Is Hex safe with your data?
Hex
Strong disclosure · high confidence
Hex earns an A (73/100) because it discloses its data practices clearly.
#3
of 216 apps ranked
73
score · BI & analytics avg 44
+29
vs category average
Hex commits in its Enterprise service agreement that neither it nor its AI providers will use customer data to train AI models, and it names a Privacy Officer, a data processing addendum, and a thirty-day account deletion window, but its retention period is open-ended and it never says how it would notify anyone of a breach.
What Hex's privacy policy and terms of service say about your data
No training on customer data
The service agreement states that neither Hex nor its AI service providers will use customer data to train, improve, or develop any AI models or services, with processing for safety, security, and legal compliance carved out.
Retention is open-ended
The privacy policy names no retention period, keeping personal data for "so long as we have an ongoing legitimate business need," though account data is deleted within thirty days of a written request.
Breach notification is absent
The policy defines what counts as a data breach and asks customers to report incidents to Hex, but it never commits to telling users when their own data is exposed, or within what timeframe.
Enterprise-only terms
The strongest data commitments sit in an agreement that applies only to Enterprise plans and subscriptions with order forms; Community, Professional, and Team users are pointed to a separate Terms of Service.
What the policy is silent or vague on
- Not stated: shorter retention for AI conversation logs
- Not stated: breach notification
- Only partial: a way to opt out of training
- Only partial: whether training use differs by plan
Hex privacy rating
Details
- Category
- BI & analytics
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2026-07-14
- Region scored
- Global / US-default
- Last assessed
- 2026-10-13
Documents examined
Other bi & analytics apps
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.