Privacy Policy

HexFlow is a business management platform operated by DataHex Digital Solutions LLP ("we", "us"). This policy explains what personal data we process when you visit hexflow.in, sign in to a workspace, or use the product, and the choices you have.

• Account data — your name, email address and role, provided by you or your workspace administrator.
• Workspace content — the business records your organization creates in the product (contacts, deals, invoices, projects, HR records). Your organization is the controller of this data; we process it on their behalf.
• Usage & device data — sign-in events, IP address and browser information, used for security and reliability.
• Email delivery data— delivery, bounce and open events for notification emails we send on your organization's behalf.

• To provide, secure and improve the service.
• To send sign-in codes and workspace notifications (never marketing without consent).
• To prevent abuse, enforce our terms and comply with legal obligations.

We do not sell personal data, and we do not use your workspace content for advertising.

We use only strictly necessary cookies: an encrypted session cookie that keeps you signed in across your organization's workspace addresses. There are no advertising or cross-site tracking cookies.

Data is stored with vetted infrastructure providers — database and file storage on Google Cloud (asia-south1, Mumbai) and MongoDB Atlas, transactional email via Amazon SES (ap-south-1), and content delivery via Cloudflare. Every organization's data is tenant-isolated and encrypted in transit and at rest.

We keep personal data for as long as your workspace is active or as required by law. You may request access, correction or deletion of your personal data — contact your workspace administrator for workspace content, or us directly for account data.

Questions about this policy: info@datahex.co.