Privacy Policy

When you send an inquiry through our contact form, we receive what you type: what you are building, your requirements, optional budget and timeline, your name, email address, and optionally your phone number and company. We also record which page you started from, the product you were looking at (if any) and campaign tags in the link you followed (for example utm_source).

To protect the form from abuse we turn your IP address into a one-way, salted fingerprint before storing it. We never store your IP address itself. We also keep a shortened copy of your browser's user-agent string.

When you simply browse, we do not set cookies and we do not run analytics or advertising trackers. Your browser stores your light or dark theme choice and whether you have already seen our opening animation in this session; these stay on your device.

• To reply to your inquiry and discuss your project.
• To send you an automatic confirmation that we received your message.
• To detect and block spam and automated abuse of the form.
• To understand which pages and campaigns lead people to contact us, in aggregate.

We use a small number of service providers who handle data on our behalf:

• Vercel hosts and delivers this website.
• Supabase stores our database and media files (servers in Mumbai, India).
• Resend delivers inquiry notifications to our team and your confirmation email.
• Cloudflare Turnstile may check that the form is used by a person rather than a bot. It evaluates signals from your browser and does not require you to solve puzzles.

If you choose to contact us on WhatsApp, that conversation is handled by WhatsApp (Meta) under its own privacy policy. We do not sell your data or share it for advertising.

We keep inquiry records only for as long as we need them to respond, to work with you if we do, and to keep reasonable business records. You can ask us to delete your inquiry at any time.

Data is encrypted in transit, stored behind access controls, and reachable only by our team through an admin area that requires two-factor authentication. Every access to inquiry records by staff is logged.

You can ask us what we hold about you, ask us to correct it, or ask us to delete it by emailing theofficialhectagon@gmail.com. We will reply within a reasonable time.

This website is intended for businesses and adults. We do not knowingly collect information from children.

If we change how we handle data, we will update this page and the date at the top.

Questions about privacy: theofficialhectagon@gmail.com. Hectagon Pvt. Ltd., Pakistan.