Privacy Policy

Last updated: {{EFFECTIVE_DATE}}

This Privacy Policy explains how Salesbot Labs, Inc. (“Hexa,” “we,” “us,” or “our”) collects, uses, and shares information in connection with the Hexa website, applications, APIs, and related services (the “Service”). By using the Service, you agree to this Policy.

1. Information we collect

Information you provide

Information from connected providers

When you connect a third-party provider (for example CRM, email, calendar, meeting, or issue-tracking services), Hexa accesses and processes data from that provider as needed to run the capabilities and workflows you invoke. We access only what is needed to perform the actions you or your organization authorize.

Credentials

Credentials for connected providers are entered out-of-band (in your browser) and stored server-side under your organization's custody. Credentials are never transmitted through, or stored in, the AI client conversation.

Usage and technical information

We collect logs of actions taken through the Service (the run/audit timeline), along with standard technical data such as device, browser, and IP information, to operate, secure, and improve the Service.

2. How we use information

3. AI processing

The Service works alongside AI clients. Content you route through the Service may be processed by AI models to resolve intent and perform tasks. {{CONFIRM: whether Content is used to train third-party models; by default it is NOT; state your sub-processors, e.g. the model provider}}

4. How we share information

We do not sell your personal information. We share information only:

5. Data retention

We retain information for as long as needed to provide the Service and for legitimate business or legal purposes. You may request deletion as described below; some records (such as audit logs) may be retained where required. {{CONFIRM_RETENTION_PERIODS}}

6. Security

We use administrative, technical, and organizational measures designed to protect information, including server-side custody of connected-provider credentials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing. To exercise these rights, contact us at privacy@hexahq.ai. You can also disconnect any connected provider at any time from within the Service.

8. International transfers

We may process and store information in countries other than where you live. Where required, we use appropriate safeguards for such transfers. {{CONFIRM_TRANSFER_MECHANISM, e.g. SCCs}}

9. Children

The Service is not directed to children under {{AGE, e.g. 16}}, and we do not knowingly collect their personal information.

10. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will provide reasonable notice (for example, by posting the updated Policy with a new effective date).

11. Contact

Questions about this Policy or our data practices? Contact us at privacy@hexahq.ai {{CONFIRM_CONTACT_EMAIL_AND_POSTAL_ADDRESS}}.