Privacy Policy
BeeVibe Privacy Policy
Effective date: 2026-04-16
Last updated: 2026-07-23
Version: 1.7
1. Introduction
BV Labs, Inc. ("BV Labs," "we," "us," or "our"), owner and operator of BeeVibe (the "Services"), respects your privacy. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and your rights regarding it.
This Policy is incorporated by reference into the Terms of Service. Capitalized terms used but not defined here have the meanings given in the Terms.
If you do not agree with this Policy, do not use BeeVibe.
2. Who this Policy applies to
This Policy applies to all users of BeeVibe, including visitors, registered users, verified users (KYC'd), creators, and affiliates.
Depending on where you live, certain sections apply specifically to you (for example, our GDPR disclosures for residents of the European Economic Area and UK, and our CCPA/CPRA disclosures for California residents).
3. Information we collect
We collect the following categories of personal information, depending on how you use BeeVibe:
3.1 Information you provide directly
- Account information — email address, display name, password hash, profile details
- Wallet information — public wallet address (not private keys, which we never receive)
- KYC information (for Verified Users and Creators only) — full legal name, date of birth, government-issued ID, a selfie/photo, address, nationality, and other information required to comply with anti-money-laundering ("AML") and Know-Your-Customer ("KYC") rules
- User Content — posts, comments, reactions, images, videos, and other content you post
- Communications — messages to our support team or other users
- Payment information — for fiat deposits, payment method details (processed by our third-party payment provider; we generally do not store full card numbers)
3.2 Information we collect automatically
- Device and technical information — IP address, device type, operating system, browser type, language, time zone
- Usage information — pages viewed, features used, session duration, referring URLs
- Cookies and similar technologies — see our Cookie Policy
- Blockchain data — on-chain activity associated with your wallet is publicly visible by nature. We may index and analyze it to operate the Services.
3.3 Information from third parties
- KYC and identity verification providers — we rely on services like Persona, Sumsub, or similar providers to verify identity. These providers send us the results of verification (and may return the underlying data to us depending on our configuration).
- Wallet provider (Privy) — we receive non-sensitive metadata about the wallet provisioned for your account.
- Payment processor — we receive transaction status and risk flags (but not full card numbers in most cases).
- Fraud prevention services — we may use third-party services to help detect fraudulent, suspicious, or sanctioned activity.
- Public sources — sanctions lists, government databases, and publicly available information for compliance purposes.
3.4 Connected social accounts
If you choose to connect a third-party social account (such as YouTube, Instagram, X/Twitter, TikTok, Twitch, or LinkedIn), we receive basic public profile information about that account. This is described in detail in Section 6 (Connected social accounts).
3.5 Information we do NOT collect
- We do not collect or store your wallet private keys. Private keys are held by you, or split between you and Privy (our wallet provider). BV Labs cannot access them.
4. How we use your information
We use personal information to:
4.1 Provide the Services
- Create and maintain your account
- Provision your Privy wallet
- Process transactions and display your balances
- Enable social features (posts, comments, reactions)
- Support Creator and Affiliate programs
4.2 Security, fraud, and compliance
- Verify your identity for KYC, AML, CFT, sanctions, and tax compliance
- Detect, prevent, and investigate fraud, money-laundering, market manipulation, and violations of our Terms
- Respond to legal process (subpoenas, court orders)
- Enforce our Terms of Service and Community Guidelines
4.3 Communication
- Send you transactional emails (trade confirmations, security alerts, KYC status)
- Send you updates about the Services (new features, policy changes)
- Send you marketing or promotional materials (you may opt out at any time — see Section 9)
- Respond to your inquiries
4.4 Analytics and improvement
- Understand how users interact with BeeVibe
- Test new features
- Debug issues
- Improve the user experience
4.5 Legal basis (for GDPR / UK GDPR users)
We process personal information on the following legal bases:
- Contractual necessity — to provide the Services you sign up for
- Legal obligation — KYC, AML, tax, and other regulatory requirements
- Legitimate interests — security, fraud prevention, service improvement, marketing to existing users (where compatible with their expectations)
- Consent — certain optional uses (marketing, cookies), which you can withdraw at any time
5. When we share information
We share personal information only in the following circumstances:
5.1 With service providers
Vendors who process information on our behalf, including:
- Privy — wallet infrastructure
- KYC providers (Persona / Sumsub / similar) — identity verification
- Payment processors — fiat deposits
- Cloud hosting and database — Supabase, Replit, Google Cloud Platform, AWS, or similar
- Analytics providers — platform usage analytics
- Email providers — transactional and marketing email
- Customer support tools — to respond to your inquiries
All service providers are bound by contractual obligations to protect your information and use it only for the purposes we specify.
5.2 For legal and compliance purposes
We may share information:
- In response to valid legal process (subpoena, court order, search warrant)
- To comply with sanctions, AML, CFT, and other applicable law
- To detect, prevent, or investigate fraud, security incidents, or violations of our Terms
- To protect the rights, property, or safety of BeeVibe, our users, or the public
- As required by tax reporting obligations (e.g., IRS Form 1099, if applicable)
For law enforcement requests, please contact legal@beevibe.io.
5.3 With other users
- Public profile information (display name, profile photo, bio) is visible to other users.
- User Content you post is visible as configured (public posts visible to all, comments to anyone viewing the post, etc.).
- Connected social account information (such as a connected YouTube channel name or Instagram username) is displayed on your public BeeVibe profile, as described in Section 6.
- Wallet addresses and on-chain activity are visible on the underlying blockchain (Arbitrum) by nature of how blockchains work.
We do not share your private KYC information (government ID, selfie, full legal name, address) with other users.
5.4 Business transfers
If BV Labs is involved in a merger, acquisition, sale of assets, or bankruptcy, personal information may be transferred to the successor entity. You will be notified before your information becomes subject to a different privacy policy.
5.5 With your consent
Any other sharing is with your explicit consent.
6. Connected social accounts (Google/YouTube, Instagram/Meta, and other platforms)
BeeVibe lets creators connect third-party social accounts — including YouTube, Instagram, X/Twitter, TikTok, Twitch, and LinkedIn — to verify that they genuinely control those accounts. This protects our users from impersonation. Connecting an account is always optional and is initiated by you.
6.1 Google and YouTube user data
When you connect your YouTube account, BeeVibe authenticates with Google using OAuth and the https://www.googleapis.com/auth/youtube.readonly scope. The following applies specifically to Google user data:
- What Google user data we access. We make a single, read-only request to the YouTube Data API (
youtube/v3/channels?mine=true) and access only your YouTube channel's public identity: the channel ID, the channel title (name), the channel thumbnail/profile image, and the subscriber count. We do not access your videos, video content, comments, captions, watch history, private or unlisted content, Google email, contacts, or any other Google or YouTube data.
- How we use Google user data. We use this data for a single purpose: to confirm that you control the YouTube channel you are connecting, and to display your channel name and subscriber count on your public BeeVibe creator profile as proof of authenticity. We do not use Google user data for advertising, we do not use it to develop, improve, or train generalized or machine-learning/AI models, and we do not use it for any purpose other than the verification and display described here.
- Who we share, transfer, or disclose Google user data with. We do not sell, rent, or trade Google user data, and we do not transfer it to third parties for their own purposes. Your channel name and subscriber count are shown publicly on your BeeVibe profile because that is the feature's purpose. The data is stored only on infrastructure providers that process it solely on our behalf and under contractual confidentiality and data-protection obligations (our database provider, Supabase, and our hosting provider, Replit / Google Cloud Platform, both located in the United States). We may disclose Google user data only where required by law or valid legal process.
- How we protect Google user data (data protection mechanisms). Google user data is transmitted only over encrypted connections (TLS/HTTPS) and stored with encryption at rest. OAuth access and refresh tokens are stored securely, and access is restricted to the systems and personnel that require it under least-privilege access controls. We maintain monitoring and regular security reviews of the systems that hold this data.
- Retention and deletion of Google user data. We retain your Google user data only for as long as your YouTube account remains connected to BeeVibe. You can disconnect at any time from BeeVibe Settings → Your Social Account, which immediately and permanently deletes the stored channel data and the OAuth access/refresh tokens from our systems. Deleting your BeeVibe account also deletes this data. You may additionally review or revoke BeeVibe's access to your Google Account at any time at https://myaccount.google.com/permissions.
Limited Use. BeeVibe's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
6.2 Instagram/Meta and other connected platforms
When you connect Instagram, BeeVibe uses Instagram Business Login with the instagram_business_basic permission and accesses only your Instagram professional account's basic profile (account ID, username, and profile picture) to confirm ownership and to display your username and profile picture on your BeeVibe profile. The same principles apply to X/Twitter, TikTok, Twitch, and LinkedIn connections: we access only the basic public profile needed to confirm you control the account and to display it, we do not post on your behalf without a separate action initiated by you, and we do not sell this data. You can disconnect any platform at any time from Settings → Your Social Account, which deletes the stored profile data and access tokens. For Instagram/Meta connections, our handling of Platform Data also complies with the Meta Platform Terms and Developer Policies.
7. International data transfers
BV Labs is based in the United States, and our service providers may be located in the United States, the European Economic Area, the United Kingdom, Canada, or elsewhere. By using BeeVibe, you understand that your information may be transferred to and processed in countries whose data-protection laws may differ from yours.
For users in the European Economic Area, United Kingdom, or Switzerland, we use Standard Contractual Clauses or other appropriate safeguards for transfers of personal information to the United States and other third countries.
8. Data retention
We retain personal information:
- As long as your account is active
- For a reasonable period after account closure, to comply with legal, tax, accounting, fraud prevention, and dispute resolution obligations (generally 5–7 years for KYC records, per AML law)
- As required by applicable law
Data from connected social accounts (including Google/YouTube data) is retained only while the account is connected and is deleted when you disconnect it or delete your BeeVibe account, as described in Section 6.
We may retain de-identified or aggregated information indefinitely. On-chain data (including your public wallet address and transaction history) remains publicly visible on the blockchain after your account is closed, as it is outside our control.
9. Your rights and choices
9.1 General rights (all users)
- Access — request a copy of the personal information we hold about you
- Correction — correct inaccurate information
- Deletion — request deletion of your information (subject to legal retention requirements)
- Opt-out of marketing — you may unsubscribe from marketing emails via the link in each email or by emailing privacy@beevibe.io
9.2 EEA / UK GDPR rights
In addition to the above, users in the EEA, UK, or Switzerland have the right to:
- Portability — receive your personal information in a structured, machine-readable format
- Restrict processing — in limited circumstances
- Object to processing — including for direct marketing and profiling
- Withdraw consent — where processing is based on consent
- Lodge a complaint with your local Data Protection Authority
9.3 California (CCPA/CPRA) rights
California residents have additional rights, including:
- Right to know — what personal information we collect, use, disclose, and sell
- Right to delete — subject to exceptions under California law
- Right to correct — inaccurate personal information
- Right to opt out of "sale" or "sharing" — we do not "sell" your personal information for money. Certain uses of cookies and analytics may constitute "sharing" for cross-context behavioral advertising under CCPA. You may opt out via our cookie banner.
- Right to limit use of sensitive personal information — we use sensitive personal information (such as KYC documents) only as necessary for the Services and compliance, and not for purposes you'd need to opt out of.
- Non-discrimination — we will not discriminate against you for exercising your rights.
To exercise any right, email privacy@beevibe.io from the email associated with your account, or use the in-app privacy controls.
9.4 Verification
Before fulfilling a rights request, we verify your identity. This usually involves confirming control of your account email or wallet.
10. Security
We implement technical and organizational measures to protect your information, including:
- Encryption in transit (TLS) and at rest
- Access controls and least-privilege principles for employees
- Secure KYC storage with restricted access
- Restricted, logged administrative access under documented internal procedures
- Regular security reviews and monitoring
No system is perfectly secure. You also have a role in security: choose a strong password, enable any offered two-factor authentication, protect your wallet credentials, and notify us immediately of any suspected unauthorized access at support@beevibe.io.
11. Children's and minors' privacy
BeeVibe operates under a two-tier age model:
- Social tier: open to users 16 years old and above (or the local age of majority if higher).
- Trading tier (deposit, wallet, trade): restricted to users 18 years old and above (or local age of majority if higher).
We do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided us information, please contact privacy@beevibe.io and we will promptly delete it and terminate the account.
For users aged 16-17, we collect only the limited information necessary to operate the social tier (account, posting, social interactions). KYC information and full payment details are not collected from this group, as they cannot use the trading tier.
Where applicable, additional protections apply to information about users under 18 under laws like COPPA (United States), the GDPR Recital 38 (European Union), and Age Appropriate Design Codes in the United Kingdom and California.
12. Third-party services
BeeVibe may contain links to third-party websites or integrate third-party services (e.g., Privy, KYC providers, fiat payment processors). This Privacy Policy does not apply to those third parties. We encourage you to review their privacy policies separately.
13. Blockchain and public data
Certain information you provide to BeeVibe is published on public blockchains and cannot be deleted. This includes:
- Your public wallet address
- Transactions involving your wallet
- Identity Tokens you own (for Creators, publicly visible)
Before transacting, understand that blockchain activity is inherently public. We cannot delete or modify information once it is recorded on a public blockchain.
14. Changes to this Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email and in-app notice. The "Last updated" date at the top of this Policy indicates when it was last revised.
15. Contact
For privacy inquiries:
If you are in the EEA or UK, you may also lodge a complaint with your local Data Protection Authority.
By using BeeVibe, you acknowledge that you have read and understand this Privacy Policy.