1. Who we are
PII Purge is operated by Hexploits Ltd ("Hexploits", "we", "us"), a company registered in England and Wales with company number 11669296. Our registered office is 71–75 Shelton Street, Covent Garden, London WC2H 9JQ. We are registered with the Information Commissioner's Office (ICO) under registration number ZB895216.
This policy applies to the PII Purge website, its free redaction tool, PII Purge accounts and the PII Purge API. For the rest of Hexploits' services, see the privacy policy on hexploits.com.
2. Our role
We are the controller of the personal data we collect about visitors and account holders, such as account and billing details and records of use.
Documents and text you submit for redaction may contain personal data about other people, such as a candidate's name in a CV. When an organisation uses PII Purge to redact its documents, that organisation is the controller of the personal data in them and we process it only on its instructions, as its processor. If you are named in a document someone else redacted with PII Purge, please contact them about it. We don't keep the document, so we can't look it up.
3. What we collect and why
| Data | Why we use it | Lawful basis |
|---|---|---|
| Documents and text you submit, which may include anyone's personal data | To find and remove personal information and return the redacted copy. Processed in memory only, on Hexploits Cloud, and never stored, logged or used to train models. | Performance of our contract with you, or our legitimate interest in providing the free tool you've chosen to use. As a processor, the instructions of the organisation using PII Purge. |
| Records of each redaction: time, account and API key, size, page count, number of items found, duration and outcome. Never the content or file name. | Billing, keeping accounts accurate, preventing abuse, security, support, and improving the service. | Contract, and our legitimate interests in running a secure and reliable service. |
| Free tool usage counts, kept against a one-way hash of your IP address combined with a secret and the date, which changes every day | To limit free redactions to 1 a day per visitor and keep the free tool available to everyone. | Legitimate interests in preventing abuse. |
| Account details: your name, email address and the sign-in method you use (for example Google or Microsoft) | To create and secure your account and let you sign in. | Contract. |
| Billing details: billing name and email, Stripe customer and subscription IDs, invoices and usage totals. Card details are collected and held by Stripe, never by us. | To take payment, issue invoices and keep accounting records. | Contract, and legal obligation for accounting and tax records. |
| Your redaction instructions and API keys. Keys are stored only as a SHA-256 hash. | To apply your rules to your redactions and to authenticate API requests. | Contract. |
| Messages you send us | To answer you and provide support. | Legitimate interests in responding to enquiries, or contract where they concern your account. |
| Technical data such as IP addresses in our infrastructure's security logs | To protect the service from attacks and investigate incidents. | Legitimate interests in keeping the service secure. |
We don't use advertising or analytics trackers, and we don't sell personal data or use it for marketing profiling. See our cookie policy.
Checking for people, not bots. To keep the free tool available, Cloudflare Turnstile checks that each free redaction is requested by a person. It looks at technical signals from your browser and IP address, usually without you seeing anything, and only asks for a click if it's unsure. It never sees your document or text. This is our legitimate interest in preventing abuse; Cloudflare, Inc. processes the signals for us.
4. Who processes data for us
The PII Purge website, its API and its detection pipeline are hosted on Hexploits Cloud, infrastructure operated by Hexploits. Detection is a multi-step pipeline built on open-source technologies and open-weight LLMs, and the LLMs run on bare-metal servers in Hexploits Cloud. Documents are not sent to any third-party AI provider, the LLMs keep nothing between requests, and nothing you submit is used to train any model.
We use these service providers, each under a contract that requires them to protect the data and use it only to provide their service to us:
| Provider | What for | Data |
|---|---|---|
| Stripe Payments Europe Ltd and Stripe, Inc. | Payments, subscriptions and invoices | Billing details, card details and usage totals |
| WorkOS, Inc. | Account sign-in, including signing in with Google, Microsoft or GitHub | Name, email address and sign-in details |
| Cloudflare, Inc. | Network security and delivery: all traffic to PII Purge passes through Cloudflare's network, encrypted, on its way to Hexploits Cloud, and Cloudflare protects the service from attacks | IP addresses and requests in transit, including documents; Cloudflare doesn't store them |
We may also disclose personal data if the law requires it, to protect our rights or users' safety, or to a buyer if our business is sold, in which case this policy would continue to apply.
5. International transfers
Stripe, WorkOS and Cloudflare may process data in the United States. Where personal data leaves the UK, it is protected by UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework, where the provider is certified) or by the International Data Transfer Addendum to the European Commission's Standard Contractual Clauses issued by the ICO.
6. How long we keep it
| Data | Kept for |
|---|---|
| Documents and text you submit, and redacted copies | Not kept. Discarded as soon as the redacted copy is returned. |
| Records of each redaction | 12 months. Records of usage not yet billed are kept until they are. |
| Free tool usage counts | 2 days |
| Account details, instructions and API key hashes | While your account is open. Deleted within 30 days of closing it. |
| Billing and accounting records | 6 years after the end of the financial year they relate to, as UK tax law requires |
| Messages you send us | As long as needed to deal with them, and no more than 2 years |
| Infrastructure security logs | Up to 30 days, unless needed to investigate an incident |
7. Security
Data is encrypted in transit with HTTPS. Documents are processed in memory and never written to disk. API keys are stored only as hashes, access to our systems is restricted, and redaction fails closed: if detection is unavailable you get an error, not an unredacted document. Read more on our security page. No system is perfectly secure, but we will tell you and the ICO about a breach affecting your data when the law requires.
8. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you and get a copy of it
- have inaccurate data corrected
- have your data deleted
- restrict how we use your data
- object to our use of your data where we rely on legitimate interests
- receive your data in a portable format, or have it sent to another organisation
- withdraw consent at any time, where we rely on consent
To use any of these rights, contact us using the details below. We'll respond within one month. We may need to confirm your identity first. Because we don't keep documents, we can't provide or delete their content, and for documents redacted on behalf of an organisation, we'll refer your request to that organisation.
9. Children
PII Purge is not intended for anyone under 18, and we don't knowingly collect children's personal data, other than any that appears in documents submitted for redaction.
10. Contact and complaints
Write to the Data Protection Lead, Hexploits Ltd, 71–75 Shelton Street, Covent Garden, London WC2H 9JQ.
If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
11. Changes to this policy
We'll update this page when our practices change and show the date at the top. If a change materially affects account holders, we'll tell them by email before it takes effect.