Learn how HYVOR complies with various laws and regulations
HYVOR is committed to complying with all laws and regulations that apply to our business. We
are also committed to helping our customers comply with their own legal obligations. This
page provides information about the legal compliance of HYVOR and its products. If you have
any questions, please contact us at [email protected].
At HYVOR, we use the General Data Protection Regulation (GDPR) as our primary guideline for
designing our software and websites. Our commitment to GDPR principles ensures robust data
protection for all users:
Data Protection by Design: Privacy measures are integrated from the
earliest stages of development, ensuring that data protection is a core component of our
products rather than an afterthought.
Lawful Processing: All data processing activities have a valid legal
basis under GDPR, such as user consent or legitimate business interests, which we
clearly communicate to our users.
User Rights: We facilitate the easy exercise of GDPR rights, including
access, rectification, erasure, and data portability, empowering users to control their
personal information.
Transparency: Clear and comprehensive privacy policies are provided for
all products, detailing how we collect, use, and protect user data in plain,
understandable language.
Data Minimization: We collect only the data necessary for specific
purposes and establish clear retention periods, after which data is securely deleted to
minimize privacy risks.
Breach Notification: Robust procedures are in place for detecting,
investigating, and reporting data breaches promptly to both authorities and affected
users as required by GDPR.
International Transfers: When transferring data outside the EEA, we
ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to
maintain GDPR-level protection
Vendor Management: We carefully select and work only with
GDPR-compliant third parties, implementing Data Processing Agreements to ensure
consistent data protection standards. See our subprocessors.
Data Processing Agreement (DPA)
HYVOR offers a Data Processing Agreement (DPA) to customers who require one to comply with
GDPR. It outlines the data protection obligations of both parties. Please download the DPA
from the link below, and send a signed copy to [email protected] for our signature.
While GDPR is our baseline, we adapt our practices to comply with other international data
protection regulations as needed, ensuring comprehensive global compliance. We have assessed
and validated our practices to ensure compliance with the following key data protection
regulations:
California Consumer Privacy Act (CCPA)
Brazil's General Data Protection Law (LGPD)
Canada's Personal Information Protection and Electronic Documents Act (PIPEDA)
Australia's Privacy Act
If you have any questions regarding our compliance with specific data protection laws
(above-mentioned or others), please contact us at [email protected].
Accessibility
We strive to make our products accessible to all users, including those with disabilities.
Our efforts align with:
Web Content Accessibility Guidelines (WCAG) 2.1
Americans with Disabilities Act (ADA) standards
If you find any accessibility issues with our products, please use our support page to report them.
DMCA
HYVOR respects intellectual property rights and complies with the Digital Millennium
Copyright Act (DMCA). We have established a clear process for addressing copyright
infringement claims:
If you believe your copyrighted work has been used on our platforms without
authorization, please submit a DMCA takedown notice.
We promptly review all properly submitted notices and take appropriate action, including
removing or disabling access to the allegedly infringing content.
We have a policy to terminate accounts of repeat infringers when appropriate.
We also consider counter-notices from users who believe their content was wrongly
removed.
To submit a DMCA notice or for any copyright-related inquiries, please contact us at [email protected]. Please ensure your notice includes all required information as specified by the DMCA to
facilitate swift action.
Content Moderation
At HYVOR, we take content moderation seriously to maintain a safe and respectful environment
across our platforms. Our approach to moderation is product-specific:
Each HYVOR product has its own set of moderation policies tailored to its unique
features and user base. See the respective product documentation for details.
These policies are designed to prevent abuse, protect users, and ensure compliance with
applicable laws and regulations.
Our moderation practices may include automated filtering, user reporting systems, and
human review processes.
Compliance guide for developers
Here are some compliance guidelines for developers using HYVOR products:
Hyvor Talk
Hyvor Talk comes with many customization options including privacy settings. Make sure
to adjust them according to your needs. This includes:
Enabling or disabling IP address collection.
Configuring guest commenting data collection.
Choosing a spam detection service.
If you are using Single Sign-On (SSO) with Hyvor Talk, ensure that you integrate our
Console API to delete
SSO user data when they are deleted from your system. Updating SSO user data happens automatically
when the user logs in next time.
Hyvor Talk only uses local storage to store essential data. No non-essential data is
stored for analytics or tracking purposes. In most cases, using Hyvor Talk alone does not necessitate a cookie consent banner. However, we recommend consulting with a legal
professional to determine if you need one.
Hyvor Blogs offers extensive customization options, giving you complete control over
your blog's content and design. All official themes are privacy-focused and free from
tracking scripts. When using custom themes, carefully review the code to ensure
compliance with your privacy policy.
For most blogs, it's essential to have a comprehensive privacy policy that details the
types of data collected, the purpose of collection, and how the data is used and stored.
Before implementing any third-party code on your blog, thoroughly review it for
potential privacy issues and ensure it aligns with relevant privacy regulations such as
GDPR or CCPA.
Conduct periodic reviews of your blog's privacy practices and stay informed about
changes in privacy laws. Clearly communicate your privacy practices to your readers and
make your privacy policy easily accessible on your blog.
We regularly review and update our compliance practices to ensure they meet evolving legal
requirements and industry best practices. Our team stays informed about new regulations that
may affect our operations and our users. For specific inquiries about our compliance efforts
or to report a compliance concern, please contact our dedicated compliance team at
[email protected].