HexaNest Privacy Policy

1. Introduction

This Privacy Policy describes how Hexanest LTD., the owner and operator of the HexaNest platform ("HexaNest," "Company," "we," "us," or "our"), collects, uses, processes, stores, discloses, and protects personal information when you access or use our websites, applications, software, platform, products, communications, and related services collectively referred to as the "Service."

For purposes of this Privacy Policy, "personal information" generally means information about an identifiable individual or information that can reasonably be linked to an identifiable individual, subject to the definition provided by applicable law.

Hexanest LTD. is responsible for personal information under its control.

Our privacy practices are intended to comply with applicable privacy and data-protection laws, including, where applicable, Alberta's Personal Information Protection Act ("PIPA"), Canada's Personal Information Protection and Electronic Documents Act ("PIPEDA"), and other applicable privacy laws.

This Privacy Policy should be read together with our Terms of Service and any additional notices provided when personal information is collected.

Where consent is legally required, we will seek consent appropriate to the nature and sensitivity of the information and the reasonable expectations of the individual.

Consent may be express or implied where permitted by applicable law.

You may withdraw consent to certain uses of your personal information, subject to reasonable notice and any legal, contractual, security, or operational restrictions. Withdrawal of consent may affect our ability to provide some or all of the Service.

We may also collect, use, or disclose personal information without consent where permitted or required by applicable law.

By creating an account or providing information to HexaNest, you acknowledge the practices described in this Privacy Policy. Nothing in this Privacy Policy limits rights that cannot lawfully be waived.

2. Information We Collect

We limit the collection of personal information to information reasonably necessary for the purposes described in this Privacy Policy and other purposes disclosed to you at or before collection.

2.1 Information You Provide

Depending on how you use HexaNest, we may collect information that you provide directly to us, including:

• Name
• Email address
• Username
• Account credentials and authentication information
• Password-related authentication data
• Telephone number, if provided
• Company or organization name
• Job title or professional role
• Billing information
• Billing address
• Subscription information
• Transaction and purchase history
• Tax-related information where required
• Communications with HexaNest
• Customer-support requests
• Feedback
• Survey responses
• Feature requests
• Messages
• Form submissions
• Marketing preferences
• Referral information
• Business-contact information
• Information submitted through sales or business inquiry forms

Payment Information

Payments may be processed by third-party payment processors.

Hexanest LTD. does not ordinarily receive or store complete payment-card numbers, card security codes, or complete banking credentials where those details are collected directly by an authorized payment processor.

We may receive payment-related information such as:

• Billing name
• Billing address
• Transaction identifiers
• Payment status
• Subscription status
• Card type
• Expiration information where provided by the processor
• Last digits of a payment card
• Refund and chargeback information
• Fraud-risk indicators

Third-party payment processors handle payment information according to their own terms, privacy practices, and applicable security requirements.

User Content and Project Information

HexaNest may allow you to upload, generate, modify, store, or process content including:

• Blueprints
• Floor plans
• Architectural drawings
• Images
• Photographs
• PDFs
• Design files
• Property layouts
• Measurements
• Dimensions
• Addresses contained within uploaded documents
• Property-related information
• Room information
• Building information
• Design selections
• Materials
• Furnishing selections
• Customization settings
• Generated 2D or 3D content
• Project names
• Project metadata
• Comments
• Other information associated with a project

Uploaded documents may contain personal information belonging to you or another person.

You are responsible for ensuring that you have the necessary rights, authority, notices, and consents to provide personal information relating to another individual through HexaNest.

You should avoid uploading highly sensitive personal information unless it is necessary for your legitimate use of the Service.

Artificial Intelligence and Automated Processing

HexaNest uses software and automated technologies that may include artificial intelligence, machine learning, computer vision, image recognition, blueprint interpretation, procedural generation, and related technologies.

When you submit blueprints, images, floor plans, designs, or other content, those materials may be automatically processed to:

• Interpret building features
• Detect architectural elements
• Generate digital structures
• Create 2D or 3D representations
• Generate or suggest design elements
• Process measurements or spatial relationships
• Apply materials or visual features
• Detect errors
• Improve output quality
• Provide other Service functionality

Automated outputs may be inaccurate and should not be treated as independently verified professional information.

Where permitted by law and consistent with the purposes disclosed to users, Hexanest LTD. may use technical information, usage information, feedback, de-identified information, aggregated information, and other appropriate information to test, analyze, maintain, improve, and evaluate HexaNest's systems, features, algorithms, and models.

If Hexanest LTD. introduces a materially different use of identifiable User Content for artificial-intelligence or machine-learning training that requires additional notice or consent under applicable law, we will provide the required notice or obtain the required consent before doing so.

2.2 Information Collected Automatically

When you access or use HexaNest, we or our authorized service providers may automatically collect certain technical and usage information, including:

• Internet Protocol ("IP") address
• Browser type
• Browser version
• Device type
• Device identifiers
• Operating system
• Language settings
• Time zone
• Approximate geographic location derived from IP address
• Referring website or source
• Pages viewed
• Features accessed
• Buttons or functions used
• Session duration
• Login times
• Date and time of activity
• Project interactions
• Usage frequency
• Subscription interactions
• Error reports
• Crash information
• Application-performance information
• Network information
• Security events
• Authentication events
• Access logs
• Fraud-prevention signals
• Cookie identifiers
• Similar technical information

We may use this information to operate the Service, understand usage, diagnose technical problems, improve performance, secure accounts, detect fraud and abuse, and develop the Service.

2.3 Information From Third Parties

We may receive personal information from third parties where permitted by law, including:

• Payment processors
• Authentication providers
• Cloud-service providers
• Analytics providers
• Security and fraud-prevention providers
• Business partners
• Referral partners
• Connected services
• Organizations through which you access HexaNest
• Company administrators managing a business account

If you choose to connect HexaNest with a third-party service, we may receive information authorized through that connection.

The information received will depend on the service, the permissions you grant, and the third party's practices.

2.4 Business and Organization Accounts

If your HexaNest account is provided or managed by an employer, builder, contractor, design company, educational organization, or other organization, authorized administrators for that organization may have access to certain information associated with the account, such as:

• Account identity
• Membership status
• Projects
• Usage information
• Subscription information
• Administrative settings

The organization may independently determine how it uses information under its control. Its processing may be governed by its own privacy policies.

2.5 De-Identified and Aggregated Information

We may create statistical, aggregated, or de-identified information from information collected through the Service.

Where information has been de-identified so that it is no longer reasonably capable of identifying an individual, we may use that information for purposes such as:

• Analytics
• Product development
• Performance analysis
• Research
• Business planning
• Security
• Improving HexaNest
• Understanding platform usage

Where applicable law continues to treat certain de-identified information as personal information, we will handle it accordingly.

We will not intentionally attempt to re-identify information that has been properly de-identified except where necessary for security, integrity testing, or where permitted by law.

3. How We Use Your Information

Hexanest LTD. may collect, use, and otherwise process personal information for purposes including:

• Creating and administering accounts
• Authenticating users
• Providing access to HexaNest
• Processing uploaded blueprints and designs
• Generating 2D or 3D content
• Operating artificial-intelligence and computer-vision functionality
• Saving and synchronizing projects
• Providing customization functionality
• Processing payments
• Administering subscriptions
• Managing trials
• Processing cancellations
• Processing refunds
• Maintaining transaction records
• Providing customer service
• Responding to inquiries
• Troubleshooting technical problems
• Sending account notifications
• Sending security notifications
• Sending billing notifications
• Sending Service-related communications
• Providing requested information
• Improving functionality
• Improving reliability
• Improving user experience
• Testing features
• Conducting quality assurance
• Conducting analytics
• Understanding platform usage
• Measuring Service performance
• Diagnosing errors
• Preventing fraud
• Preventing abuse
• Protecting accounts
• Protecting network and information security
• Investigating suspicious activity
• Enforcing our Terms of Service
• Protecting Hexanest LTD.'s legal rights
• Protecting users and third parties
• Maintaining business and financial records
• Complying with tax, accounting, regulatory, court, law-enforcement, and other legal obligations
• Establishing, exercising, or defending legal claims
• Responding to lawful government requests
• Conducting corporate transactions
• Developing and improving HexaNest products and services
• Creating aggregated or de-identified analytics
• Carrying out other purposes disclosed when information is collected
• Carrying out another purpose with consent where required by law

Communications

We may send communications required to administer your relationship with HexaNest, including:

• Account verification messages
• Password-reset messages
• Billing notices
• Subscription notices
• Security alerts
• Service announcements
• Customer-support communications
• Changes affecting the Service
• Legally required notices

These operational communications may be necessary to provide the Service and may not always be subject to marketing opt-out preferences.

Marketing Communications

Where permitted by applicable law, we may send promotional or marketing communications.

Where consent is required, we will obtain the appropriate consent before sending commercial electronic messages.

Marketing communications will provide an appropriate method to unsubscribe where legally required.

Unsubscribing from marketing communications does not prevent us from sending necessary transactional, account, billing, legal, or security communications.

We do not sell your personal information in exchange for money.

We do not disclose personal information to unrelated third parties for their own independent targeted advertising purposes unless we provide appropriate notice and obtain any consent required by applicable law.

4. Cookies and Tracking Technologies

HexaNest and authorized service providers may use cookies, local storage, pixels, software development kits, session identifiers, log files, and similar technologies.

These technologies may be used to:

• Keep users signed in
• Authenticate accounts
• Maintain sessions
• Remember settings
• Maintain security
• Prevent fraud
• Understand Service usage
• Measure performance
• Diagnose errors
• Analyze features
• Remember user preferences
• Improve functionality
• Measure communications or marketing where permitted

Types of Cookies

Cookies and similar technologies may include:

Essential Cookies: Required for core functions such as login, security, authentication, account functionality, payment processing, and session management.

Preference Cookies: Used to remember settings and user preferences.

Analytics Cookies: Used to understand how users interact with the Service and identify areas for improvement.

Marketing Technologies: If implemented, these may be used to measure marketing effectiveness or deliver marketing. Where required, these technologies will be subject to appropriate consent mechanisms.

You may configure your browser to reject or delete certain cookies.

Blocking essential cookies may prevent portions of HexaNest from functioning properly.

Where applicable law requires consent before non-essential tracking technologies are activated, we will provide an appropriate consent mechanism.

Some browsers and devices provide additional privacy settings. Because technical standards and legal requirements may change, our response to browser-based privacy signals may depend on applicable law and the functionality available through our systems.

5. Sharing of Information

Hexanest LTD. does not sell personal information for monetary compensation.

We may disclose personal information where reasonably necessary for the purposes described in this Privacy Policy.

Service Providers

We may use third-party companies and contractors to help operate HexaNest.

Categories of service providers may include:

• Cloud hosting providers
• Data-storage providers
• Content-delivery networks
• Infrastructure providers
• GPU or computing providers
• Payment processors
• Subscription-management providers
• Authentication providers
• Email providers
• Customer-support providers
• Analytics providers
• Error-monitoring providers
• Security providers
• Fraud-prevention providers
• Artificial-intelligence or machine-learning infrastructure providers
• Communication providers
• Database providers
• Professional advisers
• Accountants
• Auditors
• Lawyers
• Insurance providers

Service providers are authorized to process information only as necessary to provide services to Hexanest LTD. or as otherwise permitted by applicable law and their applicable contractual arrangements.

We seek to use contractual, organizational, and other appropriate measures to protect personal information handled on our behalf.

At Your Direction

We may share information with another person or service where you instruct, authorize, or request us to do so.

For example, information may be shared when you:

• Share a HexaNest project
• Invite another user
• Join an organization
• Connect a third-party service
• Export information
• Request that information be sent to another party

You are responsible for understanding who will receive information you choose to share.

Legal Requirements

We may disclose personal information where we reasonably believe disclosure is necessary or permitted to:

• Comply with applicable law
• Comply with a subpoena
• Comply with a court order
• Respond to lawful governmental or regulatory requests
• Cooperate with lawful investigations
• Detect or investigate fraud
• Protect network or information security
• Prevent serious harm
• Protect the safety of an individual
• Establish, exercise, or defend legal claims
• Enforce agreements
• Protect Hexanest LTD.'s rights, property, employees, users, or operations

We will assess requests for information according to applicable law.

Corporate Transactions

If Hexanest LTD. is involved in or considering:

• A merger
• Acquisition
• Financing
• Investment
• Reorganization
• Insolvency proceeding
• Sale of shares
• Sale of assets
• Business transfer
• Due-diligence process
• Similar corporate transaction

personal information may be disclosed or transferred as permitted by applicable law and subject to appropriate confidentiality and privacy safeguards.

If ownership of all or part of Hexanest LTD. changes, personal information may be transferred to the successor entity in accordance with applicable law.

Professional Advisers

We may disclose information to legal counsel, accountants, auditors, insurers, consultants, and other professional advisers where reasonably necessary for legitimate business, legal, financial, security, or compliance purposes.

6. Data Retention

Hexanest LTD. retains personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected and to satisfy legitimate business, operational, security, contractual, regulatory, accounting, tax, dispute-resolution, and legal requirements.

Retention periods may depend on:

• The type of information
• The purpose for which it was collected
• The duration of your account
• The duration of a subscription
• Contractual requirements
• The sensitivity of the information
• Security requirements
• Fraud-prevention needs
• Applicable limitation periods
• Tax and accounting requirements
• Legal requirements
• Pending or anticipated disputes
• Regulatory requirements

Account information may generally be retained while your account remains active and for a reasonable period after account closure where required for legitimate business or legal purposes.

Transaction and billing records may be retained for periods required by accounting, taxation, anti-fraud, and other applicable laws.

Security logs may be retained for a reasonable period for fraud prevention, incident investigation, system security, and compliance.

User Content

You may be able to delete certain projects or User Content through account functionality.

Deletion from active systems may not immediately remove information from:

• Backups
• Disaster-recovery systems
• Security logs
• Fraud-prevention records
• Legal records
• Records required to establish or defend legal claims

Backup copies may remain until they are overwritten or deleted according to our normal retention and backup procedures.

Account Deletion

You may request deletion of your account and eligible personal information by contacting us at support@hexanest.ca.

A deletion request does not require us to delete information that we are legally permitted or required to retain.

We may retain information where necessary to:

• Complete transactions
• Maintain tax or accounting records
• Detect or prevent fraud
• Maintain security
• Resolve disputes
• Enforce agreements
• Exercise legal rights
• Comply with legal obligations
• Demonstrate regulatory compliance

Where appropriate, information may be anonymized rather than retained in identifiable form.

Once personal information is no longer reasonably required, we will destroy, erase, or anonymize it in accordance with applicable law and our retention practices.

7. Data Security

Hexanest LTD. uses reasonable administrative, technical, organizational, and physical safeguards appropriate to the nature and sensitivity of the personal information under our control.

Safeguards may include measures relating to:

• Access controls
• Authentication
• Account security
• Network security
• Encryption where appropriate
• Secure communications
• Logging
• Monitoring
• Infrastructure security
• Vendor management
• Employee or contractor confidentiality obligations
• Restricted access based on legitimate business need
• Security updates
• Vulnerability management
• Backup and recovery
• Incident response

No website, cloud service, transmission method, database, computer system, or security measure can guarantee absolute security.

Accordingly, Hexanest LTD. cannot guarantee that unauthorized third parties will never defeat our safeguards or improperly access, obtain, alter, disclose, destroy, or misuse information.

You are responsible for maintaining the confidentiality of your credentials and for using reasonable measures to protect your account.

You should notify us promptly at support@hexanest.ca if you believe your account or personal information has been compromised.

Privacy and Security Incidents

If Hexanest LTD. becomes aware of a privacy or security breach involving personal information, we will investigate and respond in accordance with applicable law.

Where applicable law requires notification to a privacy regulator, affected individual, or other authority, we will provide the required notification.

We may take measures including:

• Containing the incident
• Investigating its cause
• Assessing potential harm
• Securing affected systems
• Resetting credentials
• Notifying service providers
• Notifying affected users where appropriate or legally required
• Reporting the incident to applicable regulators where legally required
• Taking steps designed to reduce the risk of recurrence

8. Third-Party Services

HexaNest may integrate with or rely upon third-party services.

These services may include:

• Payment processing
• Authentication
• Cloud infrastructure
• Hosting
• Artificial-intelligence infrastructure
• Analytics
• Customer support
• Communications
• Storage
• Security
• Other technical services

Where a third party processes personal information on behalf of Hexanest LTD., we remain responsible for managing our obligations with respect to personal information under our control as required by applicable law.

Certain third parties may process information as independent organizations for their own purposes. Their collection, use, disclosure, and retention of information may be governed by their own terms and privacy policies.

Hexanest LTD. is not responsible for the privacy practices of independent third-party websites or services that are not controlled by us.

You should review the privacy practices of third-party services before providing information directly to them.

External Links

The Service may contain links to third-party websites.

Following an external link may allow the third party to collect information independently of Hexanest LTD.

This Privacy Policy does not govern independent third-party websites.

Connected Services

If you authorize HexaNest to connect to another service, information may be exchanged with that service according to the authorization you provide.

You may be able to revoke certain connected-service permissions through HexaNest, the third-party provider, or both.

9. User Rights

Depending on your jurisdiction and the circumstances, you may have rights relating to your personal information.

These rights may include the right to:

• Know whether we hold personal information about you
• Request access to personal information
• Request information concerning how your information has been used
• Request information concerning parties to whom information has been disclosed
• Correct inaccurate personal information
• Complete incomplete information
• Request deletion where applicable
• Withdraw consent where processing depends on consent
• Object to certain processing where applicable
• Request restriction of processing where applicable
• Request data portability where applicable
• Opt out of certain marketing communications
• Challenge our compliance with applicable privacy law
• Make a complaint to the appropriate privacy authority

Some rights are subject to exceptions under applicable law.

For example, we may be unable to provide information where disclosure would:

• Reveal another person's personal information
• Reveal information protected by legal privilege
• Create a serious security risk
• Violate applicable law
• Reveal confidential commercial information in circumstances where withholding is legally permitted

Access and Correction Requests

You may request access to or correction of your personal information by contacting:

Privacy Officer
Hexanest LTD.
Email: support@hexanest.ca

We may need to verify your identity before processing a request.

We will not provide personal information to a person unless we are reasonably satisfied that the person is authorized to receive it.

We will respond to valid requests within the period required by applicable law.

Where legally permitted, we may charge a reasonable fee for certain requests after providing any notice required by applicable law.

If we refuse all or part of an access or correction request, we will provide any explanation or recourse information required by law.

Withdrawal of Consent

Where our processing relies on consent, you may withdraw consent subject to legal or contractual restrictions and reasonable notice.

Withdrawal may prevent Hexanest LTD. from providing certain features or services.

Marketing Choices

You may unsubscribe from promotional emails using the unsubscribe functionality provided in the message or by contacting us.

We may continue sending non-promotional communications necessary for account administration, billing, security, legal notices, and requested services.

Privacy Complaints

If you have a concern about our privacy practices, contact our Privacy Officer first at:

support@hexanest.ca

We will investigate privacy complaints and take reasonable steps to address legitimate concerns.

Depending on the applicable law and your jurisdiction, you may also have the right to complain to a privacy regulator, including the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.

Nothing in this Privacy Policy restricts a statutory right to contact an applicable regulator.

10. Children's Privacy

HexaNest is intended for individuals who are at least 18 years of age.

The Service is not directed toward children or minors under the age of 18.

Hexanest LTD. does not knowingly seek to collect personal information from individuals under 18 for the purpose of allowing them to independently use the Service.

If we learn that an individual under 18 has created an account or provided personal information in violation of our requirements, we may suspend the account and take reasonable steps to delete the information, subject to applicable legal retention requirements.

If you believe that a minor has provided personal information to HexaNest, contact us at:

support@hexanest.ca

Where applicable law permits individuals under 18 to use a service with parental or guardian authorization, Hexanest LTD. may implement additional age-verification or consent procedures before allowing such use.

11. International Data Transfers

Hexanest LTD. is based in Canada, but the Service may use service providers, infrastructure, contractors, or systems located outside Canada.

As a result, personal information may be transferred to, stored in, accessed from, or processed in another jurisdiction.

Information processed outside Canada may be subject to the laws of the jurisdiction where it is processed, including lawful-access requirements applicable to courts, law-enforcement agencies, national-security authorities, or other governmental bodies.

Hexanest LTD. remains responsible for personal information under its control as required by applicable law and uses appropriate contractual or other measures when engaging service providers to process personal information on our behalf.

Where required by Alberta privacy law, Hexanest LTD. maintains information concerning:

• The countries outside Canada in which service providers may collect, use, disclose, access, or store personal information
• The purposes for which those service providers are authorized to handle the information
• The manner in which individuals can obtain additional information about these practices

Because HexaNest's infrastructure and service providers may change, users may request the current Service Provider Location and Processing Information by contacting:

Privacy Officer
Hexanest LTD.
Email: support@hexanest.ca

Where required by applicable law, additional notice regarding international processing will be provided at or before collection or transfer.

Use of a service provider outside Canada does not eliminate Hexanest LTD.'s obligations under applicable Canadian privacy law.

12. Changes to This Privacy Policy

Hexanest LTD. may update this Privacy Policy from time to time to reflect:

• Changes to HexaNest
• New features
• New technologies
• Changes to data practices
• Changes to service providers
• Security requirements
• Business changes
• Regulatory requirements
• Legal requirements

When this Privacy Policy changes, we will update the "Last updated" date.

If a change materially affects the way we collect, use, or disclose personal information, we will provide additional notice where required by applicable law.

Where applicable law requires additional consent for a new collection, use, or disclosure of personal information, we will seek such consent before carrying out that activity.

Continued use of HexaNest after a Privacy Policy update does not waive privacy rights or substitute for consent where applicable law specifically requires consent.

Previous versions may be retained where reasonably necessary for legal, compliance, or recordkeeping purposes.

13. Contact Us

Hexanest LTD. has designated responsibility for overseeing its privacy practices.

For questions, access requests, correction requests, deletion requests, consent withdrawals, privacy complaints, information concerning service providers outside Canada, or other privacy-related inquiries, contact:

Privacy Officer
Hexanest LTD.
Operating as HexaNest
Email: support@hexanest.ca

We may require reasonable information to verify your identity before responding to requests involving personal information.

Please do not send passwords, complete payment-card numbers, government identification, or other highly sensitive information through ordinary email unless specifically requested through an appropriate secure process.

If you believe personal information has been improperly accessed or your HexaNest account has been compromised, contact support@hexanest.ca promptly.