Hexis Privacy Policy
This Privacy Policy explains how Hexis accesses, uses, stores, shares, retains, and deletes information, including Google user data.
1. About Hexis
Hexis is open-source, local-first software that users install and run on computers or infrastructure they control. It provides persistent memory, identity, goals, and tool integrations around a user-selected AI model. The source code is available at github.com/QuixiAI/Hexis.
2. Information Hexis may process
Hexis may process information supplied directly by the user, application configuration, conversation history, memories created by the application, files the user chooses to ingest, and information obtained through integrations the user enables.
3. Google user data and Gmail permissions
Gmail integration is optional. Hexis accesses Google user data only after a user intentionally connects a Google account and approves the requested permissions on Google's authorization screen.
Depending on the features enabled, Hexis may request permission to:
- search for and read Gmail messages and message metadata;
- compose and send email on the user's behalf;
- apply or remove labels and organize messages;
- archive messages or move messages to trash; and
- maintain an authorization token so the connection continues until revoked.
Hexis uses this information only to provide user-requested email features, such as finding messages, summarizing selected content, drafting or sending replies, and organizing mail.
4. Storage and security
In a standard local installation, Hexis stores its application data and Google authorization credentials in the environment controlled by the user. Credentials must not be committed to the public Hexis source repository. Users are responsible for securing the machine, database, backups, and configuration on which they run Hexis.
No method of storage or transmission is completely secure. Hexis is under active development, and users should review the source, configuration, and release notes before enabling access to sensitive information.
5. Sharing and external processing
QuixiAI does not sell Google user data and does not use Google user data for advertising. Hexis does not transfer Google user data to data brokers.
Because Hexis can use third-party AI models and integrations selected by the user, information the user asks Hexis to process may be transmitted to those configured providers. The provider and destination depend on the user's own installation and configuration. Users should review the privacy terms of each provider they choose.
Information may also be disclosed when required by applicable law, or when necessary to investigate security abuse, but QuixiAI ordinarily does not possess data stored solely in a user's local installation.
6. Google API Services User Data Policy
Hexis's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
7. Retention and deletion
Locally stored information remains under the user's control and may persist until the user deletes it, resets the relevant Hexis instance, removes the applicable database records, or removes the installation and its data.
A user may disconnect Gmail by removing the Google connection in Hexis and may revoke the application's authorization from the security settings of their Google Account. Revocation prevents future access but does not automatically delete copies previously stored in the user's own local database or backups; those must be deleted by the user.
8. Children's privacy
Hexis is not directed to children under 13, and QuixiAI does not knowingly collect children's personal information through a centrally operated Hexis service.
9. Changes to this policy
This policy may be updated as Hexis changes. Material changes should be reflected by updating the effective date and publishing the revised policy at the same public URL.
10. Contact
Questions about this policy or Hexis's use of Google user data may be sent to privacy@quixi.ai.