Privacy policy

1. Who is responsible

The controller for personal data described in this policy is Filenk Tech, the operator of FILHEX (“we”, “us”). For privacy requests, contact support@filhex.com or use Contact.

This policy covers the public marketing site and personal data processed in connection with Workspaces, Credits, and Solution Jobs in the FILHEX product. It is intended to align with the EU General Data Protection Regulation (GDPR) and similar laws where they apply.

2. Data we process

Information you give us

Workspace and account details such as name, email, and related profile fields needed to sign in and verify email, whether you sign up in the app or on filhex.com
Billing-related details needed for Credit pack checkout (for example billing country or tax fields shown at purchase)
Messages you send by email, WhatsApp, or other support channels
Sign-up on the website: if you create a Workspace on filhex.com, we receive the Workspace name, email and password you enter (the password is stored only as a one-way hash) and the page and campaign that brought you to the site, and we send the verification email
Download link by email (until 9 October 2026): if you asked for the download link on the download page before that date and ticked the consent box, we used that address only for the link and one reminder. This has ended, the addresses are deleted and no further emails are sent

Information from using the Service

Technical logs: IP address, device/browser or app version, timestamps, and security events
Product usage needed to operate Workspaces: Solution Job metadata, Catalog selections, Credit wallet movements, and status history
Original and result File binaries and related metadata required to run Solution Jobs (stored as product data, not for advertising)

Windows app

Installation ID: a random identifier created on first launch, with the app version and Windows version, so we can count installs and link a device to your Workspace after you sign in
Device check for free Credits: at registration in the app — or at the first sign-in when you signed up on the website — the app sends a one-way hash of the Windows machine identifier, so the free signup Credits are given once per PC; the raw identifier never leaves your device. We also keep the IP address you register from (for IPv6, only its network part), so free Credits are given once per network every 30 days
Sign-in security records: for each sign-in we keep the IP address, country, app version, the one-way PC hash and the installation ID, to protect accounts and prevent abuse of free Credits
Sign-in on this PC: session tokens, and your email and password if you choose “Remember me”, are stored only on your PC, encrypted with Windows data protection for your Windows user
Local logs: if the app hits an unexpected error it writes a technical log on your PC (no passwords or tokens). Logs stay on your PC unless you send them to support
Funnel events: the app reports anonymous onboarding steps (for example “registration started” or the reason a registration failed) to measure where setup gets stuck

Files you open in the app's Hex Editor stay on your PC and are not uploaded.

Website analytics and advertising (optional)

On the marketing site we use essential cookies to operate the site. Everything beyond that is optional and controlled by the cookie banner, which lets you accept analytics only, accept analytics and advertising, or refuse both. All Google tags run with Consent Mode, so nothing is stored on your device for a purpose you have not accepted.

Analytics cookies: Google Analytics, to understand how the marketing pages perform
Advertising cookies: Google Ads, to measure which campaigns lead workshops to FILHEX and to avoid paying for ads that do not work

We do not send email addresses, ECU File binaries, or private File download URLs to Google Analytics or Google Ads. Aggregate visit or funnel signals may also be stored in FILHEX systems without identifying File content. You can change your choice at any time by clearing this site's cookies and site data in your browser, which brings the banner back.

Payments

Card payments for Credit packs are processed by our payment provider (Stripe Checkout). We do not store full card numbers on our servers. We receive payment status and references needed to credit your wallet and keep accounting records.

3. Why we process data

Contract: create and run Workspaces, deliver Solution Jobs and Files, sell and apply Credits, provide support
Legal obligation: tax, accounting, and other mandatory record-keeping
Legitimate interests: secure the Service, prevent fraud and abuse, improve reliability and UX, understand marketing-site performance in aggregate
Reminder emails (legitimate interests): if you have not used FILHEX for a week, and again after a month, we may email you once about your Workspace (for example Credits still waiting). Every reminder has an unsubscribe link, and replying “unsubscribe” works too
Consent: non-essential analytics and advertising cookies, and any marketing emails where we ask for consent

You may withdraw cookie or marketing consent without affecting processing that already happened lawfully before withdrawal.

4. Sharing

We share personal data only as needed with processors who help us run FILHEX under appropriate agreements — for example hosting and storage, email delivery, payment processing, and the analytics or advertising vendors you consent to on the website. We may disclose data to authorities when required by law or to protect rights, safety, or security.

We do not sell personal data. Upstream File processing may involve technical subprocessors strictly to fulfil a Solution Job; provider brand names are not exposed in the tuner product UI.

5. International transfers

Data is processed in locations used by us and our processors. Where personal data leaves the EEA/UK, we rely on appropriate safeguards (such as adequacy decisions or Standard Contractual Clauses) where required.

6. Retention

We keep personal data only as long as needed for the purposes above, then delete or anonymise it, unless a longer period is required by law. Typical patterns: active Workspace data while the Workspace is open and for a limited period after closure; payment and invoice records for statutory accounting periods; security and server logs for shorter operational windows unless needed for an investigation; marketing consent records while consent is active and for a limited period as evidence.

File binaries are retained as needed to provide Solution Job history and downloads, subject to product retention rules and legal holds. Files of a Solution Job you discard are deleted from our storage 30 days after you discard it.

7. Your rights

Where GDPR (or equivalent law) applies, you may request access, rectification, erasure, restriction, portability, or objection, and you may lodge a complaint with your local supervisory authority. To exercise rights, email support@filhex.com . We may need to verify your identity before responding. We aim to reply within one month, or longer where the law allows for complex requests.

8. Security

We apply technical and organisational measures appropriate to the risk — including encrypted transport (TLS), access controls, and separation of File object storage from analytics pipelines. No method of transmission or storage is perfectly secure; please protect your Workspace credentials.

9. Children

FILHEX is not directed at anyone under 18. We do not knowingly collect children’s personal data. If you believe we have, contact us and we will delete it where required.

10. Changes

We may update this policy when our practices or the law change. Material updates will be reflected on this page; continued use of the Service after publication means you acknowledge the revised policy.

11. Contact

Filenk Tech

Privacy enquiries: support@filhex.com · Contact