Privacy Policy

Last updated: December 24, 2024

1. Introduction

HexPlace ("we," "us," "our," or "Company") is committed to protecting your privacy in compliance with GDPR, CCPA, and all applicable data protection laws. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and application (https://hexplace.live). HexPlace uses Paddle Inc. as our payment processor to handle all payment and billing information securely.

2. Information We Collect

We collect information that you provide directly to us, such as:

• Account Information: Username, email address, password, and profile information
• Artwork Data: Images and pixel art you create and upload to our platform
• Payment Information: No payment card data is stored on our servers. All payment information is processed securely by Paddle Inc. (PCI Level 1 certified)
• Communications: Messages, feedback, and support requests you send us

We also automatically collect certain information about your device and usage:

• Device Information: Device type, operating system, browser type, and IP address
• Usage Data: Pages visited, time spent, interactions with features, and error logs
• Location Data: Approximate location based on IP address (not precise)
• Cookies: We use cookies to enhance your experience and remember preferences

3. How We Use Your Information

We use the information we collect for various purposes:

• To provide, operate, and maintain the Service
• To create and manage your account
• To process payments through our payment processor (Paddle)
• To send billing information and transaction receipts
• To improve and optimize our Service
• To communicate with you about updates and changes
• To respond to your inquiries and provide customer support
• To detect, investigate, and prevent fraudulent transactions and abuse
• To comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information to third parties. However, we may share your information:

• Payment Processor: Payment information is securely shared with Paddle Inc. for transaction processing. See Paddle's Privacy Policy
• Service Providers: With vendors who assist us in operating the Service (e.g., hosting providers, analytics)
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In the event of merger, acquisition, or bankruptcy
• User Content: Your artwork may be displayed publicly on shared canvases with attribution

5. Data Retention

We retain your personal information for as long as necessary to provide the Service and comply with legal obligations:

• Account Data: Retained while your account is active. Upon deletion, anonymized within 30 days
• Payment Records: Retained for 7 years per tax and financial regulations (stored by Paddle)
• Usage Logs: Retained for 90 days for security and fraud prevention
• Artwork/User Content: Retained as long as content is visible. Users may request deletion anytime
• Legal/Compliance Data: Retained as long as required by applicable law

Upon account termination, we will delete or irreversibly anonymize your personal information within 30 days, except where we are required to retain it by law or for legitimate business purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. Payment processing is handled exclusively by Paddle Inc., which maintains PCI Level 1 certification. However, no method of transmission over the Internet is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: The right to access your personal information
• Correction: The right to correct inaccurate information
• Deletion: The right to request deletion of your information
• Portability: The right to receive your information in a portable format
• Opt-out: The right to opt-out of marketing communications

To exercise these rights, please contact us using the information provided below. For payment-related data requests, Paddle Inc. should be contacted directly as per their Master Services Agreement.

8. Third-Party Services

The Service may contain links to third-party websites and services. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party services before providing your information. This includes Paddle Inc.'s payment processing services.

9. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience. You can control cookie settings in your browser preferences. Please note that disabling cookies may affect the functionality of the Service.

10. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete such information promptly.

11. International Data Transfers

Your information may be processed and stored in different countries. By using HexPlace, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws. We ensure such transfers comply with GDPR and other applicable regulations.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on the Service and updating the "Last updated" date. Your continued use of the Service after such modifications constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: