Effective date: 1 September 2026 · Last updated: 1 September 2026 · Version: 1.0
This Privacy Policy applies to the Hexifyer account, which is the single sign-in used for Polaris and Hexifyer DevStudio on the web and in their mobile applications. It describes the data we receive when you sign in with Google, Apple, Microsoft, LinkedIn or GitHub, and when you connect a Google or Microsoft calendar.
The processing of your data within each product is governed by that product's privacy policy:
- Polaris: https://polaris.hexifyer.com/privacy
- Hexifyer DevStudio: https://devstudio.hexifyer.com/privacy
1. Who we are
Polaris and Hexifyer DevStudio are operated by Hexifyer FZ-LLC, a free zone company registered in Ras Al Khaimah, United Arab Emirates under licence number 47017173, at FOAM1588, Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates. Hexifyer FZ-LLC is the controller of your Hexifyer account data.
| Contact | Purpose | Address |
|---|---|---|
| Privacy and data protection | Access, correction, deletion and export requests, and questions about this policy | privacy@hexifyer.com |
| Product support | Questions about using Polaris or DevStudio | support@hexifyer.com |
2. The Hexifyer account
Your Hexifyer account is held in Supabase Auth in Frankfurt, Germany (AWS eu-central-1). The same account is used to sign in to Polaris and to DevStudio.
Holding an account in one product does not give you access to any content in the other. Access to a Polaris workspace or a DevStudio project is granted only by invitation. We do not transfer content between the two products and we do not use the data of one product to operate the other.
3. Data we receive when you sign in
You may sign in with an email address and password, or through Google, Apple, Microsoft, LinkedIn or GitHub. Where you use a sign-in provider, that provider authenticates you under its own terms and shares only the profile information you approve on its consent screen.
| Data | Purpose |
|---|---|
| Name | To identify you to the people you work with |
| Email address | To identify your account, send service messages such as invitations and security notices, and verify requests you make to us. If you sign in with Apple and choose to hide your email address, we receive an Apple relay address. |
| Profile photo, where provided | To display on your profile |
| Provider account identifier | To link the provider account to your Hexifyer account |
We do not request access to your contacts, email, files or any other data held in your sign-in provider account.
4. Data we receive when you connect a calendar
Connecting a calendar is optional. It is requested separately from sign-in, through a separate consent screen, when you choose to sync your calendar from the meetings page in Polaris or DevStudio. No calendar data is read or written until you connect a calendar.
| Data | Purpose |
|---|---|
| Read and write access to the events in the Google or Microsoft calendar you connect, including titles, times and attendee email addresses | To keep meetings in sync in both directions: events in your calendar are displayed in the product from which you connected it, and meetings you create or change in that product are created or updated in your calendar. Where you enable it for a meeting, the data is also used to send the AI notetaker to that meeting. |
Calendar data is stored in the database of the product from which you connected the calendar, in Frankfurt, Germany (AWS eu-central-1). The retention period is set out in that product's privacy policy.
5. Use and sharing of data received from Google and Microsoft
- We use this data only to provide the features you use in Polaris or DevStudio, namely sign-in and, where you connect a calendar, the calendar and meeting features.
- We do not sell this data, use it for advertising, or use it to train any artificial intelligence or machine learning model, including generalised models.
- We share this data only with the service providers that operate Polaris and DevStudio, as listed in each product's sub-processor list, and only to provide those features, or where required by law.
- Hexifyer personnel do not access this data except at your request (for example, in connection with a support request), where necessary for security purposes, or where required by law.
Hexifyer's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data received from Microsoft is handled on the same terms.
6. Security
Data is encrypted in transit using TLS and at rest. Access within each product is controlled by role, and access by our personnel is limited to those who require it to operate the service.
7. Revoking access and deleting your account
Calendar. You may disconnect a calendar from the product at any time, or revoke Hexifyer's access in your Google or Microsoft account settings. We then stop reading and updating your calendar. Events already written to your calendar remain there until you delete them.
Sign-in provider. You may revoke Hexifyer's access in your sign-in provider's account settings and sign in by another method.
Account deletion. Deleting your Hexifyer account from either product deletes it for both products and ends your access to Polaris and DevStudio. You may delete your account from your account settings on the web or in either mobile application, or by writing to privacy@hexifyer.com from the email address associated with your account.
Deletion is subject to a 14-day grace period, during which you may cancel it. After the grace period, account data is erased from our live systems within 72 hours, and the last backup copy is deleted within 14 days of erasure. Data that each product retains after deletion, such as invoice records, is described in that product's privacy policy:
- Polaris: Section 22 of https://polaris.hexifyer.com/privacy
- Hexifyer DevStudio: Section 25 of https://devstudio.hexifyer.com/privacy
8. Your rights
You may request a copy of your account data, its correction or its deletion, free of charge, by writing to privacy@hexifyer.com. We respond within 6 working days. Each product's privacy policy sets out your rights in full and how to lodge a complaint with a supervisory authority.
9. Changes to this policy
The effective date of this policy is stated at the top of this page. If we change the data we receive from a sign-in or calendar provider, or the way we use it, we will update this policy and notify you by email before the change takes effect.