Hexa Studio
Privacy Policy
Effective 9 October 2026 · Applies to the Hexa Studio desktop app and this website
In short
- The app runs on your PC and talks to Microsoft directly. Your Dataverse records, flows and web resources are never sent to us.
- We have no servers in the data path, no user accounts and no telemetry. Neither the app nor this website runs analytics or sets tracking cookies.
- The only personal data we hold is what you choose to send us by email.
Who we are
Hexa Studio is operated by Truong Tan Dat, its sole founder, in Ho Chi Minh City, Vietnam. Hexa Studio is not yet an incorporated company. In this policy "we" and "us" mean Hexa Studio and its founder.
Questions about this policy: founder@hexastudio.com.vn.
The desktop app
Hexa Studio is a Windows desktop app. Everything it reads from your Power Platform environments is fetched by your PC, with your Microsoft account's permissions, and shown on your screen. It is not copied to any service run by us.
To work, the app keeps a small amount of data on your PC only:
| What | Where on your PC | Sent to us? |
|---|---|---|
| Microsoft sign-in (refresh token) | Windows Credential Manager. Short-lived access tokens are kept in memory only. | Never |
| Projects, environment list and settings | JSON files in %APPDATA%\CdsSqlStudio | Never |
| Query history, saved tabs, layout preferences | The app window's local storage | Never |
| Unsaved web resource edits | Memory only; gone when the app closes | Never |
| Flow tasks (flow definitions you check out) | The folder you pick | Never |
Uninstalling the app and deleting that folder removes this data. Signing out in the app removes the stored refresh token.
Services the app talks to
The app connects only to these services, directly from your PC:
- Microsoft: sign-in at
login.microsoftonline.com, environment discovery atglobaldisco.crm.dynamics.com, and the environments you open (*.dynamics.com, including the TDS endpoint when you use it). Microsoft's privacy statement and your organisation's agreements with Microsoft govern that data. - GitHub: the app checks GitHub Releases for updates and downloads new versions from there. Like any download, GitHub sees your IP address.
Hexa Studio does not call any AI service. If you hand a Flow task folder to Claude Code or another tool, that tool's own terms and privacy policy apply to what you share with it.
This website
- It is a static page hosted on Vercel. Vercel processes standard request logs (such as IP address and browser type) to serve and protect the site.
- Your browser loads the animation library from jsDelivr and asks the public GitHub API for the latest release, so the download button links the newest installer. Both see your IP address for that request.
- Fonts and the launch video are served from this site. There are no analytics, no advertising and no tracking cookies.
When you email us
If you write to founder@hexastudio.com.vn, we keep your message, your address and anything you include, only to reply and to follow up on your request (support, feedback, pilots or partnerships). We don't sell it, share it for marketing or add you to a mailing list.
Your choices and rights
Data the app keeps on your PC is fully under your control: you can sign out, clear history or delete the folder above at any time.
For data we hold because you emailed us, you can ask us to show it to you, correct it or delete it, and we will do so under applicable law, including Vietnam's personal data protection rules. Write to the address above.
Hexa Studio is a tool for professionals and is not directed at children.
Changes and contact
If we change how the app or this site handles data, for example by adding opt-in diagnostics, we will update this page and its effective date before the change ships.
Contact: Truong Tan Dat, Hexa Studio, Ho Chi Minh City, Vietnam · founder@hexastudio.com.vn