Legal · Privacy

Privacy Policy

How FutureHives collects, uses and protects personal data across the ContractHive platform.

Effective date: 1 January 2026

1. Who we are

ContractHive is the AI platform for IFRS-compliant finance teams. The platform is operated by FutureHives ("FutureHives," "we," "us," "our"), with offices in Dubai (United Arab Emirates), Islamabad (Pakistan) and Sydney (Australia). For the purposes of applicable data protection law, FutureHives is the controller of personal data processed through this website and the ContractHive platform — except where otherwise stated below.

Our Estimator 9 product (IFRS 9 Expected Credit Loss automation) is developed by FineIT, our technology partner. Where Estimator 9 customer data is processed by FineIT, FineIT acts as a sub-processor under our instructions.

2. What this policy covers

This policy describes how we handle personal data when you (a) visit this website, (b) submit a contact, demo or trial form, (c) sign up for or use the ContractHive platform, or (d) otherwise interact with us. It applies to all three products on the platform — ContractHive, Estimator 9, and NextHive Cash Forecasting.

Where you are an enterprise customer using the platform, the processing of your business data (such as lease contracts, loan books, or cash flow records) is governed by your customer agreement and any applicable Data Processing Addendum (DPA), not this policy alone.

3. What data we collect

We collect the following categories of personal data:

  • Contact details you give us: when you submit a form (contact, demo, free trial), we collect your name, work email, phone number (optional), company, role/title, product interest, and any message you send.
  • Account information: if you create an account, we collect your authentication identifiers and basic profile information.
  • Customer business data: if you use the platform as a customer, you (or your team) upload lease contracts, loan book records, cash flow data, or related files. We process this data on your instructions to deliver the service.
  • Usage data: when you visit the website or use the platform, we collect technical data (device, browser, IP address, pages visited, referring URL) via analytics — see Cookies & analytics.

4. How we use your data

We use personal data to:

  • Respond to inquiries and demo or trial requests.
  • Provide the ContractHive, Estimator 9 and NextHive products.
  • Send service-related communications (e.g. account, billing, support, security).
  • Improve the website and the platform — including measuring which features are used.
  • Comply with legal obligations and protect our rights.

We do not sell personal data, and we do not use it to train third-party AI models.

5. Lawful basis for processing

Where applicable data protection law requires a lawful basis (such as the EU/UK GDPR or the UAE Personal Data Protection Law), we rely on one of the following:

  • Consent — when you submit a form and tick the consent box, or accept analytics cookies.
  • Performance of a contract — to deliver the platform to a customer or respond to a pre-contractual request.
  • Legitimate interests — for example to keep the platform secure, prevent abuse, and improve the service. Where we rely on this basis, we balance it against your rights and freedoms.
  • Legal obligation — where required by law.

6. Who we share data with

We share personal data only with parties who help us run the platform or comply with our legal obligations. Our current categories of recipients include:

  • FineIT — our technology partner for the Estimator 9 product. Where Estimator 9 customer data is processed by FineIT, FineIT acts as a sub-processor under our instructions and is bound by equivalent data protection obligations.
  • Brevo — for transactional email delivery (e.g. relaying form submissions and service emails).
  • Google LLC — Google Analytics 4 (website usage analytics) and Google Fonts (web font delivery).
  • Cloud hosting and infrastructure providers — for hosting and operating the platform.
  • Professional advisers — lawyers, auditors and accountants where necessary for our legitimate interests or legal obligations.
  • Government, regulators or law enforcement — where required by law.

A current list of sub-processors is available on request. Enterprise customers can request a Data Processing Addendum and an updated sub-processor list as part of their procurement review.

7. International transfers

ContractHive is operated from offices in Dubai and Islamabad, with additional operations in Sydney. Personal data we collect may be processed in the United Arab Emirates, Pakistan, and other jurisdictions where our sub-processors operate (including the European Union, United Kingdom, United States and elsewhere).

When we transfer personal data internationally, we rely on appropriate safeguards under the applicable law of your jurisdiction — for example, Standard Contractual Clauses for transfers from the European Economic Area or the United Kingdom, or equivalent mechanisms under the UAE Personal Data Protection Law.

8. How long we keep data

We keep personal data only for as long as is necessary for the purposes set out above, and for a reasonable period afterwards to meet legal, accounting or reporting requirements. Form submission data is typically retained for as long as we are in active conversation with you and for a limited period afterwards. Customer business data is governed by your customer agreement.

9. Your rights

Depending on where you are located, you may have the following rights in respect of your personal data:

  • Access — request a copy of the personal data we hold about you.
  • Correction — ask us to correct inaccurate or incomplete personal data.
  • Deletion — ask us to delete personal data, subject to applicable exceptions.
  • Restriction or objection — ask us to restrict or stop certain processing.
  • Portability — receive personal data in a structured, machine-readable format.
  • Withdraw consent — where we rely on consent, you can withdraw it at any time.
  • Complain to a regulator — you have the right to lodge a complaint with a data protection authority in your jurisdiction.

To exercise any of these rights, write to us at [email protected]. We may need to verify your identity before acting on your request.

10. Cookies & analytics

This website uses a small number of cookies and similar technologies:

  • Essential cookies — required for the website to function (for example, to remember your form state or to deliver the page securely).
  • Analytics cookies — we use Google Analytics 4 to understand which pages are visited and how visitors find us. This data is processed in aggregated form.

You can disable cookies through your browser settings. Disabling analytics cookies will not affect your ability to use the website.

11. Security

We protect personal data with industry-standard security measures including encryption in transit and at rest, role-based access controls, and regular security review. The ContractHive platform is aligned to SOC 2 controls. No system is 100% secure — if you believe your interaction with us is no longer secure, please contact us immediately.

12. Children

ContractHive is a B2B service for finance, risk and treasury professionals. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided personal data to us, please contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. When we do, we will update the "Effective date" at the top of this page. For material changes that affect your rights, we will take reasonable steps to notify you in advance.

14. How to contact us

If you have any questions about this privacy policy or how we handle personal data, please contact us:

FutureHives, P.O. Box 299221, Dubai, United Arab Emirates

Privacy questions?

For questions about this policy or to exercise your rights, write to us at [email protected].