Your data, your control

This policy applies to hexa-2i.com, our dashboards, and all related services (collectively, the "Service") operated by Hexa 2I.

By using the Service you agree to the practices described here. If you do not agree, please do not use the Service.

We collect only what we need to deliver the Service:

• Account data — first name, last name, email address, and a hashed password.
• Order data — credit packages, billing period, selected currency, payment method, and promo codes you apply.
• Usage data — prompts, generated learning materials, and credit consumption events created while you use the AI tools.
• Technical data — IP address, browser type, device information, language, and pages visited.

• To create and operate your account and deliver the AI tools you request.
• To process credit purchases, apply promo codes, and email bank-transfer details.
• To improve product quality, fix bugs, and prevent fraud or abuse.
• To send essential transactional emails (order confirmations, security alerts).

We process personal data under (a) contract — to provide the Service you purchased, (b) legitimate interests — to keep the Service secure and improve it, and (c) consent — for non-essential cookies and marketing communications, which you can withdraw at any time.

We do not sell personal data. We share limited data with vetted subprocessors strictly to operate the Service:

• Cloud hosting — to run the application and store account data.
• AI model providers — to process prompts you submit to the AI tools.
• Email delivery — to send transactional messages.

Each subprocessor is bound by a data processing agreement.

We keep account data while your account is active and for up to 24 months after closure to comply with tax and accounting laws. Usage logs are retained for up to 12 months. You can request earlier deletion at any time.

Depending on your jurisdiction (EEA, UK, California, and others), you may have the right to:

• Access, correct, or delete your personal data.
• Object to or restrict certain processing.
• Receive a portable copy of your data.
• Withdraw consent and lodge a complaint with a supervisory authority.

To exercise these rights, email [email protected].

We use encryption in transit (TLS), encrypted storage, access controls, and routine security reviews. No method of transmission over the internet is 100% secure, but we take reasonable steps to protect your data.

The Service is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect data from such users. If you believe a child has provided personal data, contact us so we can delete it.

We may update this policy from time to time. We will notify you of material changes via email or in-app notice and update the "Last updated" date above.