Disclaimer: This is not a trading app. It only provides market analysis and nothing more. The analysis may be inaccurate, and the company will not be liable for any losses incurred based on its analysis.
1. Introduction
Welcome to HexBot ("HexBot," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and related services (collectively, the "Service").
HexBot provides market analysis and informational signals. HexBot is not a trading platform, broker, or financial advisory service. Please read our Terms and Conditions alongside this Privacy Policy.
We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable data protection laws depending on your location.
2. Data Controller
The entity responsible for your personal data (the "Data Controller") is:
HexBot Ltd.
Dubai, United Arab Emirates
United Arab Emirates
Email: privacy@hexbot.com
If you have appointed a Data Protection Officer (DPO), include their contact details here: Data Protection Officer (dpo@hexbot.com)
3. Information We Collect
3.1 Information You Provide Directly
- Account registration details (name, email address, username, password)
- Contact information (phone number, if provided)
- Payment and billing information (processed via third-party payment processors; we do not store full card details)
- Communications you send us (support requests, feedback, survey responses)
- Preferences and settings within the app
3.2 Information Collected Automatically
- Device information (device type, operating system, unique device identifiers)
- Log data (IP address, browser type, access times, pages viewed)
- Usage data (features used, signals viewed, session duration, click patterns)
- Location data (general/approximate location derived from IP address, unless you grant precise location permissions)
- Cookies and similar tracking technologies (see Section 9)
3.3 Information from Third Parties
- Data from analytics providers (e.g., Google Analytics, Firebase)
- Data from payment processors regarding transaction status
- Data from social login providers, if you register via Google, Apple, or similar services
4. Legal Basis for Processing (UK/EU Users)
Under UK GDPR and EU GDPR, we process your personal data on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Providing and maintaining the Service | Performance of a contract |
| Processing payments and subscriptions | Performance of a contract |
| Sending important service updates | Legitimate interest / Contract |
| Marketing communications | Consent (opt-in) |
| Analytics and app improvement | Legitimate interest |
| Fraud prevention and security | Legitimate interest / Legal obligation |
| Complying with legal requirements | Legal obligation |
5. How We Use Your Information
We use collected information to:
- Create and manage your account
- Deliver market analysis and signal notifications you have subscribed to
- Process payments and manage subscriptions
- Respond to customer support inquiries
- Improve, personalize, and optimize the Service
- Send administrative communications (service changes, security alerts)
- Send marketing communications, where you have consented
- Detect, prevent, and address technical issues, fraud, or abuse
- Comply with legal obligations and enforce our Terms and Conditions
We do not use your personal data to make automated trading decisions on your behalf, and we do not execute trades.
6. How We Share Your Information
We do not sell your personal data. We may share information with:
- Service providers: hosting providers, payment processors, analytics providers, customer support tools — bound by confidentiality and data protection obligations
- Legal and regulatory authorities: where required by law, court order, or to protect our legal rights
- Business transfers: in connection with a merger, acquisition, or sale of assets, subject to confidentiality commitments
- With your consent: for any other purpose disclosed to you at the time of collection
7. International Data Transfers
If you are located in the UK or EU and your data is transferred outside the UK/EEA (for example, to servers or service providers in the United States), we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- UK International Data Transfer Agreement (IDTA), where applicable
- Adequacy decisions, where the destination country is recognized as providing adequate protection
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, including:
- For the duration of your active account, plus a reasonable period thereafter for legal, accounting, or reporting requirements
- As required to comply with applicable tax, financial, and regulatory record-keeping laws
- Until you request deletion, subject to our legal retention obligations
Upon account closure, we will delete or anonymize your personal data within 30 days, except where retention is legally required.
9. Cookies and Tracking Technologies
We use cookies and similar technologies to operate and improve the Service, including:
| Cookie Type | Purpose |
|---|---|
| Strictly Necessary | Required for core app/website functionality (login, security) |
| Performance/Analytics | Understand usage patterns to improve the Service |
| Functional | Remember your preferences and settings |
| Marketing (optional) | Deliver relevant promotional content, where consented |
UK/EU users will be presented with a cookie consent banner allowing you to accept or reject non-essential cookies. You can manage cookie preferences through your browser settings at any time.
10. Your Privacy Rights
10.1 UK and EU Users (UK GDPR / EU GDPR)
You have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — correct inaccurate or incomplete data
- Erasure — request deletion of your data ("right to be forgotten"), subject to legal exceptions
- Restriction — request that we limit processing of your data
- Data portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interests or for direct marketing
- Withdraw consent — where processing is based on consent, at any time
- Lodge a complaint — with the UK Information Commissioner's Office (ICO) at ico.org.uk, or your relevant EU supervisory authority
10.2 US Users (CCPA/CPRA — California Residents)
If you are a California resident, you have the right to:
- Know what personal information is collected, used, shared, or sold
- Delete personal information we have collected from you, subject to exceptions
- Correct inaccurate personal information
- Opt out of the sale or sharing of personal information (Note: HexBot does not sell personal data)
- Limit use of sensitive personal information
- Non-discrimination — we will not discriminate against you for exercising your privacy rights
To exercise any of these rights, contact us at privacy@hexbot.com. We may need to verify your identity before processing your request.
10.3 Other US States
If you reside in a state with a comprehensive privacy law (e.g., Virginia, Colorado, Connecticut, Utah), you may have similar rights to access, delete, correct, and opt out of certain processing. Contact us to exercise applicable rights.
11. Children's Privacy
HexBot is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a minor without parental consent, we will take steps to delete such information.
12. Data Security
We implement industry-standard technical and organizational measures to protect your personal data, including encryption in transit, access controls, and regular security assessments. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
13. Third-Party Links
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of such third parties. We encourage you to review their privacy policies independently.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice, and update the "Last Updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the revised Policy.
15. Contact Us
If you have questions or concerns about this Privacy Policy or wish to exercise your rights, contact us at:
Email: privacy@hexbot.com
Address: Dubai, United Arab Emirates
This document is a template and does not constitute legal advice. HexBot should have this document reviewed by a qualified attorney familiar with UK, EU, and US data protection law before publication.