Privacy Policy

Community Hive is operated by Dan Spelt in British Columbia, Canada. This policy describes the personal information the service collects and why. Privacy questions and requests go to dan@communityhive.ca. Dan Spelt is the person responsible for these practices.

Community Hive handles personal information in line with British Columbia's Personal Information Protection Act (PIPA). Where personal information crosses a provincial or national border, the federal Personal Information Protection and Electronic Documents Act (PIPEDA) can also apply.

A strata, condo, or property manager that uploads resident information is responsible for having authority to share that information with Community Hive so the building can use the service.

Account and signup records can include:

• Name, email address, and a password hash (we do not store the password itself).
• Role, such as property manager, council member, or resident, and the community or organization the account belongs to.
• Community or company name, and the unit count used to price a subscription.
• A phone number only when a community stores one, for example for an SMS announcement.

People using the product also provide community content, such as:

• Announcements, messages, events, documents, maintenance or issue reports, and similar records a community chooses to enter.
• Household or resident details a community chooses to keep so it can reach the people who live there.

Billing is handled by Stripe. We store Stripe customer and subscription identifiers. We do not store full payment card numbers on our servers.

The public contact form sends the name, email, and message you submit so we can reply. Invitation and trial emails are service messages about an account or signup, not a newsletter.

The public demo uses sample content. It is not a live record of a customer's building.

• Run the service: sign-in, community isolation, announcements, documents, and the other features a community turns on.
• Bill the subscription, including the 30-day trial started through Stripe Checkout.
• Send service email through Resend, such as invitations, trial notices, and contact-form replies.
• Send SMS through Twilio only when a community sends an SMS announcement to numbers it has stored.
• Answer an AI request inside a signed-in community. When that feature is used, the question and relevant community document text are sent to OpenAI to produce the reply. We do not use that content to advertise to residents.
• Record errors when Sentry is configured, so we can fix failures. Error reports are sent with personal information turned off, and session cookies are redacted.
• Meet a legal duty, or protect the service and the people using it.

We do not sell personal information. There is no advertising or analytics cookie on the public site.

Each community is separated from the others. Residents are meant to see their own community. Property managers are meant to see the communities in their own portfolio. Council and management roles inside a community can see the records their role is allowed to open.

We also share information with service providers that do a specific job for us:

• Stripe, for checkout, subscriptions, and the billing portal.
• Resend, for service email.
• Twilio, when a community sends SMS.
• OpenAI, only for an AI feature someone in the community actually uses.
• Sentry (Functional Software, Inc.), only when an error-reporting key is configured.
• The database and host that store the application. Those providers may process information outside Canada, including in the United States.

We may also disclose information if the law requires it, or if it is needed to prevent abuse or harm.

Sign-in uses HTTP-only cookies. Theme and a few interface preferences stay in the browser's local storage. Details are in the Cookie Policy.

We keep account and community records while the community is using the service, and as needed for billing, security, and legal duties. A signed-in property manager can download a JSON export of that tenant's records. There is no self-serve button that deletes an entire account. Email dan@communityhive.ca to ask for access, a correction, or deletion. We may need to confirm you are allowed to make that request for the community. Some records, such as invoices, may need to be kept even after a deletion request.

If a breach creates a real risk of significant harm, we will notify the people and regulators the law requires us to notify.

Session cookies are HTTP-only, marked Secure in production, and can be revoked before they expire. No method of storage or transmission is perfectly secure.

The person who accepts these terms and creates an account must be at least 18. The service is not marketed to children. A community may still record household information about the people who live in a unit, including minors. That community decides what it is allowed to enter.

If this policy changes, the new version will be posted on this page with a new date. Questions and privacy requests go to dan@communityhive.ca.