This Data Protection Policy explains how Hibro protects user data and describes the technical, organizational, and operational measures we use to safeguard information during collection, transmission, storage, and processing.

This policy applies to Hibro websites, applications, desktop clients, enterprise workspaces, and related services.

2. Data Protection Principles

Hibro follows the following principles when protecting user data.

2.1 Data Minimization

Hibro collects and processes information that is necessary to provide and improve our Services.

We aim to minimize unnecessary data collection and do not use user data for unauthorized purposes.

2.2 Transparency and Control

Users have the right to understand:

• How data is collected;
• How data is used;
• How data is protected;
• How they can manage their information.

2.3 Security Protection

Hibro applies reasonable technical and organizational measures to reduce risks including:

• Data breaches;
• Unauthorized access;
• Data loss;
• Data modification;
• Security attacks.

2.4 User Data Control

Users retain control over content they create, upload, and manage through Hibro Services.

Hibro does not sell user data or use user content for unrelated commercial purposes without authorization.

3. Data Security Measures

3.1 Data Transmission Security

Hibro uses appropriate security technologies to protect data during transmission, including:

• Secure communication protocols;
• Encrypted connections;
• Authentication mechanisms.

These measures help reduce the risk of unauthorized interception during data transmission.

3.2 Data Storage Security

Hibro applies appropriate measures to protect stored information, including where applicable:

• Data encryption;
• Access controls;
• Secure backups;
• Storage isolation;
• Security monitoring.

3.3 Identity Authentication and Access Control

Hibro uses identity and permission management mechanisms to protect user accounts.

These measures include:

• User authentication;
• Permission controls;
• Login protection;
• Suspicious activity detection.

For enterprise workspaces, administrators may configure member permissions according to organizational requirements.

3.4 Security Monitoring

Hibro continuously monitors security conditions, including:

• Service availability;
• Unusual access activities;
• Security events;
• Potential vulnerabilities.

When risks are identified, Hibro takes appropriate measures to investigate and mitigate them.

4. Protection of Communication and Collaboration Data

Hibro provides communication, document, file, and collaboration capabilities.

Regarding user content:

• Messages, documents, and files created by users belong to the users or authorized organizations;
• Hibro processes such content only as necessary to provide the Services;
• Hibro does not publicly disclose user content without authorization;
• Hibro does not sell user content.

For enterprise workspaces:

• Administrators may manage workspace permissions;
• Organizations may configure access controls according to business needs;
• Member access is determined by workspace management settings.

5. AI Data Protection

Hibro provides AI-powered features, including AI assistants and AI agents.

When using AI Services:

• User-provided information may be processed to generate AI responses or results;
• AI processing is limited to providing the requested functionality;
• Users should avoid submitting unnecessary sensitive information;
• Users are responsible for reviewing AI-generated outputs before use.

Hibro does not use user content to train AI models without appropriate authorization or consent.

Different AI features may apply different processing methods depending on service requirements.

6. Third-Party Services and Data Processing

Hibro may use verified third-party service providers, including:

• Cloud infrastructure providers;
• AI model providers;
• Payment service providers;
• Authentication services;
• Analytics services.

We require third-party providers to:

• Follow applicable data protection requirements;
• Implement reasonable security measures;
• Process data only within authorized purposes.

7. Data Access Management

Hibro applies access management based on business requirements.

Our security principles include:

• Least privilege access;
• Role-based permissions;
• Activity logging;
• Regular security reviews.

Only authorized personnel, systems, or service providers may access necessary data within approved scopes.

8. Data Retention and Deletion

Hibro retains information only as necessary to provide Services, comply with legal obligations, resolve disputes, and maintain security.

When:

• Users delete accounts;
• Service relationships end;
• Data is no longer required;

Hibro processes relevant data according to applicable laws and internal procedures.

9. International Data Protection

Hibro provides Services to users worldwide.

Depending on your location, data may be processed or stored in different countries or regions.

Hibro takes reasonable measures to ensure data processing complies with applicable regulations, including where applicable:

• GDPR;
• UK GDPR;
• CCPA/CPRA;
• Other applicable privacy regulations.

10. Data Security Incident Response

If a security incident may affect user data, Hibro will:

• Investigate the cause of the incident;
• Take appropriate mitigation measures;
• Provide notifications where required by applicable laws;
• Continue improving security protections.

11. Enterprise Data Protection

For enterprise customers, Hibro may provide:

• Enterprise workspace management;
• Member permission controls;
• Data access management;
• Security configuration capabilities;
• Enterprise-level support.

Organizations may establish internal data governance policies according to their business requirements.

12. User Responsibilities

Users should also take reasonable measures to protect their own data security, including:

• Keeping account credentials secure;
• Not sharing authentication information;
• Using secure devices;
• Avoiding uploading illegal or high-risk content.

13. Updates to This Policy

Hibro may update this Data Protection Policy due to:

• Product changes;
• Technology developments;
• Changes in applicable laws and regulations.

Updated versions will be published on the Hibro website.

14. Contact Us

If you have any questions regarding Hibro Data Protection Policy, please contact us:

Website:

https://www.hibro.io