Privacy Policy
Last updated: June 30, 2025
1. Introduction
HexaFloww ("we", "our", or "us") operates a B2B marketing platform that enables businesses to manage email campaigns, WhatsApp broadcasts, social media inboxes, and audience segmentation. This Privacy Policy explains how we collect, use, and protect information processed through our platform.
Questions? Contact us at jigar@hexagn.in.
2. Information We Collect
2.1 Platform Administrator Data
When you register as an administrator, we collect your name, email address, and encrypted password to provide access to the platform.
2.2 Marketing Contact Data
The platform stores contact information (names, email addresses, phone numbers, and custom attributes) that you import or collect for your marketing activities. You are the data controller for this information; we process it solely on your behalf.
2.3 Communication Data
We store messages exchanged via email, WhatsApp, Facebook Messenger, and Instagram Direct to provide inbox and analytics features. This includes message content, timestamps, and delivery status.
2.4 Tracking & Analytics
We collect email open events, link click events, and device/email-client metadata using HMAC-secured tracking pixels and redirect links. Bot traffic is filtered before recording.
2.5 Meta / Social Platform Data
If you connect Facebook or Instagram accounts, we receive OAuth tokens, page data, lead ad submissions, and conversation threads from Meta's Graph API. We only request permissions you have explicitly granted.
3. How We Use Information
- Delivering email, WhatsApp, and social media campaigns on your behalf
- Providing inbox, segmentation, and analytics features
- Running AI-assisted reply suggestions and lead-scoring (processed in-memory; not stored beyond the result)
- Sending transactional notifications (handoff alerts, digest emails) to your admin team
- Maintaining security, preventing abuse, and debugging platform issues
- Complying with Meta's Platform Policies and applicable law
We do not sell personal data. We do not use contact data for our own marketing.
4. Data Sharing
We share data only as necessary:
- Email service providers — AWS SES / SMTP relays to deliver campaigns
- Meta Platforms — to send/receive messages and sync lead data
- WhatsApp Cloud API — to send and receive WhatsApp messages
- AI providers — Anthropic, OpenAI, Google — only the text of the conversation is sent; no contact PII beyond what appears in the message
- Hosting infrastructure — servers and databases under confidentiality agreements
5. Data Retention
We retain marketing contact data, campaign records, and message history for as long as your account is active or as needed to provide services. Unsubscribed contacts are moved to the suppression list and are not contacted again.
Email open and click tracking events are retained for analytics purposes and may be kept for up to 24 months. You may request deletion at any time (see Section 7).
6. Security
We protect data using industry-standard measures: encrypted connections (TLS), bcrypt-hashed passwords, HMAC-signed tracking tokens, and session encryption. Database access is restricted to authorised services. No security measure is perfect — please notify us immediately of any suspected breach at jigar@hexagn.in.
7. Your Rights & Data Deletion
Depending on your jurisdiction, you or the contacts in your database may have rights to access, correct, or delete personal data. To exercise these rights:
- Submit a request via our Data Deletion page
- Email jigar@hexagn.in
Meta users can also trigger data deletion from their Facebook settings. We honour those callbacks automatically within 30 days.
8. Cookies
The platform uses a single session cookie to maintain your login state. No third-party advertising cookies are used. Analytics tracking is handled via server-side pixel requests, not browser cookies.
9. Changes to This Policy
We may update this policy periodically. Material changes will be communicated via email to registered administrators. Continued use after the effective date constitutes acceptance of the revised policy.
10. Contact
HexaFloww
Email: jigar@hexagn.in