Rights & Permissions Policy

Overview

MyndHyve Inc. uses Role-Based Access Control (RBAC) to manage permissions across the platform. This policy describes the available roles, their permissions, and how access control is enforced.

1. Standard Roles

Owner

Full administrative control including billing, team management, and all platform features. There must be at least one owner per organization.

Admin

Can manage team members, configure settings, and access all features except billing and ownership transfer.

Editor

Can create, edit, and publish content within assigned workspaces. Cannot manage team members or organization settings.

Viewer

Read-only access to assigned workspaces and content. Cannot create or modify content.

2. Permission Categories

• Billing & Subscription — Owner: Full; Admin: View; Editor: None; Viewer: None
• Team Management — Owner: Full; Admin: Full; Editor: None; Viewer: None
• Organization Settings — Owner: Full; Admin: Full; Editor: None; Viewer: None
• Workspace Management — Owner: Full; Admin: Full; Editor: Create/Edit; Viewer: View
• Content Creation — Owner: Full; Admin: Full; Editor: Full; Viewer: None
• AI Features — Owner: Full; Admin: Full; Editor: Full; Viewer: Limited
• API Keys — Owner: Full; Admin: Full; Editor: Own keys; Viewer: None
• Audit Logs — Owner: Full; Admin: Full; Editor: Own actions; Viewer: None

3. Audit & Logging

All permission changes and access events are logged. Audit logs include:

• User identity and role at time of action
• Action performed and resources affected
• Timestamp and IP address
• Success or failure status

Audit logs are retained for 90 days and available to Owners and Admins.

4. Appeals

If you believe your access has been restricted in error, contact your organization's Owner or Admin. For platform-level access concerns, contact appeals@myndhyve.ai.