01Who is responsible
Eagle HEX is operated by DAT Security, based in Uttar Pradesh, India. For privacy questions or requests, contact support@hexu.pro.
This policy covers the current Eagle HEX website, customer registration and sign-in, email verification, password recovery, and Razorpay checkout while configured. Test Mode simulates payments; live sales remain disabled until separately enabled.
02What the current website collects
When you register, we collect your name, email address, country, optional mobile number and password, which is stored as a one-way password hash. We also store account status, email-verification time and last sign-in time.
Sign-in uses a session token. For sign-in rate limiting, the system stores hashed email and IP identifiers; an active session record stores the IP address and browser user-agent. Verification and password-reset tokens are stored as hashes. Verification links expire after 24 hours; reset links expire after 30 minutes.
The current build includes a contact enquiry form. If you submit it, we collect your name, email address, optional phone and company, selected service and message. The enquiry is stored in the Eagle HEX CRM so an authorized administrator can review it, add internal notes and schedule follow-up. When Razorpay checkout is configured, we also create an order record containing your account reference, selected item, amount, currency and payment status. Payment credentials such as card details are entered into Razorpay Checkout and are not stored by Eagle HEX. Test Mode simulates payments; live sales remain disabled until separately enabled. Analytics and advertising pixels are not active.
If you email support@hexu.pro, we receive the email address, message and any files or information you choose to include. Please do not send passwords, payment-card details or sensitive information unless we specifically request it through a suitable secure channel.
The hosting infrastructure may process technical request data, such as an IP address, requested page, timestamp and browser or device details, to deliver and protect the website. The hosting provider controls some of its own infrastructure logs and retention settings.
03Why we use information
We use account details to create and maintain your customer account, verify your email, authenticate sign-ins, support password recovery, prevent abuse, protect the website and meet applicable legal obligations.
We use account details to provide customer-account functions. Contact-form details are used to review and respond to your enquiry, maintain its CRM record and arrange follow-up. The customer area currently displays account details and links to the site; it does not display order or download history.
04Sharing and service providers
We do not sell personal information. We may share information with a provider only where reasonably needed to host or secure the website, deliver an email, respond to a request, perform an agreed service or comply with law.
We may use the website host and email delivery facilities to store account records and send verification or recovery messages. When checkout is enabled, Razorpay processes payment information under its own terms and privacy notice. Analytics and advertising services are not active in this build.
05Cookies and similar technologies
Customer account pages use an essential first-party PHP session cookie to protect account forms and maintain a signed-in session. It is HttpOnly and SameSite=Lax, and Secure when accessed over HTTPS. It is a browser-session cookie and is cleared on sign-out or when the browser session ends.
The current Eagle HEX application code does not set analytics or advertising cookies. Hosting or security infrastructure may process technical data independently.
06Retention
Account information is retained while the account is active and as reasonably needed to operate it, address security or support matters, resolve disputes or meet legal obligations. Expired verification and password-reset records may be removed. Sign-in rate-limit records contain hashed identifiers and should be periodically pruned. Hosting log retention may depend on the provider’s configuration.
The exact retention period can vary by record type and reason. We will securely delete or de-identify information when it is no longer reasonably needed, subject to any lawful retention requirement.
07Security
We use reasonable safeguards appropriate to the information and purpose. No website or email transmission can be guaranteed completely secure. If you believe information sent to us has been exposed, contact support@hexu.pro.
08Your requests and choices
You may email support@hexu.pro to ask about personal information you have sent to us, request correction or deletion, or raise a privacy concern. We may need to verify your identity and may retain information where the law or a legitimate record-keeping need requires it.
We will handle requests in line with applicable Indian law and any other law that applies to the request. This policy does not reduce rights that the law gives you.
09Children
Customer registration is not intended for children. If you believe a child has registered or sent personal information to us, contact support@hexu.pro so we can review the request.
10Third-party links and international processing
Links to third-party websites are provided for convenience. Their privacy practices are governed by their own notices. If a service provider processes information outside India, the handling will be subject to applicable law and the relevant provider arrangements.
11Changes to this policy
We will update this page when the website’s features or information practices change. The “Last updated” date at the top identifies the current version.
12Contact
Privacy contact: support@hexu.pro. Business name: DAT Security. Location: Uttar Pradesh, India.
Questions about this policy?
For policy questions and requests, email DAT Security.
Email support@hexu.pro