and the names of any platforms you chose to connect. We use this record to run and improve the free audit service. The form also has a separate box, not ticked unless you tick it, to hear from us about Fenfire. Only if you tick it, and confirm your email address, will we email you product news and tips. You can unsubscribe at any time with the link in any marketing email or by writing to us, and we remove your details promptly. The request record never contains anything we read for your audit: no figures, handles, posts, or text from X, LinkedIn, Instagram or any website, and no score.

To build the report we read your website and the websites of any competitors you name, as any visitor would, and we honour each site's robots.txt. We never open social media profile pages. Where you or your website give us an X account, we read that account's public profile and recent public posts through X's official API, and we show only counts and measures in your report, never the posts themselves.

If you choose to connect Instagram or a LinkedIn Page to see the full report, the platform asks for your permission first. We then read that account's profile and performance figures once, build your report, and delete the access we were given as soon as the report is built. We do not publish anything, and we do not keep a connection to your account.

If you choose to show your latest posts inside your report, that platform loads its own content and may set its own cookies in your browser; we do not receive or store those posts.

Your report is private. It is available only through the link we email to you, and competitor figures appear only in your report. We do not use audit data, and in particular no data from X or LinkedIn, for advertising, lead scoring or any other product.

We delete every audit, including all figures read for it, 30 days after we deliver it, and the request record goes with it. If you never confirm your email address, we keep the unconfirmed request and its record for up to 30 days after the confirmation link expires, to prevent the form being used to send repeated emails to someone else, and then delete them. You can delete your report at any time with the "Delete this report now" button on the report page, which removes it and its request record immediately. If you connected Instagram through Facebook Login, you can also ask Meta to have us delete your data, as described under "Data deletion", which removes your audits and their request records. The one exception: if you ticked the box to hear from us about Fenfire and confirmed your email address, we keep your request record, without the report, for 12 months from your request so we can send you those emails, and then delete it. Deleting your report does not remove this record; unsubscribing, or writing to us, does, and we remove your details promptly.

AI and service providers

Fenfire may send the minimum content required to an AI provider only when an authorized user invokes an AI-assisted feature. Message content and customer identity data never becomes AI memory or training context by default. Appropriate brand guidance is saved only when an authorized user explicitly chooses to save it.

We use vetted infrastructure and service providers, including Google Cloud for hosting and storage, Meta for connected Facebook and Instagram functions, and payment or communication providers where applicable. They process data only to deliver their contracted service and subject to their own terms and privacy duties.

You can also use Fenfire from inside an AI assistant, such as ChatGPT through the ChatGPT app, listed as Social Bee by HYVE until the rename is approved. What you type into the assistant goes to the assistant's provider under its own terms. Fenfire receives only the requests the assistant makes on your behalf, such as a post brief or an approval, together with the Fenfire account you connected, and returns the result for the assistant to show you. You can end that access from the assistant's own settings or by writing to us.

Cookies and usage data

Fenfire uses cookies only to keep you signed in and to complete sign-in and connection flows safely; none is used for advertising. Your browser also keeps small preferences on your device, such as the theme you chose and the campaign tags you arrived with. Public pages send first party usage events to Fenfire (the page viewed, those campaign tags and a coarse device class) without a cookie, an identifier or anything you typed; we use them to understand which pages bring people to Fenfire.

On our public pages only, and only if you choose Allow in the analytics bar, we load Google Analytics to count visits. It sets its own cookies (named with the prefix sb_mkt) and sends Google the page path, the site address, at most the origin of the page you came from, the page title, and the usual browser and device data; advertising storage, ad personalisation and Google signals are switched off. It never receives query strings, form entries, email addresses, ticket references or anything from inside the app, the free audit, preview links or the sign-in pages, where it never loads at all. Do Not Track and Global Privacy Control keep it off even after an Allow. You can change your choice at any time under Analytics settings in the footer of every public page; choosing No thanks removes the script and its cookies. Your choice is kept in your browser for up to 180 days. We do not use advertising trackers.

Security and tenant isolation

Fenfire applies workspace, brand, connected-account, user-role, and plan controls. Provider credentials and sensitive message data are encrypted, access is restricted, and mutating community actions require the applicable authorization and confirmation. No security measure is absolute, but we maintain safeguards appropriate to the nature of the data.

Retention

We keep account and operational records only while needed to provide and secure the service, meet contractual or legal obligations, and resolve disputes. Inbox and community data uses a bounded retention period configured for the workspace and shown in the product; expired records are purged. Connected credentials are removed or rendered unusable when the connection is revoked, disconnected, or deleted. Backup copies age out under controlled backup schedules.

Data deletion

You can disconnect a provider account from Fenfire's Connections settings. You may also remove the app, listed as Social Bee by HYVE until the rename is approved, from your Meta account settings or request deletion by emailing support@hyve-os.com from the address associated with your account. Include the workspace or brand name and the connected account to identify.

A valid deletion or Meta deauthorization request removes or irreversibly scrubs the affected credentials and associated provider data, including retained inbox and community records, subject only to narrow legal, security, or fraud-prevention obligations. We will confirm the request or provide a status link where the provider flow requires one.

Your choices and rights

Depending on applicable law, you may request access, correction, export, restriction, objection, or deletion of personal information. Workspace owners may also manage members and connected accounts in the service. Contact us to exercise a right; we may verify your identity and authority before acting.

International processing and children

Our providers may process information outside your country with appropriate contractual and technical safeguards. Fenfire is a business service and is not directed to children under 18.

Changes and contact

We may update this policy as Fenfire, provider requirements, or law changes. Material changes will be dated and communicated through an appropriate service channel. Questions and privacy requests can be sent to support@hyve-os.com.