Privacy Policy
Your privacy is our top priority. Learn how we protect and handle your data.
Last Updated: September 7, 2025
Our Privacy Commitment
Hexbon is built on a zero-knowledge architecture. This means we cannot access, read, or decrypt your stored data. Your privacy is protected by design, not just by policy.
1. Information We Collect
Account Information
- • Email address (the one you sign in with, or from your OAuth provider)
- • Display name (from your OAuth provider, or derived from your email)
- • Profile picture URL (optional)
- • Account creation date
Usage Information
- • Login timestamps
- • IP addresses (for security)
- • Browser and device information
- • Session duration
API Access Information
- • API keys (encrypted, generated upon request)
- • API access settings (enabled/disabled, read/write permissions)
- • Temporary API tokens (valid for 60 minutes)
Support Ticket Information
- • Ticket title, subject, and description
- • Conversation history and replies
- • Ticket status and timestamps
Communication Preferences
- • Email notification settings
- • Promotional email opt-in/opt-out status
- • News and updates subscription preferences
What We DON'T Collect
- Your stored data: All your data is encrypted before it reaches our servers
- Encryption keys: Only you have access to your encryption keys
- Passwords: We never ask for a password - sign-in uses one-time email codes or OAuth, and we store no sign-in password
- Personal information: Beyond what's required for authentication
2. How We Use Your Information
Service Provision
To provide you with secure access to your encrypted data storage account.
Security
To detect and prevent unauthorized access, fraud, and other security threats.
Service Improvement
To monitor service performance and reliability. We do not use analytics or behavioral tracking.
Communication
To send important service updates, security alerts, and respond to your inquiries.
3. Data Security
Encryption
All data is encrypted using AES-256 encryption before transmission and storage. Encryption keys are derived from your authentication and never stored on our servers.
Infrastructure
Our servers are hosted in secure data centers with physical security, redundancy, and regular security audits. All connections use TLS encryption.
Chrome Extension
If you use the Hexbon Chrome Extension, your encrypted data is synced and stored locally within the extension. All decryption happens client-side in your browser. The extension does not transmit your decrypted data or encryption keys to our servers.
4. Data Sharing
We DO NOT share your data
We do not sell, rent, or share your personal information with third parties for marketing purposes. We may only share data in the following limited circumstances:
- • With your explicit consent
- • To comply with legal obligations
- • To protect against fraud or security threats
- • With service providers who assist in our operations (under strict confidentiality agreements)
5. Your Rights
Access & Portability
You can access and export your data at any time through your account dashboard.
Deletion
You can delete your account and all associated data at any time from your account settings.
Correction
You can update your account information through your profile settings or OAuth provider.
Consent Withdrawal
You can withdraw consent for data processing by deleting your account or contacting us.
6. Data Retention
| Data Type | Retention Period | Purpose |
|---|---|---|
| Account Information | Until account deletion | Service provision |
| Encrypted Data | Until account deletion | Storage service |
| Usage Logs | 90 days | Security and abuse prevention |
| Security Logs | 1 year | Security incident investigation |
| API Tokens | 60 minutes | API authentication |
| Support Tickets | Until resolved + 1 year | Customer support |
7. International Data Transfers
Your data may be processed in countries other than your own. We ensure that appropriate safeguards are in place to protect your data, including standard contractual clauses and adequacy decisions where applicable.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through our service. The updated policy will be effective when posted.