Privacy Policy

1. Introduction

Hex Nebula (“we,” “our,” or “us”) is a digital creative agency committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at hexnebula.com, use our client portal, or engage our services.

By accessing or using our services, you agree to the terms of this Privacy Policy. If you do not agree, please refrain from using our services.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information when you interact with our services:

• Full name and email address (when signing in or creating an account)
• Phone number and company name (when submitting a project inquiry)
• Project requirements, budgets, and timelines (when requesting a quotation)
• Payment information (processed through secure third-party payment providers)
• Communication records (emails, chat messages, consultation bookings)

2.2 Automatically Collected Information

• IP address, browser type, and operating system
• Pages visited, time spent on pages, and navigation paths
• Device identifiers and screen resolution
• Referral URLs and search engine terms
• Cookies and similar tracking technologies (see our Cookie Policy)

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain our services and client portal
• To process your project inquiries, quotations, and consultations
• To authenticate your identity and manage your account
• To communicate with you regarding projects, updates, and support
• To send marketing communications (with your consent, which you may withdraw at any time)
• To analyze usage patterns and improve our website and services
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations and enforce our agreements

4. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service Providers: Trusted third-party services including Supabase (authentication and database), Brevo (email delivery), and Vercel (hosting and deployment)
• Business Partners: Only when explicitly authorized by you for project collaboration purposes
• Legal Requirements: When required by law, court order, or governmental request
• Business Transfers: In connection with any merger, acquisition, or sale of company assets

5. Data Security

We implement industry-standard security measures to protect your personal data, including encrypted data transmission (TLS/SSL), secure authentication via one-time passwords (OTP), regular security assessments, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Account data is retained for the duration of your account. Project-related data is retained for up to 3 years after project completion. Marketing preferences are retained until you unsubscribe.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data
• Object to or restrict the processing of your data
• Request data portability
• Withdraw consent at any time (without affecting prior processing)
• Lodge a complaint with your local data protection authority

8. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any external sites you visit.

9. Children's Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child, we will take immediate steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website and updating the “Last updated” date. Your continued use of our services after changes constitutes acceptance of the revised policy.