Managing and deleting your data

What HexaHQ holds

Three things, and they are separate. You can remove any of them without touching the others.

• Your sign-ins. When you connect a tool, the credential is stored on HexaHQ's servers, never in your AI conversation. It lets HexaHQ act in that tool as you.
• A record of what ran. Each action is recorded on a run timeline: which capability ran, who asked for it, and when. See Runs.
• What you and your AI wrote down. The knowledge, workflows, and capabilities built up as you work.

Information HexaHQ reads from a connected tool is fetched to carry out the request you made and is not kept as a copy afterwards.

See what is connected

Open the Hub and go to Connectors. Every tool is listed with its status and, where a tool signs each person in individually, whose account is connected. Select a tool to see the permissions it was granted and the capabilities that use it.

Disconnect, revoke, delete: three different actions

These are easy to confuse, and they do different things.

• Disconnect in HexaHQ removes your saved sign-in for a tool. HexaHQ can no longer act in that tool as you. Open Connectors in the Hub, select the tool, and use the Manage menu. This affects your own sign-in only. Teammates keep theirs, and the tool stays set up for your organization.
• Revoke at the source ends the grant on the other side, in the tool's own account settings. Do this if you want the provider's own record of the connection gone as well.
• Delete your data removes what HexaHQ holds. Send a privacy request and we will action it.

Disconnecting does not delete the record of work already done, and deleting your data does not by itself revoke a grant at the provider. If you want both, do both.

Revoking Google access

To end HexaHQ's access from Google's side, open your Google account connections and remove HexaHQ. That is independent of HexaHQ and takes effect immediately.

Before you connect Google, HexaHQ shows you what it will access and where that information goes, and asks you to agree. That screen appears every time HexaHQ asks for access, including when a new capability needs a permission you have not granted before, so you always see what is being requested before you approve it.

HexaHQ's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use your data from Google to create, train, or improve any artificial intelligence or machine-learning model.

Deleting your data

To request deletion of the data HexaHQ holds about you, use the privacy request page or write to privacy@hexahq.ai from the address on your account.

If you belong to a company that uses HexaHQ, some records belong to that organization rather than to you, and your administrator controls them. The privacy request page explains which is which. How long each kind of data is kept is set out in the Privacy Policy.