This Privacy Policy explains how Locofy Pte. Ltd. (“Locofy”, “Hexby”, “we”, “us” or “our”) collects, uses, discloses and otherwise processes personal data when you use Hexby, including its website, desktop application, hosted previews and collaboration features (collectively, the “Services”).
Locofy Pte. Ltd. is the operator of Hexby. This Privacy Policy applies to Hexby and is separate from the privacy policy applicable to other Locofy products.
By using the Services, you acknowledge the practices described in this Privacy Policy, subject to any consent or other legal basis required by applicable law.
1. Personal data we collect
The information we collect depends on how you use Hexby, which accounts you connect, and which features you use.
1.1 Account and profile information
When you register or sign in, we may collect:
- Your email address, name and profile photo.
- Account identifiers provided by sign-in services such as Google or GitHub.
- Your onboarding responses, including your role, organisation type and the AI coding or design tools you use.
- Account creation, sign-in and onboarding timestamps.
If you sign in through a third-party service, that service may provide information to us according to your settings and permissions.
1.2 Device, technical and diagnostic information
We may collect technical information about your use of Hexby, including:
- IP address and approximate location derived from it, such as country, state or region, city and approximate geographic coordinates.
- Device identifier, operating system and version, processor type, application version and computer name.
- Session counts, first and last activity timestamps, and technical logs.
- Error reports, performance information and diagnostic data needed to operate, secure and troubleshoot the Services.
We may use third-party services, such as IP-information providers, to derive approximate location from an IP address. IP-derived location may be inaccurate. We do not treat it as a precise GPS location.
Computer names and other technical identifiers may contain personal information depending on how your device is configured.
1.3 Project, code and design information
When you connect a project or use Hexby’s visualisation and review features, we may process:
- Repository provider, repository name, branch, commit identifiers, source paths and component names.
- Source code and files needed for the features you use.
- Screenshots, rendered interfaces, built HTML, JavaScript and CSS assets, and other preview materials.
- Review titles, descriptions, version notes, change summaries, tasks, comments, annotations, approvals and activity history.
- AI-agent plans, summaries, prompts or comments that you choose to process through Hexby.
- Pull request numbers and links, branch information, and snapshots or references to approved versions.
- Notifications and information about activity within your projects.
Project content may contain personal data about you or other people. You are responsible for ensuring you have the necessary rights and permissions before connecting or sharing that content.
1.4 Connected accounts and credentials
When you connect third-party accounts, we may collect and process account identifiers, access tokens, granted permissions and related connection information.
This may include connections to source-code repositories, design platforms and other services that Hexby supports. We use this information to authenticate connections, verify access, retrieve authorised project information and provide the features you request. Where necessary, it may also be used to investigate technical problems you report.
Access tokens and credentials are sensitive information. We apply safeguards intended to protect information held by us, but no method of storage or transmission is completely secure.
You should review the permissions granted to connected services and disconnect integrations you no longer want to use.
1.5 Communications and support
If you contact us or report a problem, we may process your messages, contact details, diagnostic information and relevant project information that you choose to provide so that we can respond and investigate.
2. How we use personal data
We may use personal data for the following purposes:
- Providing the Services: creating and managing accounts, authenticating users, connecting repositories and integrations, rendering interfaces, hosting previews, and enabling review and collaboration.
- Enabling project workflows: processing authorised code and project information, tracking reviews and changes, supporting tasks and approvals, and facilitating handoffs to repositories or connected tools.
- Operating and maintaining Hexby: monitoring performance, diagnosing errors, resolving bugs and improving reliability.
- Security and abuse prevention: verifying access, protecting accounts and infrastructure, investigating suspicious activity and enforcing our Terms and Conditions.
- Communications: responding to support requests, sending service-related notifications and informing you of material changes.
- Product development: understanding feature usage and improving the functionality and user experience of Hexby.
- Legal and business purposes: complying with legal obligations, protecting our rights and users, and managing corporate transactions where appropriate.
We will handle personal data in accordance with applicable law and any consent or other legal basis required for the relevant processing.
3. How we disclose or share information
We may disclose information to the following categories of recipients, where necessary for the purposes described in this Privacy Policy.
3.1 Service providers
We may use third-party providers for hosting, cloud infrastructure, authentication, diagnostics, IP-based location information, customer support, security and other operational services.
These providers may process information on our behalf in order to provide their services to us, subject to applicable arrangements and law.
3.2 Connected services and AI tools
Hexby is designed to work with repositories, design platforms and AI coding tools that you choose to connect or use.
Depending on the feature, your actions and the permissions you grant, relevant project files, code, prompts, context, previews or other information may be accessed by or transmitted to the third-party service involved. For example, a connected AI tool may need access to code or context to carry out a task you request.
Those providers operate under their own terms and privacy policies. Their handling of your information, including any retention or use for model improvement or training, is governed by their applicable policies, settings and agreements. We do not control their independent data practices.
Please review the relevant provider's policies and settings before connecting it or sending it project information.
3.3 Collaborators and recipients you choose
If you use Hexby to share a review, preview, comment or other project information, we may make the relevant information available to the collaborators or recipients you select.
Anyone who can access shared information may be able to copy or retain it. You are responsible for checking the content you share and the access permissions you configure.
3.4 Legal, safety and business disclosures
We may disclose information where reasonably necessary to comply with applicable law or a lawful request, establish or defend legal claims, protect the rights and safety of users or others, investigate fraud or security incidents, or facilitate a merger, acquisition, reorganisation or sale of all or part of our business.
Where required by law, we will apply appropriate safeguards or seek the necessary consent before disclosing personal data.
We do not sell personal data as a standalone product.
4. Repositories, access tokens and hosted previews
Hexby may process source code and related project information to provide visualisation, review, collaboration and connected-tool features. The exact information processed depends on the repository, permissions and features you use.
We may retain connection credentials or access tokens to maintain integrations and provide the functionality you request. Where you report a bug or request technical support, authorised personnel may need to access relevant project information to investigate the issue. Access should be limited to what is reasonably necessary for the relevant purpose and subject to appropriate safeguards.
Hexby may create hosted previews or technical copies of project content. Some previews may be available through links that are difficult to guess but are not protected by user authentication. A link of this kind should not be treated as a guarantee that the content is private or confidential.
Do not use hosted previews to share secrets, credentials or confidential material unless you have assessed the relevant access controls and accept the risks.
You can disconnect integrations you no longer wish to use. Disconnection may stop future access through that integration, but it does not necessarily delete information already stored by Hexby or by the third-party provider.
5. Cookies and similar technologies
Our website or related services may use cookies, local storage or similar technologies where necessary for functionality, authentication, security, preferences, diagnostics or usage analysis.
Where required by applicable law, we will provide relevant notices and obtain consent before using non-essential cookies or similar technologies.
You may be able to manage cookies through your browser settings. Disabling certain technologies may affect the functionality of the Services.
6. Retention and deletion
We retain personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Services, maintaining account and project functionality, addressing support issues, ensuring security and complying with legal obligations.
Retention periods vary depending on the type of information, the features used and the circumstances in which it was collected.
When you request account closure, we will take reasonable steps to delete or de-identify personal data that is no longer required, subject to applicable law, legitimate operational needs and any necessary retention. Some information may remain in backups for a limited period or be retained where required for legal, security or dispute-resolution purposes.
Closing an account may remove access to hosted previews and other hosted content. It may not remove local copies, content retained by collaborators, information held independently by third-party providers, or content retained under their own policies.
To request account closure or deletion of personal data, contact support@hexby.ai.
7. Security
We use reasonable technical and organisational safeguards intended to protect personal data against unauthorised access, disclosure, alteration, loss or misuse.
No system, application, storage method or transmission over the internet can be guaranteed to be completely secure. We cannot guarantee absolute security.
You are responsible for protecting your sign-in credentials and devices, reviewing integration permissions and ensuring that you have appropriate backups of important code and project materials.
8. International transfers
We and our service providers may process or store personal data in Singapore and other countries where we or our providers operate.
Where personal data is transferred outside Singapore, we will take steps required by applicable data protection law to ensure that the transfer is subject to appropriate protection.
The data protection laws in other countries may differ from those in your country of residence.
9. Your choices and rights
Subject to applicable law, you may have the right to request access to or correction of your personal data, withdraw consent where processing is based on consent, or request deletion or other action in relation to your personal data.
You can also:
- Stop using Hexby and request account closure.
- Disconnect third-party accounts or revoke permissions through the relevant provider.
- Review the information you choose to share with collaborators or through hosted previews.
- Contact us with questions or requests about your personal data.
We may need to verify your identity and clarify the scope of a request before acting on it. Some information may need to be retained where permitted or required by law.
To exercise your rights or raise a privacy concern, contact support@hexby.ai. We will respond in accordance with applicable law.
10. Children
The Services are intended for people who can legally enter into binding agreements. If you believe a child has provided personal data to us in circumstances where doing so was not permitted, please contact us so that we can assess the matter and take appropriate action.
11. Changes to this Privacy Policy
We may update this Privacy Policy as Hexby develops or our data practices change. We will publish the updated version with a revised date and provide additional notice of material changes where required by law.
Your continued use of the Services after an updated policy takes effect will be subject to the updated policy, except where applicable law requires another form of notice or consent.
12. Contact us
For questions, requests or concerns about this Privacy Policy or our handling of personal data, contact:
Locofy Pte. Ltd. Email: support@hexby.ai Website: https://hexby.ai