Privacy Policy

Effective from: 2026-09-11

1. Controller

Prohiver, MB Company code: 306815018 Address: Baltų pr. 37-76, LT-48238 Kaunas, Lithuania Email: info@prohiver.com Phone: +370 613 17271

This Privacy Policy applies to the ProHiver online shop, customer web system, mobile app, connected ProHiver devices and related services, customer support, complaints, warranty service and returns.

2. Data we process

Depending on the features used, ProHiver may process:

• account and profile information, such as name, email address, phone number, language, time zone, company details and account permissions;
• login and security information, including session information, IP address and browser technical information where necessary for security or evidence;
• order, billing and delivery information;
• payment status and payment-transaction information received from Stripe that is needed to confirm an order. ProHiver does not store the full payment-card number or card security code in its own systems;
• device and hive data, such as weight measurements and measurement time, battery or device-status information, mobile-network signal strength, and environmental-sensor data only where the particular device actually supports and transmits it;
• user-configured apiary, hive and location information, including coordinates;
• data needed to deliver mobile notifications where notifications are enabled;
• customer-support, complaint, warranty-service and returns information;
• security and important system-activity records;
• cookie and browser-storage information described in the Cookie and Browser Storage Policy.

The exact device-data set depends on the device model, sensors and enabled features. The first commercial ProHiver model is V1.2.

3. Sources of data

Data may come directly from you, from ProHiver devices and sensors, from your browser or mobile app, from Stripe about payment results, from an authorised reseller or organisation administrator during lawful onboarding, and from providers required for a specific function.

Where personal data is obtained indirectly, information is provided in accordance with Article 14 GDPR where applicable.

4. Purposes and legal bases

• GDPR Article 6(1)(b) – contract or steps before entering into a contract: account management, authentication, device pairing, receiving and displaying device data, apiary functions, orders, delivery, access to paid plans, order/service communications and customer support.
• GDPR Article 6(1)(c) – legal obligation: accounting, taxation, consumer rights, product safety and conformity, warranty service, complaints and lawful requests from competent authorities.
• GDPR Article 6(1)(f) – legitimate interests: account and system security, fraud and abuse prevention, incident investigation, service-failure diagnostics and defence of legal claims.
• GDPR Article 6(1)(a) – consent: where consent is legally required for optional analytics or another optional function.

When providing data is required

Login and contact data marked as required in the registration or account flow are necessary to create and administer an account and provide the core ProHiver service. If you do not provide them, we cannot create or administer the account or provide the selected service.

To conclude and perform an order for physical goods, we need the order, recipient, delivery and contact data required for that order and, for a paid order, information confirming the payment result. If required order data are not provided, we cannot accept, confirm payment for or deliver the order. Additional invoicing, accounting or legal details may be mandatory for a particular transaction; if legally required data are not provided, the transaction or required document may not be capable of being completed correctly.

Optional apiary labels, location settings, notification choices and optional analytics data are voluntary unless a selected feature clearly states that a particular data item is necessary for that feature. If optional data are not provided, only the corresponding optional feature will be unavailable.

ProHiver currently does not run newsletter, promotional SMS or promotional push-notification campaigns.

5. Recipients and service providers

Depending on the feature used, data may be disclosed to:

• DigitalOcean – core infrastructure; ProHiver server infrastructure is located in Germany;
• Stripe – payment processing and payment-related fraud prevention;
• Resend – order-, account- and service-related email;
• Expo, Apple and Google mobile-notification services – where mobile push notifications are enabled;
• the selected delivery provider – information necessary to deliver a shipment;
• competent authorities, legal advisers or other recipients where required by law or necessary for legal claims.

Before an additional external provider starts processing personal data, this Policy must be updated where necessary to provide transparent information about that processing.

6. Transfers outside the European Economic Area

If a service provider or its subprocessor processes personal data outside the European Economic Area, ProHiver uses the applicable GDPR Chapter V transfer basis, such as a European Commission adequacy decision, the EU–US Data Privacy Framework where it applies to the specific recipient, European Commission Standard Contractual Clauses, or another lawful safeguard.

You may contact info@prohiver.com for information about the transfer basis applicable to a specific recipient and, where GDPR Article 46 safeguards are used, how to obtain a copy of those safeguards or where they are made available. If a material provider or transfer mechanism changes, this information is updated to the extent required for transparency.

7. Retention

8. Your rights

Depending on the circumstances, you may have rights to information, access, rectification, erasure, restriction, data portability, objection to processing based on legitimate interests and withdrawal of consent.

Requests should be sent to info@prohiver.com. ProHiver responds without undue delay and normally within one month, subject to lawful extension rules.

You may also lodge a complaint with the Lithuanian State Data Protection Inspectorate or another competent supervisory authority in the European Economic Area.

Where Chapter II of the EU Data Act applies in the particular case, the rights to connected-product data provided by that Chapter are separate from GDPR data portability. Independently of that scope determination, ProHiver provides a free way for users to obtain their product data in a machine-readable format. A separate paid automated-access service is an additional commercial feature and does not replace that free route.

9. Automated decision-making

ProHiver currently does not use solely automated decision-making that produces legal or similarly significant effects within Article 22 GDPR.

10. Security

Security measures include access controls, encrypted data transfer, protection of sign-in information, recording of important actions, restricted administrative access, encrypted backups and other appropriate technical and organisational measures.

11. Contact and changes

This Policy may be updated when ProHiver features, providers, law or processing practices change. Where new processing requires consent, consent is obtained before that processing starts.

Contact: Prohiver, MB, Baltų pr. 37-76, LT-48238 Kaunas, Lithuania, info@prohiver.com, +370 613 17271.