HR

Privacy Policy

HEXA Auto Bot — Chrome Extension

Last updated: July 09, 2026

HEXA Auto Bot runs entirely in your browser. It does not have its own server, does not collect analytics, and does not sell or share your data with advertisers. The sections below list, plainly, every place data goes — including the AI providers and license system the extension talks to directly.

1. What this extension does

HEXA Auto Bot is a Chrome extension for X (Twitter) that can automatically like posts and, optionally, post AI-generated replies — either while scrolling your feed (Feed Mode) or on a specific list of post links you provide (Link Mode). It only runs on twitter.com and x.com pages.

2. Data stored locally on your device

The following is saved using Chrome's built-in storage.local API, inside your own browser. It is never transmitted to us, and is not accessible to any website you visit.

• Your settings — toggles (Auto Like, Auto Comment, Link Mode, Auto Break, Visit Home Between Posts), delay/timing values, reply tone or custom prompt text, and your chosen AI provider.
• Your link list — the post URLs you add in Link Mode, and their processing status.
• Usage stats — counts of likes, comments, and processed posts, shown in the extension's progress display.
• API keys — if you enter a key for an AI provider (OpenAI, Anthropic, Google Gemini, Groq, Cohere, or OpenRouter), it's stored locally so the extension can use it. We never see this key.
• Your license key — stored locally after activation so you don't have to re-enter it.

All of this stays on your device and is deleted automatically if you remove the extension, or manually any time via Chrome's extension storage settings.

3. Data sent to other services

The extension talks directly to the following third parties, only when the related feature is switched on, and only over HTTPS:

AI reply generation

If Auto Comment is on, the public text of the post being replied to — together with your own API key — is sent to whichever AI provider you've selected, solely to generate a reply suggestion. No private messages, account credentials, or browsing history are ever included.

Provider	What's sent	Their privacy policy
OpenAI	Post text, your API key	openai.com/policies/privacy-policy
Anthropic	Post text, your API key	anthropic.com/legal/privacy
Google (Gemini API)	Post text, your API key	policies.google.com/privacy
Groq	Post text, your API key	groq.com/privacy-policy
Cohere	Post text, your API key	cohere.com/privacy
OpenRouter	Post text, your API key	openrouter.ai/privacy

You choose the provider and supply your own key — you can turn Auto Comment off at any time to stop this entirely.

License activation Google Firebase

To activate the extension, the license key you enter is sent to our license database, hosted on Google Firebase (Firestore). This is used only to check that the key is valid, unexpired, and not already active on another device. We do not collect your name, email, or any other personal details as part of this check.

Posting actions

Liking a post and posting a reply happen the same way they would if you did it yourself — by interacting with the X (Twitter) page you're already signed into. The extension does not access your X password or session tokens directly; it operates the page's own buttons and reply box.

4. What we don't do

• We don't run analytics, trackers, or advertising SDKs in this extension.
• We don't sell or rent your data to anyone.
• We don't have access to your AI provider API keys — they're stored locally and used only to talk directly to that provider.
• We don't read or store your private messages, emails, or non-public X data.

5. Your choices

• Turn off Auto Comment to stop any post text from being sent to an AI provider — Auto Like alone needs no AI calls.
• Remove the extension at any time to delete all locally stored settings, links, and stats.
• Use the extension only on x.com/twitter.com — it has no access to any other site.

6. Children's privacy

HEXA Auto Bot is not directed at children and is not knowingly used to collect data from anyone under 13.

7. Changes to this policy

If this policy changes, the "Last updated" date at the top of this page will change too. Continued use of the extension after an update means you accept the revised policy.

8. Contact