Privacy Policy

Hexlist by Hexaco Global · Effective 7 November 2026

This policy explains what Hexaco Global ("we") collects when you use the Hexlist app and hexacoglobal.com, why, who it is shared with, how long it is kept and what you can ask us to do with it. It is part of our Terms of Service.

1. What stays on your computer

Hexlist works on your own computer. Your product sheets, photos, videos, listing results and run logs stay there, and are not uploaded to us. You sign in to Alibaba.com yourself in your own Google Chrome: Hexlist never asks for, sees or stores your Alibaba.com password, and your Alibaba.com session stays in Chrome on your computer.

2. What we collect

• Your account: your name, email address, company, phone number and country, your password (stored only as a one-way hash, which we cannot read), and the profile photo you choose to add.
• Your balance and payments: top-ups (amount, currency, payment method, the transaction reference you give us and any receipt you upload), invoices you create (billing name, company, address, country, phone and tax number), promo and trial codes used, and your Balance History (each listing charged or returned, with its SKU and Alibaba.com product number).
• Card payments: when you pay by card, the payment is made on Paddle's checkout. We receive the transaction number, the amount, the currency, the country and the status from Paddle. We never see or store your card number.
• The app's sessions: for each computer you sign in on, the device name, its IP address, and when it was signed in and last used, so you can sign out other devices. The sign-in token itself is stored only as a hash.
• Run progress: while the app runs, how many products are posted and left, how many listings are fixed and left, the name of your list and the product being worked on, so you can follow the run on your account page. Only the latest numbers are kept.
• Problem reports: when posting fails, the app sends an anonymous report (the step, the error, Alibaba.com's message, the category, the app version and your operating system), never your product data or passwords, so we can fix the problem for everyone.
• What you send us: support chats, bug reports and suggestions, and, only when you choose to send it from the app's Help page, your run log.
• Photo search: when you ask Hexlist to find photos, the search words go through our server to the free photo libraries Pexels and Pixabay. Your name and email are not sent to them.

3. Why we use it

• To run your account, sign you in and keep your sessions safe.
• To keep your balance correct: reserving, charging and returning the price of each listing, confirming top-ups and adding bonuses.
• To answer support requests, fix problems and improve Hexlist.
• To send emails about your account: your welcome email, payment confirmations, support replies and important changes. We send product news only to customers, and you can ask us to stop at any time.
• To prevent fraud, misuse of the app and payment abuse, and to meet our tax and accounting duties.

We use your information because it is needed to provide the service you signed up for, because we have a legitimate interest in keeping Hexlist secure and working, and where the law requires us to keep records. We do not sell your personal information and we do not use it for advertising.

4. Who we share it with

• Paddle.com, our online reseller and Merchant of Record for card payments. Paddle processes the payment, handles sales tax and keeps its own records under the Paddle Privacy Policy.
• Our hosting provider (Hostinger), which runs hexacoglobal.com, its database and our email.
• Google Analytics, which counts visits to our public Hexlist pages (see section 6).
• Pexels and Pixabay, which receive only the photo search words.
• Banks and payment wallets you choose to pay with, for transfers you make to us.
• Authorities, when the law requires it, or to protect our rights and customers against fraud.

These services may store data outside your country, including in the United States and the European Union. We share only what each one needs.

5. How long we keep it

• Your account information is kept while your account is open.
• Payment, invoice and balance records are kept for as long as tax and accounting laws require, usually up to 6 years, even after an account is closed.
• App sessions end when you sign out or they expire. Problem reports, support chats and run logs are kept as long as they help us support you and fix problems.
• Backups of our database are stored privately, outside the public website, and kept for 14 days, then deleted.

6. Cookies

• Needed to work: a session cookie that keeps you signed in to your account page and a security token that protects its forms. These are deleted when you sign out or close your browser.
• Language: a cookie (hx_lang) that remembers the language you picked for the Hexlist pages.
• Analytics: our public Hexlist pages use Google Analytics to count visits and see which pages are useful. You can block it with your browser settings or Google's opt-out add-on.
• Paddle checkout: when you pay by card, Paddle's checkout uses its own cookies to process the payment safely.

7. How we protect it

Everything between the app, your browser and hexacoglobal.com is encrypted (HTTPS). Passwords and sign-in tokens are stored only as hashes, receipts and run logs are stored outside the public website, and only our staff who need it can see your account. No system is perfectly secure, but we work to keep your information safe and will tell you without delay if a breach affects you.

8. Your choices and rights

You can ask us to show you the information we hold about you, correct it, give you a copy, stop using it for a purpose, or delete your account and its information (except the records the law requires us to keep). You can also sign out every device from your account page. We reply within 30 days. If you are in the European Union, the United Kingdom or another place with privacy laws, you also have the rights those laws give you, including complaining to your local data protection authority.

9. Children

Hexlist is a business tool for sellers on Alibaba.com. It is not meant for anyone under 18, and we do not knowingly collect information from children.

10. Changes

We may update this policy. We'll show the new date at the top of this page and email active customers about important changes.

11. Contact

Hexaco Global, Pakistan · WhatsApp +92 307 0301111 · sales@hexacoglobal.com