Privacy Policy

This Privacy Policy explains how A5 Software LLC ("A5", "we", "us", or "our") collects, uses, shares, and protects personal information when you use Hexis, including our software, website, dashboard, Discord server, and hosted services (the "Services"). It is part of our Terms of Service. By using the Services, you acknowledge the practices described here.

1. Information We Collect

1.1 Information you give us

• Account details, such as your email address, display name, and sign-in provider
• Payment details, processed by Stripe. We receive the status of your purchase and limited billing details, and never store full card numbers
• Minecraft accounts you link to your license, such as username and UUID
• Discord account details if you link Discord or verify in our server, including your Discord ID and username and an encrypted authorization from Discord that lets us add you back to the Hexis server if it ever has to move. You can remove it any time in Discord under Settings, Authorized Apps
• Content you upload or send us, such as scripts, support tickets, messages, and feedback

1.2 Information collected automatically

When you use the Services, we and our service providers may automatically collect information such as:

• Device and hardware information, including identifiers derived from your hardware and system components (such as hashed CPU, motherboard, or other component identifiers), installation identifiers, operating system, and system configuration
• Network information, including IP address, approximate location derived from it, and connection details
• License, account, and session information, including license checks, software and game versions, session activity, and the servers you connect to
• Usage, diagnostic, and performance information, including logs, errors, crash reports, and how you use features and scripts
• Gameplay and in-game information, including chat, recordings, world data, and information about your game environment, such as other mods and their files, and events such as bans or disconnects
• Content and activity from hosted features, such as Live View, replays, world views, and remote control
• Identifiers embedded in files you download, used to trace copies to the license they came from
• Information collected through cookies and similar technologies, described in Section 7

1.3 Information from third parties

We receive information from sign-in providers such as Google and Discord, from Stripe about your payments, and from Mojang or Microsoft services that confirm the Minecraft accounts you link.

2. How We Use Information

• To provide, operate, and maintain the Services, including verifying licenses and linked accounts
• To process payments and manage subscriptions
• To enforce our Terms, prevent license sharing, piracy, fraud, and abuse, and to decide on suspensions or revocations
• To protect the security and integrity of the Services and our users
• To provide support and communicate with you about your account, updates, and changes
• To understand how the Services are used and to develop, test, and improve them, including our AI features
• To comply with legal obligations and to establish, exercise, or defend legal claims

3. Legal Bases (EEA and UK Users)

Where the GDPR or UK GDPR applies, we rely on: performance of our contract with you (providing the Services and your license); our legitimate interests (security, fraud and piracy prevention, enforcement of our Terms, and improving the Services), balanced against your rights; your consent, where we ask for it, which you may withdraw at any time; and compliance with legal obligations.

4. AI Features

When you use AI features, the prompt and limited in-game context needed to answer it are sent to third-party AI providers, which process it under their own terms and privacy policies. We use chat and gameplay data as described in Section 1.2 to improve these features.

5. How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We share information only as follows:

• Service providers that process data on our behalf under contract, such as providers of payments, hosting, databases, storage, networking, security, analytics, sign-in, community, and AI services
• Legal and safety. When we believe in good faith that disclosure is required by law, subpoena, or court order, or is needed to enforce our Terms, investigate fraud or abuse, or protect the rights, property, or safety of A5, our users, or others
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy
• With your direction or consent, such as when you share content publicly or link a third-party account

6. Data Retention

We keep personal information for as long as your account is active and as long as needed for the purposes in this Policy. We may keep some information after your account closes where needed to comply with legal obligations, resolve disputes, prevent fraud and abuse, enforce our Terms (including records of revoked licenses and bans), or keep security logs. If you request deletion, we delete or de-identify your personal information within 30 days, except as described in this section.

7. Cookies

The website uses essential cookies for sign-in, session management, and security. We may also use analytics to understand how the website is used. You can block cookies in your browser, but parts of the website may stop working. We do not respond to Do Not Track signals.

8. Security

We use reasonable administrative, technical, and physical safeguards. No method of transmission or storage is completely secure, and we cannot guarantee the security of your information. You are responsible for keeping your credentials and devices secure.

9. Your Rights and Choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and receive a portable copy
• Correct inaccurate information
• Delete your information
• Object to or restrict certain processing, and withdraw consent where we rely on it
• Opt out of marketing messages
• Not be discriminated against for exercising these rights

To make a request, contact us through our Discord server. We may need to verify your identity before acting on it, and we may decline requests that are unfounded, excessive, or where an exception applies. An authorized agent may make a request for you with proof of authorization. If you are in the EEA or UK, you may also complain to your local data protection authority.

10. Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from them. If we learn that a child under 13 has given us personal information, we will delete it. If you believe this has happened, contact us.

11. International Transfers

We are based in the United States, and our service providers may process information in the United States and other countries. Those countries may have data protection laws different from yours. Where required, we use appropriate safeguards, such as standard contractual clauses, for these transfers.

12. Third-Party Services

The Services link to and work with services we do not control. Their privacy practices are governed by their own policies:

• Stripe: Privacy Policy
• Vercel: Privacy Policy
• Supabase: Privacy Policy
• Cloudflare: Privacy Policy
• Google: Privacy Policy
• Discord: Privacy Policy

13. Changes to This Policy

We may update this Policy from time to time. Changes are posted on this page with an updated "Last Updated" date. If a change materially affects how we use information we already hold, we will give notice through the website, dashboard, or Discord. Continued use of the Services after changes are posted means you accept the updated Policy.