Privacy Policy

Last updated: August 9, 2026

Effective date: August 9, 2026

Hextiria ("we", "us", "our") operates the Hextiria AI Business Operating System platform. This Privacy Policy explains how we collect, use, and protect your information when you use our services or visit hextiria.com.

1. Information We Collect

We collect information you provide directly to us, including:

  • Account registration information (name, email, company name)
  • Employee data you input into the platform (names, salaries, IDs, documents)
  • Financial records you create in the platform (invoices, transactions, payroll)
  • Contact form submissions and communications with our team
  • Usage data and platform activity logs

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Hextiria platform
  • Process transactions and manage your account
  • Send you service updates and security alerts
  • Respond to your inquiries and support requests
  • Comply with legal obligations, including ZATCA and GOSI requirements
  • Detect and prevent fraud and security incidents

3. Data Security

We take data security seriously. Hextiria implements industry-standard security measures including:

  • AES-256 encryption for all sensitive employee data (salaries, IBANs, national IDs, passport numbers)
  • bcrypt password hashing with a cost factor of 12
  • Role-based access control (5 permission levels)
  • Full audit logging of all data access and modifications
  • Session management with configurable timeout periods
  • HTTPS enforcement for all data in transit

4. Data Retention

We retain your data for as long as your account is active or as needed to provide you with our services. You may request deletion of your account and associated data at any time by contacting us.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only:

  • With your consent
  • To comply with legal obligations (including ZATCA e-invoicing requirements)
  • To protect the rights and safety of Hextiria and our users
  • With service providers who assist in operating our platform (under strict confidentiality agreements)

6. Multi-Tenancy and Data Isolation

All data in Hextiria is strictly isolated by company. No organisation's data is accessible to any other organisation on the platform. Every database query is scoped to your company ID.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to our processing of your data
  • Request data portability in a structured, machine-readable format

8. Cookies

We use essential session cookies to maintain your login state and platform functionality. We do not use tracking cookies for advertising purposes. For more information, see our Cookie Policy.

9. Contact

For privacy-related inquiries, please contact us at: info@hextiria.com