Privacy Policy

AirHive MX (“AirHive”, “we”, “us”) operates the AirHive warehouse management service (the “Service”). This Privacy Policy explains what personal data we collect, why we collect it, and how we handle it.

We collect personal data in three categories:

• Account data: name, email address, password (hashed), organization name, role.
• Usage data: activity logs within the Service, IP address, device and browser metadata, audit trail of mutations.
• Customer data you upload: contacts, suppliers, inventory records, order history, and any other content your organization stores in the Service.

• To provide, operate, and improve the Service.
• To authenticate users and maintain account security.
• To communicate operational notifications, security alerts, and product updates.
• To comply with legal obligations and enforce our Terms.

We do not sell personal data, and we do not use Customer Data for advertising.

We process personal data based on (a) the consent you give when you sign up, (b) the contract we have with your organization, and (c) our legitimate interests in operating and securing the Service.

We share personal data only with:

• Service providers that help us operate the platform — each one is named in the table below and bound by a data-processing agreement.
• Authorities, when required by law, court order, or to protect rights and safety.
• A successor in the event of a merger, acquisition, or sale of assets, subject to equivalent privacy protections.

The sub-processors we currently rely on:

We update this list whenever a provider is added, replaced, or removed. We do not sell personal data, and we do not share it with advertising networks.

The MRP module includes an assistant (the “MRP Copilot”) that reads a question written in ordinary language and turns it into one of the planning queries the Service already supports.

• Who interprets it. The reading of your question is done by third-party language models: Groq runs it first, and Google Gemini takes over when Groq is unavailable. Both are listed in the sub-processor table above.
• What leaves our servers. The text you type, and — so that follow-up questions such as “tell me more about the first one” resolve to the right record — a shortened transcript of up to four previous exchanges. That transcript includes the results the assistant showed you, so it can carry order numbers, customer and supplier names, items, quantities and dates.
• What does not. The models are never connected to your database. Queries run on our own servers against your organization’s data; only the shortened transcript described above travels back as conversation context.
• It does not decide on its own. The assistant can propose a change, but every write waits for your explicit confirmation before it reaches the database.
• It leaves a trail. Each exchange is recorded in your organization’s audit log — what was asked, what was answered, and what was approved.

No decision is taken about you by automated means alone that produces legal effects or similarly significant consequences. If that ever changes, this section will say so before the change ships.

Some of our service providers operate outside Mexico. When personal data is transferred internationally, we rely on safeguards such as standard contractual clauses to protect it.

We retain personal data while your account is active and for a reasonable period afterwards to comply with legal, accounting, and dispute-resolution obligations. Customer Data can be exported or deleted on request following account closure.

We use industry-standard practices: passwords hashed with bcrypt, TLS in transit, access controls, audit logs, and role-based authorization. No system is perfectly secure — we cannot guarantee absolute security.

If you are in Mexico, the LFPDPPP grants you the right to Access, Rectify, Cancel, or Oppose the processing of your personal data (“ARCO rights”), as well as to revoke consent and limit use or disclosure. Equivalent rights apply in other jurisdictions (GDPR, CCPA, etc.).

To exercise these rights, contact us at privacy@airhivemx.com. We will respond within the timeframes required by applicable law.

We use a small number of cookies for authentication (session cookie), CSRF protection, and keeping your workspace set up. Your interface preferences (e.g. language, theme) are kept in your browser’s local storage, not in a cookie. The Service does not use third-party advertising cookies. The full list is in our Cookie Policy.

The Service is not directed to anyone under 18 years old and we do not knowingly collect data from minors. If you believe we may have collected such data, please contact us so we can delete it.

We may update this Privacy Policy from time to time. Material changes will be communicated by email or through the Service, and we will ask you to accept the new version the next time you sign in. The “Last updated” date at the top reflects the latest version.

Questions about this policy or your personal data? Contact us at privacy@airhivemx.com.