1. Data Controller
For the purposes of this notice, the data controller is:
HexxLock / HexxPDF
Contact: [email protected]
You may contact us at the email address above regarding the processing and protection of your personal data, or to submit requests related to your rights under this notice.
2. General Approach
HexxPDF aims to perform PDF and file operations in the user's own browser whenever possible. This approach helps ensure that, in many cases, your files can be processed on your device without being permanently uploaded to our servers.
However, some features may require server-side processing for technical reasons. When this is the case, we aim to indicate this as clearly as possible on the relevant tool page.
HexxPDF aims to protect user privacy by avoiding unnecessary data collection, limiting file processing to what is necessary for the relevant purpose, and respecting user preferences.
3. Information We May Process
When you use HexxPDF, the following types of information may be processed:
Technical data: IP address, device type, operating system, browser type, language preference, approximate location, date and time of visit, error logs, and performance data.
Usage data: Visited pages, tools used, clicks and interaction data, page loading times, tool usage frequency, and similar analytics data.
Cookie and preference data: Cookie preferences, language selection, theme preference, cookie consent status, and similar settings that help improve the site experience.
Contact data: If you contact us, we may process your name, surname, email address, message content, and information related to your request.
Advertising and measurement data: When Google advertising products or similar third-party services are used, limited data may be processed for ad delivery, ad performance measurement, ad interactions, ad frequency control, reporting, and abuse prevention purposes.
File processing data: Files processed through HexxPDF tools are processed in the user's browser whenever technically possible. However, some features, large files, advanced conversion processes, or additional services that may be introduced in the future may require server-side processing. In such cases, files are processed only for the purpose of performing the relevant operation.
4. Processing of Your Files
HexxPDF processes user files within the browser whenever possible. In such cases, your file may be processed without leaving your device.
If a feature requires server-side processing, files may be temporarily processed only for the purpose of performing the relevant operation. In such cases, we aim not to store files permanently and to delete them after the operation is completed.
Important notice: We recommend being careful when processing files that contain health records, identity documents, financial records, trade secrets, official documents, legal documents, or private information belonging to third parties through any online tool.
5. Purposes of Processing Information
Collected or processed information may be used for the following purposes:
- To provide and operate HexxPDF tools
- To perform PDF and file operations
- To maintain site security
- To prevent abuse, bot traffic, spam, and harmful activity
- To measure and improve site performance
- To detect errors and resolve technical issues
- To improve the user experience
- To remember language, theme, and cookie preferences
- To respond to user requests
- To deliver ads and measure ad performance
- To enable Google advertising products or similar third-party services
- To comply with legal obligations
- To establish, exercise, or defend legal rights
6. Legal Bases for Processing Personal Data
Personal data may be processed in accordance with applicable laws based on the following legal bases:
- Processing is necessary for the establishment or performance of a contract
- Processing is necessary for compliance with a legal obligation
- Processing is necessary for the establishment, exercise, or defense of legal rights
- Processing is necessary for the legitimate interests of the data controller
- The user has given explicit consent
- Processing is necessary for site security, service quality, and technical functionality
Strictly necessary cookies and essential technical data may be processed to ensure that the site operates securely and properly.
Non-essential cookies, such as analytics, functional, and advertising cookies, are enabled based on the user's explicit consent or preferences where required by applicable law or relevant service provider policies.
8. Advertisements and Google Services
HexxPDF may be an ad-supported platform. In this context, Google advertising products or similar third-party advertising services may be used.
Google and Google partners may use cookies, local storage technologies, web beacons, or similar technologies for ad delivery, ad measurement, abuse prevention, frequency capping, ad performance analysis, and improving the advertising experience.
Users may be shown personalized or non-personalized advertisements through Google advertising products.
Personalized advertisements may be shown based on the user's interests, previous interactions, or similar signals. Non-personalized advertisements may rely on more limited signals, such as page content, approximate location, device type, or browser type.
In the European Economic Area, the United Kingdom, Switzerland, or other regions where applicable law similarly requires consent, cookies and advertising-related data processing activities for Google advertising products may be activated based on user consent.
In this context, HexxPDF may use consent management tools provided by Google or a Google-certified consent management platform in accordance with Google policies.
Users may change their choices regarding advertising cookies and ad preferences through the cookie settings panel on the site or through the relevant consent management screens.
9. Analytics Services
HexxPDF may use analytics tools to understand site performance and user experience.
These tools may process data such as visited pages, tools used, device type, browser information, approximate location, page loading time, error logs, and usage behavior.
Analytics services may be used to understand which tools are used most, detect technical issues, and improve the user experience.
Analytics cookies and similar technologies are enabled only based on user preference or explicit consent where required by applicable law.
11. International Data Transfers
Some infrastructure, advertising, analytics, security, or communication services used on HexxPDF may be provided by service providers located outside your country.
Therefore, depending on the nature of the service, your personal data may be transferred to servers or service providers located abroad.
When Google advertising products, analytics services, hosting services, or similar third-party technologies are used, the data processing and transfer policies of the relevant third parties may also apply.
Such transfers are carried out in accordance with applicable laws and with appropriate safeguards where required.
12. Data Security
HexxPDF aims to take reasonable technical and administrative measures to protect user data.
However, no data transmission over the internet, browser-based operation, or online system can be guaranteed to be completely risk-free.
Users should be careful, especially when processing confidential or sensitive documents.
13. Data Retention Period
Personal data is retained for as long as necessary for the purpose for which it is processed.
For tools that run within the browser, your files are not permanently uploaded to our servers. In cases where server-side processing is required, files may be temporarily processed only for the purpose of providing the relevant operation and are intended not to be retained longer than necessary for that operation.
Contact requests, technical logs, analytics data, security logs, and legal records may be retained for as long as necessary.
Retention periods may vary depending on the type of data, the purpose of processing, legal obligations, security requirements, technical needs, and the retention policies of third-party service providers.
14. Sensitive Files
HexxPDF is a digital tool platform designed for everyday PDF operations.
We recommend being careful when processing the following types of files through any online tool:
- Health records
- Identity documents
- Passports, driver's licenses, or official documents
- Financial records
- Bank documents
- Trade secrets
- Contracts
- Legal documents
- Private information belonging to third parties
- Documents subject to confidentiality obligations
Before uploading or processing such files, users are advised to make their own risk assessment.
15. Children's Privacy
HexxPDF is not designed as a service specifically intended for children.
Users below the legal age threshold in their country should not use the service without the supervision of a parent or legal representative.
If you believe that personal data belonging to a child has been processed without authorization, you may contact us.
16. Your Rights Under the Turkish KVKK
Users located in Türkiye may have the following rights under the Turkish Personal Data Protection Law No. 6698, known as KVKK:
- To learn whether their personal data has been processed
- To request information if their personal data has been processed
- To learn the purpose of processing and whether the data is used in accordance with that purpose
- To know the third parties to whom personal data has been transferred domestically or abroad
- To request correction of incomplete or inaccurate personal data
- To request deletion or destruction of personal data under the conditions set out by law
- To request notification of correction, deletion, or destruction operations to third parties to whom the data has been transferred
- To object to a result arising against the person through the exclusive analysis of processed data by automated systems
- To request compensation for damages caused by unlawful processing of personal data
You may contact us at [email protected] to exercise these rights.
17. Your Rights Under GDPR and Similar Laws
Users located in the European Economic Area, the United Kingdom, Switzerland, or regions where GDPR-like data protection regulations apply may have additional rights under applicable law.
These rights may include:
- The right of access to personal data
- The right to request correction of personal data
- The right to request deletion of personal data
- The right to request restriction of processing
- The right to object to processing
- The right to data portability
- The right to withdraw consent for processing based on explicit consent
- The right to lodge a complaint with a competent data protection authority
Withdrawal of consent does not affect the lawfulness of processing carried out based on consent before its withdrawal.
For requests related to these rights, you may contact us at [email protected].
19. Changes to This Policy
This Privacy Policy and Privacy Notice may be updated from time to time.
Updates are published on this page, and the "Last updated" date is changed accordingly. Users are encouraged to review this page periodically.
20. Contact
For questions about privacy, personal data, cookies, or this notice, you may contact us at:
Still have questions?
Get in touch
For any question, feedback, or legal notice about this page or HexxPDF, you can reach us at the address below.
[email protected]