Hexa Privacy Policy

Effective date: March 4, 2026

This Privacy Policy explains how Hexa Tech ("Hexa", "we", "our", "us") handles data when you use Hexa Home and any current or future integrations.

1. Who We Are

Hexa Tech operates Hexa Home services at vistfiy.store.

2. Core Data Practices (All Integrations)

Data We Collect

• Account data: email address, account ID, and profile metadata.
• Device data: device IDs, relay names/count, online status, and firmware metadata.
• Usage and event data: commands, state changes, automation/schedule activity.
• Location data (optional): precise location signals used for geofence zone enter/leave detection when you enable location-based automations.
• Security and operational logs: request metadata, audit records, and error diagnostics.

How We Use Data

• Provide smart-home control, synchronization, and status reporting.
• Authenticate users and manage account linking/unlinking.
• Evaluate geofence automations and boundary events when location features are enabled.
• Maintain service reliability, prevent abuse, and investigate incidents.
• Comply with legal obligations and enforce platform integrity.

3. Location and Geofencing (Optional)

• Location features are opt-in. We request location permissions only when you enable geofencing-related functionality.
• Background location on iOS/Android is requested only for zone enter/leave automation use-cases and can be disabled at any time in app and OS settings.
• Web location processing runs only while the app tab is open; background location tracking is not available on web.
• Geofence evaluation is designed to be local-first. If sharing is enabled, only boundary events (for example enter/leave) are shared, not continuous live location trails.

4. Integration-Specific Notices

Alexa / Google Home / Home Assistant (Current and Future Integrations)

For integration platforms, Hexa exchanges only the data required for requested features such as discovery, command execution, and state reporting.

Google Calendar (Optional)

When you link Google Calendar, we request only:

• openid and email to identify the linked Google account.
• https://www.googleapis.com/auth/calendar.readonly to read calendar events for display and sync in Hexa Home.

We do not request write access to Google Calendar.

Google API User Data Policy

Our use of Google API data complies with the Google API Services User Data Policy, including Limited Use requirements.

• We do not sell Google user data.
• We do not use Google user data for advertising or profiling.
• We do not transfer Google user data to data brokers.

5. Data Sharing

We share data only when needed to operate services (for example, infrastructure or integration providers), or when required for legal compliance and security response.

6. Data Retention

We retain data only as long as needed for service delivery, security, and legal obligations. Sensitive tokens are encrypted at rest and revoked/disabled when unlinking is requested where supported.

7. Security

We apply technical and organizational safeguards, including transport security, access controls, and encrypted storage of sensitive credentials.

8. Your Choices and Rights

• You can link or unlink integrations at any time.
• You can disable location permissions and geofencing tracking at any time.
• You can request access, correction, or deletion of account data.
• You can request account deletion, subject to lawful retention obligations.

9. Children

Our services are not directed to children under the age required by applicable law, and we do not knowingly collect personal information from children.

10. International Processing

Data may be processed where our infrastructure or service providers operate. We apply reasonable safeguards for cross-border processing.

11. Contact

Privacy requests: privacy@vistfiy.store or techhexa.help@gmail.com.

12. Changes to This Policy

We may update this policy over time. Material updates will be shown by changing the effective date.