Privacy Policy
PRIVACY POLICY
Last updated: April 1, 2026
Gaprod (Groupe Dwenola SAS), with its registered office at 231 rue Saint-Honoré, 75001 Paris, France, operates the HexaTransfer service ("Service"). This Privacy Policy explains how we collect, use, and protect information when you use HexaTransfer.
1. DATA CONTROLLER
The data controller is:
Gaprod (Groupe Dwenola SAS)
231 rue Saint-Honoré
75001 Paris, France
Email: privacy@hexatransfer.com
2. INFORMATION WE COLLECT
2.1 Information you provide:
- Sender email address (optional, only when choosing email delivery)
- Recipient email address (optional, only when choosing email delivery)
- Message content (optional, when you add a message to your transfer)
2.2 Information collected automatically:
- IP address (temporarily logged for security and abuse prevention)
- Browser type and version
- Device type and operating system
- Date and time of access
- Pages visited and actions taken
2.3 Information we do NOT collect:
- File contents: All files are encrypted in your browser before upload using end-to-end encryption. We cannot access, read, or analyze the content of your files.
- Encryption keys: The encryption key is embedded in the download link fragment (after the # symbol) and is never sent to our servers.
3. HOW WE USE YOUR INFORMATION
We use the collected information to:
- Provide and operate the file transfer service
- Send transfer notification emails (when email delivery is selected)
- Send download confirmation emails to senders
- Prevent abuse and ensure security of the Service
- Generate anonymous, aggregated usage statistics
- Comply with legal obligations
4. DATA RETENTION
- Transfer metadata (sender email, recipient email, transfer details): Deleted when the transfer expires (maximum 14 days after creation).
- Encrypted files: Deleted when the transfer expires.
- Server logs (IP addresses, access logs): Retained for a maximum of 30 days.
- We do not retain any data longer than necessary for the purposes described above.
5. DATA SHARING
We do not sell, rent, or trade your personal information. We may share data only in the following circumstances:
- With service providers who assist in operating the Service (hosting, email delivery), under strict data processing agreements.
- When required by law or in response to valid legal process.
- To protect the rights, property, or safety of Gaprod, our users, or the public.
6. COOKIES
HexaTransfer uses only essential cookies necessary for the proper functioning of the Service (e.g., CSRF protection, locale preference). We do not use tracking cookies or third-party analytics cookies.
7. YOUR RIGHTS (GDPR)
Under the General Data Protection Regulation (GDPR), if you are in the European Economic Area, you have the right to:
- Access your personal data
- Rectify inaccurate personal data
- Request deletion of your personal data
- Object to or restrict processing of your personal data
- Data portability
- Withdraw consent at any time
To exercise these rights, contact us at privacy@hexatransfer.com.
8. INTERNATIONAL TRANSFERS
Your data is processed on servers located in the European Union. If data is transferred outside the EU, we ensure appropriate safeguards are in place in accordance with GDPR requirements.
9. SECURITY
We implement appropriate technical and organizational measures to protect your data, including:
- End-to-end encryption of all transferred files
- TLS/HTTPS encryption for all connections
- Regular security audits
- Access controls and monitoring
10. CHILDREN'S PRIVACY
HexaTransfer is not intended for use by children under the age of 16. We do not knowingly collect personal data from children.
11. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.
12. CONTACT
For any questions regarding this Privacy Policy, please contact:
Gaprod (Groupe Dwenola SAS)
231 rue Saint-Honoré
75001 Paris, France
Email: privacy@hexatransfer.com
Last updated: April 1, 2026
Gaprod (Groupe Dwenola SAS), with its registered office at 231 rue Saint-Honoré, 75001 Paris, France, operates the HexaTransfer service ("Service"). This Privacy Policy explains how we collect, use, and protect information when you use HexaTransfer.
1. DATA CONTROLLER
The data controller is:
Gaprod (Groupe Dwenola SAS)
231 rue Saint-Honoré
75001 Paris, France
Email: privacy@hexatransfer.com
2. INFORMATION WE COLLECT
2.1 Information you provide:
- Sender email address (optional, only when choosing email delivery)
- Recipient email address (optional, only when choosing email delivery)
- Message content (optional, when you add a message to your transfer)
2.2 Information collected automatically:
- IP address (temporarily logged for security and abuse prevention)
- Browser type and version
- Device type and operating system
- Date and time of access
- Pages visited and actions taken
2.3 Information we do NOT collect:
- File contents: All files are encrypted in your browser before upload using end-to-end encryption. We cannot access, read, or analyze the content of your files.
- Encryption keys: The encryption key is embedded in the download link fragment (after the # symbol) and is never sent to our servers.
3. HOW WE USE YOUR INFORMATION
We use the collected information to:
- Provide and operate the file transfer service
- Send transfer notification emails (when email delivery is selected)
- Send download confirmation emails to senders
- Prevent abuse and ensure security of the Service
- Generate anonymous, aggregated usage statistics
- Comply with legal obligations
4. DATA RETENTION
- Transfer metadata (sender email, recipient email, transfer details): Deleted when the transfer expires (maximum 14 days after creation).
- Encrypted files: Deleted when the transfer expires.
- Server logs (IP addresses, access logs): Retained for a maximum of 30 days.
- We do not retain any data longer than necessary for the purposes described above.
5. DATA SHARING
We do not sell, rent, or trade your personal information. We may share data only in the following circumstances:
- With service providers who assist in operating the Service (hosting, email delivery), under strict data processing agreements.
- When required by law or in response to valid legal process.
- To protect the rights, property, or safety of Gaprod, our users, or the public.
6. COOKIES
HexaTransfer uses only essential cookies necessary for the proper functioning of the Service (e.g., CSRF protection, locale preference). We do not use tracking cookies or third-party analytics cookies.
7. YOUR RIGHTS (GDPR)
Under the General Data Protection Regulation (GDPR), if you are in the European Economic Area, you have the right to:
- Access your personal data
- Rectify inaccurate personal data
- Request deletion of your personal data
- Object to or restrict processing of your personal data
- Data portability
- Withdraw consent at any time
To exercise these rights, contact us at privacy@hexatransfer.com.
8. INTERNATIONAL TRANSFERS
Your data is processed on servers located in the European Union. If data is transferred outside the EU, we ensure appropriate safeguards are in place in accordance with GDPR requirements.
9. SECURITY
We implement appropriate technical and organizational measures to protect your data, including:
- End-to-end encryption of all transferred files
- TLS/HTTPS encryption for all connections
- Regular security audits
- Access controls and monitoring
10. CHILDREN'S PRIVACY
HexaTransfer is not intended for use by children under the age of 16. We do not knowingly collect personal data from children.
11. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.
12. CONTACT
For any questions regarding this Privacy Policy, please contact:
Gaprod (Groupe Dwenola SAS)
231 rue Saint-Honoré
75001 Paris, France
Email: privacy@hexatransfer.com