Privacy Policy for SuperHive Beta Platform

Last Updated: 08/07/2026

1. Introduction

Welcome to the Beta version of SuperHive ("SuperHive Beta" or "the Service"), provided by AI71 ("we," "our," or "us"). AI71 is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you access and use our beta platform located at https://beta.superhive.ai71.ai/login.
This policy fulfills our disclosure obligations under applicable data protection laws, including the United Arab Emirates Personal Data Protection Law (Federal Decree-Law No. 45 of 2021 on PDPL).
This policy applies exclusively to the processing of personal data within our beta program.

2. Personal Data We Collect

We collect personal data that you voluntarily provide to us, as well as technical data collected automatically when you interact with the SuperHive Beta platform.
  1. Account and Registration Information: To create and manage your beta access, we collect your name, email address, job title, organizational affiliation, and login credentials.
  2. Beta Feedback and Communications: When you submit feedback, report bugs, participate in surveys, or contact our support team, we collect the content of those communications and your associated contact details.
  3. Automatically Collected Usage Data: To evaluate platform stability and usability, we automatically collect technical telemetry. This includes your IP address, browser type, device details, operating system, log data, and specific interactions with the platform (e.g., features accessed, timestamps, and session durations).
  4. User Uploads and AI Inputs: SuperHive processes proprietary construction intelligence data (such as CAD and BIM files). While this data is fundamentally commercial, if any personal data (such as names, creator metadata, or contact details) is embedded within your uploaded files, project descriptions, or AI prompts, it will be processed by our systems to execute the requested service session.
  5. Mandatory Notice on User Uploads: Users are strictly prohibited from uploading any personal data as part of their content, prompts, or project files. By uploading any content, you represent and warrant that you have stripped all personal data or have obtained all necessary explicit consents and lawful permissions required under applicable laws.
    In the event that personal data is accidentally or incidentally included within your uploaded content, you must inform us immediately at legal@ai71.ai so that we can take appropriate containment or data deletion measures.

3. Legal Bases and How We Use Your Personal Data

We only process your personal data with a valid legal basis under the applicable data protection laws. Because SuperHive is in a Beta testing phase, our personal data processing focuses on providing, securing, and maintaining the product.
Purpose for Processing
Categories of Data Involved
Legal Basis (GDPR / UAE PDPL)
Providing the Service: Authenticating logins, managing your account, and delivering core SuperHive functionalities.
Account Info, User Uploads.
Performance of a Contract (Necessary to provide the requested Beta access).
AI Model Training (Content & Telemetry): Utilizing anonymized usage metrics alongside uploaded content and prompts to train, fine-tune, and optimize our machine learning models.
Automatically Collected Usage Data, User Uploads / Prompts.
Legitimate Interests (Our interest in developing innovative AI technologies using non-identifiable, business-centric engineering data).
Communications: Sending system updates, feature changes, security alerts, or responding to support inquiries.
Account Info, Feedback.
Performance of a Contract or Legitimate Interests (Keeping users updated on safety and features).
Security & Compliance: Preventing fraud, detecting unauthorized access, and securing the beta ecosystem.
Usage Data, Account Info.
Legal Obligation / Legitimate Interests (Protecting our infrastructure and legal rights).

4. Artificial Intelligence and Model Training

We utilize user interactions, system prompts, and uploaded construction intelligence documents (such as CAD and BIM files) to train, fine-tune, and evaluate our artificial intelligence and machine learning models.
Because users are strictly prohibited from including personal data within their uploaded content or prompts, this pipeline is designed exclusively to process technical and commercial data. To ensure absolute compliance, AI71 deploys automated preprocessing filters and sanitization protocols designed to detect, isolate, and permanently strip out any incidentally uploaded personal data (such as names in file metadata or text fields) before any dataset is utilized for model training workflows.
Intellectual Property & De-identification Right: Once data is processed by our sanitization protocols and is completely and irreversibly anonymized, it ceases to constitute personal data under applicable laws. AI71 retains an unrestricted, perpetual, irrevocable, worldwide, and royalty-free right to use such anonymized and aggregated technical datasets for any analytical, product development, R&D, or model-training purposes

5. How We Share Your Personal Data

We do not sell, rent, or trade your personal data. We only share your data under the following scenarios:
  1. Service Providers & Sub-processors: To support our operations, we engage trusted third-party service providers, cloud infrastructure vendors, and technical partners. These entities act as our sub-processors, operating strictly in accordance with our documented instructions and under binding data protection and confidentiality agreements.
    We ensure that all listed sub-processors implement rigorous technical and organizational measures to safeguard your personal data in compliance with applicable privacy laws.
  2. Legal & Regulatory Obligations: We may disclose your data if legally compelled to do so by applicable laws, regulatory bodies, or court orders, or if necessary to safeguard the security and safety of AI71, our users, or the general public.
  3. Business Transmutation: If AI71 undergoes a merger, acquisition, structural reorganization, or asset sale, your personal data may be transferred securely as part of corporate assets.

6. International Data Transfers

While AI71 is headquartered in the United Arab Emirates (UAE), our primary data storage and cloud infrastructure is securely hosted on Amazon Web Services (AWS) servers in Mumbai, India. Consequently, your personal data will be transferred to, stored, and processed within the UAE, India, and any other international jurisdictions where our authorized sub-processors maintain operations. .
Therefore, we may need to transfer and store your personal data outside your home jurisdiction, including to countries that may not provide the same level of data protection. To safeguard your privacy, we ensure that all international transfers occur strictly under established legal frameworks.
We will only transfer your personal data outside your country of residence under one or more of the following conditions:
  1. Express Consent: You have explicitly consented to the cross-border transfer.
  2. Contractual Necessity: The transfer is required to execute or perform a contract with you (e.g., sale or lease agreements).
  3. Regulatory Adequacy: The destination jurisdiction provides a level of data protection approved by relevant authorities, or its laws are substantially similar to applicable data protection standards.
  4. Robust Third-Party Safeguards: The receiving party has contractually committed to appropriate security measures and maintains compliant, reasonable safety practices.
  5. Legal & Regulatory Permissions: The transfer is otherwise permitted, authorized, or required under applicable regulations or in connection with legal proceedings.
Where specific regional regulations apply, we enforce strict compliance mechanisms to govern our cross-border data flows:
  1. Transfers Out of the EEA: Any transfers of personal data out of the European Economic Area (EEA) to our infrastructure are executed strictly under European Commission-approved Standard Contractual Clauses (SCCs).
  2. Transfers Out of the UK: Transfers originating from the United Kingdom are protected by the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU SCCs.
  3. Transfers Out of the UAE (UAE PDPL Compliance): In accordance with Articles 22 and 23 of the UAE Personal Data Protection Law (PDPL), cross-border transfers from the UAE to our AWS Mumbai infrastructure are safeguarded through binding Data Processing Agreements (DPAs). These agreements contractually obligate our sub-processors to implement equivalent technical and organizational security controls as mandated by UAE data protection standards.
Where available, you may obtain a copy of the specific data transfer mechanisms established to protect your information. Please contact us using the details provided in the "Contact Us" section below to initiate a request.

7. Data Security and Phase Disclosures

We employ robust technical and organizational measures designed to protect your data from unauthorized access, loss, alteration, or disclosure.
However, because SuperHive is in an active Beta testing phase, users should acknowledge that beta environments are subject to continuous technical updates. While we prioritize data protection, no internet-facing application can be guaranteed to be 100% secure.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the specific processing purposes outlined in Section , up to 36 months. This retention window accounts for:
  1. The active lifecycle of the SuperHive Beta program.
  2. The finalization of product stability and engineering metrics.
  3. Compliance with applicable legal, tax, regulatory, or statutory dispute-resolution requirements.
Unless longer retention is strictly mandated by applicable laws, regulatory directives, or ongoing legal proceedings, AI71 will permanently and securely purge or irreversibly anonymize personal data upon the expiration of this 36-month window, or when the data ceases to be necessary for its specified processing purpose.
The User explicitly acknowledges and agrees that fully de-identified, structured, or anonymized technical datasets utilized for AI model refinement, optimization, and engineering telemetry do not constitute personal data and are expressly exempt from standard data deletion timelines or erasure requests

9. Your Comprehensive Privacy Rights

Depending on your regional jurisdiction, you possess legal rights regarding your personal information subject to regulatory limitations:
  1. Right to Access: You have the right to request a clear copy of the personal data we hold about you.
  2. Right to Rectification: You can request that we update or correct inaccurate or incomplete data.
  3. Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data.
  4. Right to Restriction of Processing: You have the right to request that we temporarily "freeze" the processing of your data while disputes or accuracy claims are evaluated.
  5. Right to Data Portability: You have the right to request that we export your account data in a structured, commonly used, and machine-readable format.
  6. Right to Object: You have the right to object to processing based on legitimate interests, including our right to process data for engineering telemetry or metadata optimization.
  7. Right to Withdraw Consent: Where processing is explicitly anchored to your consent, you can withdraw that consent at any time without penalty.
You may request information about these rights, or obtain a copy of the relevant transfer mechanism, by contacting us using the details provided in the “Contact Us” section of this Policy.
  1. EEA & UK Residents: We will respond to valid requests under the GDPR and UK GDPR within one (1) month of receipt. This period may be extended by up to two (2) additional months for complex or high-volume requests, provided we notify you of the extension.
  2. UAE Residents: Requests under the UAE PDPL will be handled promptly within a reasonable timeframe, in alignment with future guidelines from the UAE Data Office.
You have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction (e.g., the Information Commissioner's Office (ICO) in the UK, your local EU Data Protection Authority, or the UAE Data Office).

10. Changes to This Privacy Policy

We reserve the right to modify or replace this Privacy Policy at any time to reflect software evolution, operational updates, or changing legislative mandates. If we execute any material changes to this policy, we will proactively notify you via a prominent banner on the SuperHive platform interface or via direct email communications prior to the modification taking effect.

11. Contact Us

To execute any of your privacy rights, submit a data deletion request, or report an accidental personal data upload, please communicate directly with us at:
  1. AI71 Privacy Team Email: legal@ai71.ai
  2. Corporate Website: https://ai71.ai