Privacy Policy

Last updated: November 4, 2025

Introduction

At Hexagon ("we," "us," or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services for SKU-level Generative Engine Optimization (GEO).

By accessing or using Hexagon, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

Information We Collect

Account Information

When you create an account, we collect:

  • Name and email address
  • Company name and business information
  • Password (encrypted and never stored in plain text)
  • Billing and payment information (processed securely through third-party payment processors)

Product Data

To provide our services, we collect and process:

  • Product SKUs, names, descriptions, and specifications
  • Product images and pricing information
  • Inventory levels and availability data
  • Product categories and metadata
  • E-commerce platform integration credentials (stored encrypted)

Usage Data

We automatically collect information about how you use our platform:

  • Pages viewed and features accessed
  • Time spent on the platform
  • Device information (browser type, operating system, IP address)
  • Analytics data about visibility performance and AI citations

AI Search Data

To track your products' performance in AI search results, we collect:

  • Search queries and prompts where your products appear
  • AI platform responses mentioning your SKUs
  • Competitor product mentions and positioning
  • Visibility metrics and citation frequency

How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain our GEO services
  • Track your products' visibility across AI platforms (ChatGPT, Perplexity, Claude, Gemini, etc.)
  • Generate AI-optimized content for your products
  • Analyze and improve your SKUs' performance in AI search results
  • Send you service notifications, updates, and marketing communications (with your consent)
  • Process billing and payments
  • Detect, prevent, and address technical issues or fraudulent activity
  • Comply with legal obligations
  • Develop new features and improve our platform

Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers

We share data with trusted third-party service providers who assist us in operating our platform, including:

  • Cloud hosting providers (for data storage and processing)
  • Payment processors (for billing)
  • Analytics services (for usage insights)
  • AI/ML service providers (for content generation and optimization)

Legal Requirements

We may disclose your information if required by law or in response to valid legal requests from government authorities.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

Data Security

We implement industry-standard security measures to protect your information:

  • End-to-end encryption for data in transit (TLS/SSL)
  • Encryption at rest for sensitive data
  • Regular security audits and vulnerability assessments
  • Access controls and authentication requirements
  • Secure data centers with physical security measures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your information for as long as necessary to:

  • Provide our services and maintain your account
  • Comply with legal obligations (tax, accounting, etc.)
  • Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it by law.

Your Rights and Choices

Depending on your location, you may have the following rights:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information
  • Portability: Request a copy of your data in a machine-readable format
  • Objection: Object to our processing of your information
  • Restriction: Request that we restrict processing of your information
  • Opt-out: Unsubscribe from marketing communications

To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

  • Maintain your session and keep you logged in
  • Remember your preferences
  • Analyze platform usage and performance
  • Deliver personalized content

You can control cookies through your browser settings, but disabling cookies may limit your ability to use certain features of our platform.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately and we will delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: [email protected]

Sales Inquiries: [email protected]

Hexagon Labs, Inc.
Privacy Compliance Team

Additional Rights for EU and California Residents

For EU Residents (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

  • Right to lodge a complaint with a supervisory authority
  • Right to withdraw consent at any time
  • Right to data portability in a structured, commonly used format

For California Residents (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information we collect, use, and disclose
  • Right to request deletion of your personal information
  • Right to opt-out of the sale of your personal information (we do not sell personal information)
  • Right to non-discrimination for exercising your CCPA rights

To exercise these rights, contact us at [email protected].