Is Hex safe with your data?

Hex

66/100

Good disclosure · high confidence

Hex earns a B (66/100) because it discloses most of its data practices.

#25

of 211 apps ranked

score · BI & analytics avg 49

+17

vs category average

Grade scaleA · 70–100B · 60–69C · 48–59D · 35–47F · 0–34

Hex publishes a strong no-training commitment and clear customer ownership of inputs and outputs, but its portability and legal-basis disclosures appear only in the EEA and UK section, and it never commits to a breach-notification timeline.

What Hex's privacy policy and terms of service say about your data

No training on customer data

Section 1.7(a) states that neither Hex nor its AI Services providers will use Customer Data to train, improve, or develop any AI models or services, and the Customer Model feature carries a named 30-day opt-out via Service settings or support@hex.tech.

EU-only rights inflate the global picture

Data portability and the purposes-to-legal-bases mapping appear only under INFORMATION FOR EEA, UK, AND SWISS USERS. The US state rights list covers Know, Delete, Correct, Opt Out, Non-Discrimination and Appeal but omits portability entirely, so the default global user gets less.

No breach notification duty

The agreement defines Data Breach and caps breach liability at 2x annual fees, yet nowhere obligates Hex to notify customers of an incident within any timeframe. Security controls rest on commercially reasonable efforts rather than named mechanisms.

Ownership licence stays service-bounded

Customer retains all right, title and interest in Customer Data including Inputs and Outputs. The sublicensable licence in Section 2.4 is confined to providing and maintaining the Service, and the perpetual Feedback licence in Section 2.3 expressly excludes Customer Data.

What the policy is silent or vague on

Not stated: whether training use differs by plan
Not stated: data portability
Not stated: shorter retention for AI conversation logs
Not stated: a data-minimisation commitment

Hex privacy rating

Training-data use3 of 4 disclosed

Keeps user inputs out of model training, or makes training opt-inDisclosed

Names a way to opt out of or into trainingDisclosed

Says whether training use differs by plan or tierSilent

Lets the user keep ownership of generated outputsDisclosed

Data-subject rights4 of 5 disclosed

Grants a right to access your dataDisclosed

Grants a right to delete your dataDisclosed

Offers data portability in a usable formatSilent

Grants a right to correct your dataDisclosed

Grants a way to object to or opt out of processingDisclosed

Retention and deletion1 of 4 disclosed

States a retention period for your dataPartial

States a deletion timeline after closure or requestDisclosed

Sets a shorter retention for AI conversation logsSilent

Commits to collecting only the data it needsSilent

Third-party sharing4 of 5 disclosed

Lists the categories of third parties it shares withDisclosed

References a sub-processor list or data processing agreementDisclosed

Does not sell or share data for advertising, or offers opt-outDisclosed

Names a safeguard for international data transfersDisclosed

States a standard for government and law-enforcement accessSilent

Transparency2 of 4 disclosed

Discloses that you are interacting with AIDisclosed

Marks AI-generated or synthetic outputNot applicable

Enumerates the categories of data it collectsDisclosed

Maps processing purposes to legal basesSilent

Is versioned and dated, with change noticePartial

Sensitive data and children1 of 2 disclosed

Discloses automated decisions and a human-review pathNot applicable

Limits the use of special-category dataPartial

Governs biometric data specificallyNot applicable

States protections for children's dataDisclosed

Security and accountability1 of 3 disclosed

Describes its security safeguardsPartial

Commits to breach notificationSilent

Names a certification or a privacy contactDisclosed

DisclosedPartialSilentAdverseNot applicable

Details

Category: BI & analytics
Modalities: text
Processes biometrics: No
Policy last updated: 2026-07-14
Region scored: Global / US-default
Last assessed: 2026-08-13

Documents examined

Other bi & analytics apps

Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.