Last Updated: October 18, 2026 • Compliant with CCPA, CalOPPA & US Privacy Regulations • hexabusinessapp.com
1. Introduction
At Hexa Business App ("Hexa", "we", "our", or "us"), operated by Hexagon Digital LLC, we respect your privacy and are committed to protecting the personal and commercial data of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit hexabusinessapp.com or use our mobile applications on iOS and Android.
2. Information We Collect
To deliver our AI business messenger, GPS lead radar, and appointment booking engine, we collect the following categories of information:
Account & Contact Information: Name, business name, business address, email address, phone number, and account credentials when you register.
Precise Geolocation Data (GPS Radar): With your explicit mobile permission, we collect precise latitude and longitude coordinates to enable the Live GPS Lead Radar, allowing you to discover local service requests and dispatch technicians within a 5 to 25-mile radius.
Business Messaging & Communication Data: WhatsApp messages, SMS logs, customer inquiry notes, and voice call transcripts processed by your connected AI assistant to formulate automated responses.
Payment & Billing Data: Transaction metadata, plan selections, and subscription statuses processed securely via PCI-compliant gateways (such as Stripe). We do not store complete credit card numbers on our servers.
Device & Technical Data: Device model, operating system version (iOS/Android), IP address, unique device identifiers, and crash logs for quality assurance.
3. How We Use Your Information
We process your data for the following lawful business purposes:
Delivering instant 0.4s AI customer replies and automated appointment scheduling.
Powering local GPS discovery of commercial leads in your designated operational ZIP codes.
Processing subscription payments, customer support requests, and billing notices.
Preventing spam, fraudulent activity, and telecommunications abuse.
Continuously improving our conversational AI models using anonymized, aggregated operational data.
4. California Consumer Privacy Act (CCPA / CPRA) Rights
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information:
Right to Know & Access: You have the right to request what personal data we have collected, used, and shared about you over the past 12 months.
Right to Deletion: You have the right to request the permanent deletion of your personal information, subject to legal record-keeping obligations.
Right to Non-Discrimination: We will never deny services, charge different prices, or provide a lower quality of service if you exercise your privacy rights.
We Do NOT Sell Personal Information: Hexa Business App does not sell, rent, or trade your personal data or your customers' phone numbers to data brokers.
To exercise any CCPA rights, email privacy@hexabusinessapp.com with the subject "California Privacy Request".
5. Security & Encryption Standards
We implement enterprise-grade security protocols to protect your business information against unauthorized access, alteration, or disclosure:
Data in Transit: Encrypted using Transport Layer Security (TLS 1.3) with HTTPS across all endpoints.
Data at Rest: Encrypted using industry-standard 256-bit Advanced Encryption Standard (AES-256).
Cloud Infrastructure: Hosted in SOC-2 Type II and ISO 27001 certified Google Cloud and Supabase data centers.
6. Third-Party Service Providers
We work with trusted third-party technology providers to execute core platform features:
Cloud & Database: Google Cloud Platform, Supabase (PostgreSQL).
Telephony & Messaging: Meta WhatsApp Business Cloud API, Twilio.
Billing & Payments: Stripe Inc. (PCI-DSS Level 1 certified).
App Distribution: Google Play Console, Apple App Store.
7. Data Retention & Account Deletion
We retain your business records and customer conversation logs for as long as your account remains active. You may request full account deletion at any time directly through the app settings or by writing to privacy@hexabusinessapp.com. Upon receipt of a verified deletion request, all personal identifiers and conversation logs are permanently purged from active databases within 30 days.
8. Privacy Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact our Data Protection Officer: