Dex privacy policy

DRAFT — to be reviewed before publishing. Last updated: [DATE].

Dex is provided by [LEGAL NAME OF YOUR COMPANY], [REGISTERED ADDRESS]. Questions and requests: [PRIVACY EMAIL].

Where data lives

The Dex server runs on a computer in your own office. Staff names, computer names and addresses, help requests, diagnostic results, fixes and the audit log stay there. We do not receive or store this data.

Dex Cloud, our online service, issues licences, connects your phone to your office server, sends notifications, connects laptops that are away from the office, handles signing in with Google or Microsoft, and runs AI diagnoses. It stores only:

• your Dex server's random install id, a hash of its secret and a hash of the machine id (to recognise it and give each machine one free trial);
• company name, Dex version and number of managed PCs;
• the email and order number of a purchase, to match it to your licence;
• the name of each paired phone, its push token and a hash of its app token, until you remove the phone;
• the number of AI diagnoses per month and what they cost us, and installer download counts.

Requests between your phone and your office server pass through Dex Cloud without being stored. Checks and fixes for staff computers that are away from the office (a laptop at home or on the road) also pass through Dex Cloud: they are encrypted end to end between that computer and your office server, so Dex Cloud cannot read them, and they are not stored.

When someone signs in to your Dex panel with Google or Microsoft, Google or Microsoft tell Dex Cloud the account's id, name and email address. Dex Cloud checks this and hands it to your office server, keeping it only in memory until then (at most 10 minutes); it is not written to disk or logged. Your office server keeps the linked account with the Dex user it belongs to.

When Dex's built-in rules cannot pin a problem down, the help request and the diagnostic results from the affected PC are sent to Anthropic (the maker of Claude) to suggest a cause and a fix. Long details are shortened first and your company name is not sent. If you enter your own Anthropic key in the Dex panel, these requests go straight from your office server to Anthropic and do not pass through Dex Cloud. You can turn AI diagnosis off in the Dex panel (Settings → Fixing → Use AI diagnosis); Dex then uses only its own rules and nothing is sent to Anthropic.

Who else processes data

[HOSTING PROVIDER] runs Dex Cloud; Anthropic provides AI diagnoses; Google and Microsoft confirm who is signing in, for people who choose to sign in with them; Expo, Apple and Google deliver push notifications; Shopify runs our store and payments.

Your rights

Ask us at [PRIVACY EMAIL] for a copy of the data Dex Cloud holds about you, to correct it or to delete it. Removing a phone in the Dex panel deletes its record at once. Under the GDPR (EU/EEA) and Georgia's Law on Personal Data Protection you may also complain to your data protection authority.

Security

Traffic to Dex Cloud and to the Dex panel is encrypted. Secrets and tokens are stored only as one-way hashes, and saved passwords are encrypted by Windows. Your office opens no inbound ports. On staff PCs and Macs Dex can run only a fixed list of approved actions, every action needs a person's approval and is logged, and on Windows PCs the account Dex uses gets a new password every 30 days. The Dex app has no advertising, analytics or tracking. More: How Dex keeps your office safe.

---

← Dex overview · Free trial · Security · Support · Terms · Refunds