Legal

Privacy Policy

Effective date: September 13, 2026

This Privacy Policy explains how Hexamind Technology (“Hexamind,” “we,” “us,” or “our”) collects, uses, stores, shares, and deletes information when you use Hexamind Social, including its website, workspace, and connected social-media features.

Hexamind Social is a workspace tool. We do not sell personal information and we do not use connected social-account data for advertising.

1. Information we collect

• Account information: name, email address, authentication identifiers, and workspace settings needed to create and secure your account.
• Connected social-account information: account identifiers, usernames, display names, profile images, follower or engagement statistics, public posts, videos, comments, replies, and other information returned by a platform after you authorize the requested scopes.
• Workspace content: content plans, captions, campaign records, media metadata, schedules, approvals, monitor keywords, replies, publishing history, and synchronization history that you create or request.
• Google Drive information: the Google account email, folder identifier, file identifiers, and files that you choose to use with Hexamind Social. Media remains in your Google Drive; Hexamind accesses only the files and folders required for the workspace.
• Technical information: IP address, browser type, device information, timestamps, error logs, and basic security events used to protect and operate the service.

2. How we use information

We use information to authenticate users, provide the workspace, store and organize media, synchronize authorized account data, display analytics, monitor public conversations, schedule or publish actions requested by you, provide support, prevent abuse, maintain security, and improve reliability. We process social-account data only to provide the feature you enabled and only within the permissions shown on the platform’s authorization screen.

3. OAuth permissions

When you connect TikTok, Instagram, Threads, or another supported platform, that platform authenticates you and issues access according to its own consent screen and policies. Hexamind does not receive your platform password. You can revoke access from the connected platform or disconnect the account inside Hexamind Social. Revocation may stop synchronization or publishing features.

4. Google Drive

If you connect Google Drive, Hexamind uses Google’s OAuth flow and accesses Drive only for the workspace operations you request. We do not scan unrelated Drive files, sell Drive content, or use Drive content for advertising. Google’s own privacy policy and terms also apply to Google services.

5. Sharing and service providers

We share information only as needed to operate the service: with infrastructure and security providers such as Google Cloud or Firebase and Cloudflare; with the social platform you specifically connect when you request synchronization, publishing, or replying; with professional advisers when legally necessary; or when required by law, court order, or to protect users and the service. Service providers may process data only for the services they provide to Hexamind.

6. Retention and deletion

We retain account and workspace data while your account is active or as needed to provide the service, resolve disputes, meet legal obligations, enforce agreements, and maintain security. Disconnecting a social account stops future access but may not automatically delete existing workspace records. To request deletion, email mlbutsimple@gmail.com from the address used for the workspace and include the connected username or workspace email. We will verify the request, remove associated credentials, and delete or anonymize associated workspace data unless retention is legally required.

7. Security

OAuth refresh tokens are encrypted before server-side storage and are not exposed to other workspace users. We use access controls, authenticated requests, transport encryption, validation, and logging designed to protect information. No internet service can guarantee absolute security, so please use a strong password and protect your account credentials.

8. Your choices and rights

You may review or update account information, disconnect a social account, revoke OAuth access, request a copy of information associated with your workspace, or request correction or deletion by contacting us. Depending on your location, you may have additional rights under applicable privacy law. We may ask for reasonable verification before completing a request.

9. Cookies and similar technologies

Hexamind uses essential browser storage and session technologies to keep you signed in, remember workspace preferences, protect requests, and load the application. We do not use advertising cookies in the workspace. Third-party platforms may set their own cookies when you authorize an account; their policies control those cookies.

10. Children

Hexamind Social is not directed to children under the minimum age required by applicable law. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us so we can review and delete it.

11. International processing

We and our service providers may process information in countries other than your own. Where required, we use appropriate safeguards for international transfers and protect information under this Policy.

12. Changes and contact

We may update this Policy when the service or legal requirements change. We will update the effective date and, when appropriate, provide additional notice. Questions, privacy requests, and deletion requests should be sent to mlbutsimple@gmail.com.