Privacy Policy

This Privacy Policy describes the information `HetrixTools, Inc.` (also referred to as: "HetrixTools", "we", "us", "our", "the website") and the `user` (also referred to as: "client", "customer", "you"), what we do with the information, and our information security practices.

The `service` (also referred to as: "services") is the scope of the HetrixTools platform; representing the product(s) offered by HetrixTools to its users for free or in exchange of payments.

The `UID` is the Unique Identifier which is assigned to every new account on our platform. This 32 characters long string does not contain any private data within itself, but it is used to to identify your account internally and externally, without the need to use any of the customer private data in the process.

By proceeding to using any of our services (free or paid), you acknowledge that you have read, understood and accepted this Privacy Policy.

By using any of our services (free or paid), you authorize HetrixTools to collect and store the private information you provide during the sign-up process.

We only collect Personal Data that is relevant to providing our Services to our users.

Our platform collects the following data from you, data which can be used to identify you as a user/customer/company by our system:
1. when signing up on our website you will be providing us with your name, a username, your email address and a password
2. when the signup form is processed it will also register your IP Address and Country
3. on every login on our website you will be providing your username or email address, and password
4. when the login form is processed it will also register your IP Address and Country
5. in your account settings you can also set your company information, to appear on your invoices
6. when performing different actions in your dashboard (such as, but not limited to: adding monitors, deleting monitors), your IP address will be logged into our internal Activity Log, which has a lifespan of 30 days.

Our platform may also collect the following data from you, but this data alone cannot be used to identify you as a user/customer/company by our system:
7. in your account you may define subjects to be monitored by our platform, such as (but not limited to): IP addresses and websites
8. in your account you may define other contacts, such as (but not limited to) emails and phone numbers, to be notified by our platform, regarding the monitors within your account
9. in your account you may setup your white labeling settings where you would need to provide additional information, such as (but not limited to) your website link, logo and favicon.

Bulletpoints 1,2,3,4,6 are mandatory; without this data our platform cannot provide any services to you as a user; this data is partially under the customer's control, meaning you can always modify things such as (but not limited to) your name, email and password.

Bulletpoints 5,7,8,9 are optional; this data can be provided or not, at the customer's own discretion; this data will always be 100% under the customer's control, meaning that you can modify it or completely remove it from our system at any given time if you choose to do so, without our consent or any action on our part.

If you use our API or our hosted MCP server, we also process the following data in order to serve your requests:
10. your API key, which authenticates each request
11. the contents of each request and of the response returned by our API; depending on the tool or endpoint used, these may include data you have already stored in your account (such as, but not limited to: monitor names, hostnames and IP addresses, contact list details, private notes, reports and server metrics)
12. for each request made through the hosted MCP server, a request log entry containing: the IP address the request was received from (which may be your own IP address or that of your AI assistant provider), a truncated one-way hash of the API key used (which cannot be reversed into the key), the name of the tool called, and timing information.

The hosted MCP server is operated by HetrixTools on Cloudflare Workers. It relays each tool call made by your AI assistant to our API and returns the API response to your AI assistant; it does not store your API key, the request or the response beyond the processing of that request, and it uses no database or other persistent storage. The request log entries described in Bulletpoint 12 are held in Cloudflare Workers logs and are automatically deleted after no more than 7 days. Data returned to your AI assistant is processed by your AI assistant provider as described in Paragraph 5.0 of this Privacy Policy.

All the mentioned above data is considered PRIVATE user data and will not be made public or shared to any third-parties, unless under certain exceptions specified in Paragraphs 3.1 and 5.0 of this Privacy Policy.

3.1 How will the collected private data be used:

1. Customer private data, obtained as described under Paragraph 2.1 of this Privacy Policy, is to be used by HetrixTools platform in order to provide the service to its users, such as, but not limited to:
- identify the user on our website, for basic website functions, such as, but not limited to: logging in, keeping user logged in, providing support
- notify the user of monitor changes (as part of the service offered by the platform)
- send emails containing reports and statistics to the user, regarding their monitors (as part of the service offered by the platform)
- send occasional announcements regarding our platform

2. HetrixTools may also share some private information with third-party service providers that provide services on our behalf, such as, but not limited to:
- payment processing services
- analytics services
- notification delivery services
- monitoring services
- support services
- infrastructure, content delivery and edge hosting services

3. HetrixTools uses analytics providers such as Google Analytics. Google Analytics uses cookies to collect non-identifying information. Google provides additional privacy options regarding its Analytics cookies at http://www.google.com/policies/privacy/partners/.

4. HetrixTools may also share information to satisfy any applicable law, regulation, legal process, or governmental request.

5. Information may be disclosed and otherwise transferred to any potential acquirer or successor of the HetrixTools business and/or platform.

3.2 How will the collected private data NOT be used:

1. HetrixTools will never use the customer private data to:
- send out spam emails
- sell out any of the user's information to any third-parties

2. No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

1. The website and database are running in a safe isolated environment, with minimum privilege access being granted only to critical staff members.
2. All data collected from the user is safely stored in our database.
3. Passwords are encrypted and never stored as plain text anywhere on our website or database.
4. Our hosted MCP server holds your API key, requests and responses in memory only for the duration of each request and never writes them to persistent storage; its request logs contain only a truncated one-way hash of the API key, never the key itself.

1. HetrixTools uses third-party services on its platform for payment processing, analytics, outgoing user emails and notifications, and infrastructure.
2. HetrixTools will never share any of the user's private data with any third-party services unless required by the functionality of our platform, such as, but not limited to: sending out emails and notifications to the end-user, processing payments, collecting analytics, and relaying API requests made through our hosted MCP server.
3. HetrixTools will never sell any user's private data to any third-party services.
4. If you connect an AI assistant, agent or other third-party tool to our API or to our hosted MCP server, you choose and contract with the provider of that tool yourself. Any data returned to it through our API or hosted MCP server is transmitted to, and processed by, that provider under your own agreement with them. Your AI assistant provider acts as your own service provider (under the GDPR, your own processor), not as a third-party service or subprocessor of HetrixTools, and HetrixTools has no control over, and no responsibility for, how that provider uses, stores or retains such data. Please review your AI assistant provider's privacy policy and data retention settings before connecting it to your HetrixTools account.

HetrixTools has taken all the necessary measures to be GDPR compliant.
Please find our GDPR Compliance document here:
https://hetrixtools.com/gdpr/