Privacy Policy
Last updated: July 27, 2026
Information We Collect
We collect information you provide directly (name, email, phone number, company details submitted via contact forms or discovery calls) and technical data collected automatically (IP address, browser type, pages visited, device information).
Facebook / Instagram Platform Data
Hexora AI integrates with Meta's Platform APIs (Facebook Pages, Instagram, WhatsApp Business) to provide a unified inbox and CRM experience. When a business connects their Facebook Page, Instagram Business Account, or WhatsApp Business Account to Hexora AI, we access and process the following categories of Platform Data, strictly to provide the requested service:
- Page and account identifiers (Page ID, Instagram Business Account ID)
- Messages and conversation threads sent to/from connected Pages, Instagram accounts, and WhatsApp Business numbers
- Basic profile information of the business account holder (name, profile picture) for display within the unified inbox
- Message metadata (timestamps, read/delivery status) for support and automation features
We do not use Platform Data for advertising purposes, and we do not sell Platform Data to third parties. Platform Data is used exclusively to power the CRM, inbox, and automation features the business account holder has explicitly connected and configured.
OAuth Permissions Requested
| Permission | Purpose |
|---|---|
| pages_show_list | Display the list of Facebook Pages the user manages, for account connection |
| pages_messaging | Send and receive messages through connected Facebook Pages |
| pages_read_engagement | Read engagement metrics to display conversation context |
| instagram_basic | Access basic Instagram Business Account profile information |
| instagram_manage_messages | Send and receive Instagram Direct Messages through the unified inbox |
| whatsapp_business_messaging | Send and receive WhatsApp Business messages through the unified inbox |
| business_management | Manage connected Business Manager assets the user has authorized |
How We Use Information
We use collected information to operate and improve our services, respond to inquiries, provide the unified CRM/inbox functionality of Hexora AI, and meet legal and security obligations. We do not sell personal data to third parties.
Third-Party Services
We use third-party infrastructure and AI providers (including AWS for hosting, and Claude/Anthropic, OpenAI, and Google Gemini for AI-assisted features) to deliver our services. Each provider processes data solely to perform the function it's engaged for, under its own data processing terms.
Data Retention
We retain Platform Data and other personal data only as long as necessary to provide the service or as required by law. Businesses can request deletion of their data at any time — see our Data Deletion Instructions.
Security
We apply industry-standard security practices, including encrypted data transmission (TLS), access controls, and infrastructure hardening. See our Security page for more detail.
Your Rights (GDPR / CCPA)
Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these rights, contact md.shaban@hexahiresolution.com.
Questions about this policy? md.shaban@hexahiresolution.com or contact us.