HX PRIVACY POLICY

Effective Date: August 28, 2026

HX is a professional social network for the hospitality industry.

This Privacy Policy explains how HX, operated by SalesHospitality, a DBA of Laine Brain Music, LLC, collects, uses, shares, protects, and retains information when you use HX and GetOnHX.com.

1. Information You Provide

We may collect information you provide directly, including:

  • email address;
  • display name;
  • username;
  • profile photograph;
  • biography;
  • job title;
  • employer;
  • hotel/property affiliation;
  • organization affiliations;
  • professional discipline;
  • market;
  • hospitality interests;
  • profile links;
  • posts;
  • replies;
  • images;
  • Jobs;
  • People Moves;
  • verification requests;
  • reports;
  • moderation appeals;
  • organization information;
  • personalization choices;
  • and communications with HX.

2. Authentication Information

HX uses passwordless magic-link authentication.

We may process:

  • email address;
  • one-time authentication tokens;
  • token hashes;
  • session identifiers;
  • authentication timestamps;
  • session revocation records; and
  • security events.

HX does not intentionally store plaintext login passwords for normal HX authentication.

Magic-link tokens are intended to be:

  • temporary;
  • single-use; and
  • securely handled.

3. Information Collected Automatically

When you use HX, we may automatically collect:

  • IP-derived request information;
  • browser type;
  • device information;
  • operating system;
  • request timestamps;
  • pages or features accessed;
  • HTTP request metadata;
  • security events;
  • rate-limit information;
  • session activity;
  • error information;
  • and technical logs.

We may use request identifiers and similar technical data to diagnose errors and protect the service.

4. Social Activity

HX processes activity necessary to operate a social network, including:

  • follows;
  • likes;
  • replies;
  • reposts;
  • quote posts;
  • saves;
  • notification activity;
  • topic activity;
  • market activity;
  • feed preferences;
  • impressions or seen-state where used;
  • content hides;
  • topic mutes;
  • recommendation dismissals;
  • and explicit personalization feedback.

Some of this activity is public and some is private.

For example:

Public or potentially public: - posts; - replies; - public follows or follower counts; - profile information; - organization activity.

Private: - saved content; - hidden posts; - muted topics; - recommendation feedback; - private notification history; - certain account settings.

5. Organizations and Professional Affiliations

We may process information about a member’s professional affiliation with:

  • hotels;
  • properties;
  • management companies;
  • ownership groups;
  • hotel brands;
  • vendors;
  • associations; and
  • other organizations.

Affiliation information may be:

  • user-provided;
  • organization-provided;
  • claimed;
  • verified; or
  • unverified.

If a member chooses to hide an affiliation where HX provides that option, we use that setting in public displays as designed.

6. Verification Information

If you request verification, we may collect:

  • verification type;
  • business email;
  • organization/property relationship;
  • public URLs;
  • verification notes;
  • confirmation state;
  • review history; and
  • other evidence submitted through the verification process.

HX does not currently require government identification documents as part of the standard verification process.

Verification evidence is generally private and available only to authorized reviewers and administrators.

We do not publicly display private verification evidence merely because an account becomes verified.

7. Jobs

If you use HX Jobs, we may process:

  • job title;
  • employer;
  • hotel/property;
  • location;
  • employment type;
  • workplace type;
  • compensation information;
  • description;
  • requirements;
  • application URL;
  • contact information;
  • job status;
  • saves; and
  • application-link clicks.

HX does not currently operate a full applicant-tracking system.

Unless otherwise expressly implemented, HX does not require applicants to upload resumes or sensitive employment documents directly to HX.

If you follow an external application link, the third party’s privacy policy applies.

8. People Moves

People Moves may contain:

  • professional title;
  • organization;
  • property;
  • market;
  • effective date;
  • professional recognition;
  • previous professional context; and
  • optional member messages.

People Moves involving an HX member may require that member’s confirmation.

Profile edits do not automatically become public People Moves unless the user explicitly chooses to publish the update.

9. Personalization

HX may personalize feeds and recommendations using deterministic signals such as:

  • profile discipline;
  • selected topics;
  • market;
  • people followed;
  • organizations followed;
  • pinned feeds;
  • likes;
  • saves;
  • replies;
  • reposts;
  • Jobs saved;
  • explicit “show more” feedback;
  • explicit “show less” feedback;
  • hides; and
  • mutes.

HX personalization is designed around hospitality-related product activity.

HX does not intentionally personalize content using inferred sensitive traits such as:

  • race;
  • religion;
  • medical condition;
  • sexual orientation;
  • political ideology;
  • union membership; or
  • criminal history.

10. Hospitality Pulse

Hospitality Pulse uses eligible HX activity to calculate platform-level activity such as:

  • topic activity;
  • market activity;
  • conversation activity;
  • organization activity;
  • Jobs activity;
  • and People Moves activity.

These metrics describe activity on HX.

They are not intended to identify private member preferences.

11. Why We Use Information

We may use information to:

  • provide HX;
  • authenticate users;
  • operate profiles;
  • display posts;
  • operate feeds;
  • provide recommendations;
  • operate search;
  • deliver notifications;
  • manage organizations;
  • operate Jobs;
  • operate People Moves;
  • verify identities and affiliations;
  • prevent fraud;
  • enforce rules;
  • moderate content;
  • investigate reports;
  • protect account security;
  • deliver transactional email;
  • maintain service reliability;
  • measure product activity;
  • diagnose errors;
  • improve HX; and
  • comply with legal obligations.

12. Legal Bases Where Applicable

Where applicable privacy law requires a legal basis, HX may process information based on:

  • performance of a contract;
  • legitimate interests;
  • consent;
  • compliance with legal obligations; or
  • protection of users and the service.

The applicable basis depends on the information and context.

13. Public Information

Information you make public on HX may be:

  • visible to other HX users;
  • visible without login;
  • indexed by search engines where indexing is allowed;
  • shared through public links; or
  • copied or reshared by other users.

Deleting content from HX cannot guarantee removal of copies made independently by third parties.

14. How We Share Information

We may share information with service providers that help operate HX, including providers for:

  • hosting;
  • cloud infrastructure;
  • email;
  • domain services;
  • storage;
  • database services;
  • security;
  • logging; and
  • operational support.

These providers may process information only for purposes related to the services they provide, subject to their agreements and applicable law.

HX may also share information:

  • when required by law;
  • to respond to valid legal process;
  • to protect users or HX;
  • to investigate fraud or security incidents;
  • in connection with a merger, acquisition, restructuring, financing, or sale of assets; or
  • with your direction or consent.

15. Infrastructure Providers

HX currently uses third-party infrastructure and service providers that may include providers for:

  • website hosting;
  • edge/server infrastructure;
  • database services;
  • object storage;
  • transactional email; and
  • DNS/domain services.

These providers may process technical data required to deliver HX.

16. Advertisers

HX does not sell your personal data to advertisers.

If HX introduces advertising in the future, this Privacy Policy will be updated as required before materially different advertising-data practices are implemented.

17. Sale of Personal Information

HX does not sell personal information for monetary consideration as a core business practice.

If applicable privacy law defines “sale” or “sharing” more broadly, HX will provide required disclosures and controls if HX begins activities falling within those definitions.

18. Cookies and Similar Technologies

HX may use:

  • session cookies;
  • authentication cookies;
  • security cookies;
  • preference storage;
  • and similar browser technologies.

Authentication cookies may be configured with security controls such as:

  • Secure;
  • HttpOnly; and
  • SameSite protections.

HX does not require advertising cookies as part of its current core launch architecture.

19. Email

HX may send transactional emails such as:

  • magic-link sign-in messages;
  • verification-related messages;
  • security/account messages; and
  • other operational communications.

Transactional emails are necessary for certain HX functions.

Marketing messages, if introduced, should provide legally required unsubscribe controls.

20. Data Security

HX uses administrative and technical measures designed to protect information, including measures such as:

  • encrypted HTTPS connections;
  • secure session cookies;
  • server-side authorization;
  • access controls;
  • role-based administration;
  • rate limits;
  • passwordless authentication;
  • short-lived one-time tokens;
  • private object storage where applicable;
  • audit records;
  • secret-management practices;
  • and production security headers.

No security system can guarantee absolute protection.

21. Data Retention

HX retains information for as long as reasonably necessary for:

  • providing the service;
  • account continuity;
  • security;
  • abuse prevention;
  • moderation;
  • audits;
  • dispute resolution;
  • legal compliance; and
  • other legitimate operational needs.

Certain temporary information may be automatically removed after expiration.

Examples may include:

  • expired authentication tokens;
  • revoked or expired sessions;
  • temporary media staging;
  • expired personalization-feedback records; and
  • certain cache data.

Moderation, verification, security, and audit history may be retained longer where reasonably necessary.

22. Deleted and Removed Content

Deleting content may remove it from public display while HX retains limited records where reasonably necessary for:

  • security;
  • abuse prevention;
  • moderation appeals;
  • legal compliance;
  • backup systems; and
  • audit history.

Removed content may be retained temporarily as moderation evidence even when public access stops.

23. Account Deactivation and Deletion

Users may have options to deactivate an account or request deletion.

Some records may remain after account deletion where necessary for:

  • legal compliance;
  • fraud prevention;
  • moderation history;
  • security;
  • audits; and
  • resolving disputes.

HX should distinguish account deactivation from permanent deletion.

24. Your Privacy Choices

Depending on your location and applicable law, you may have rights to:

  • access personal information;
  • correct information;
  • delete information;
  • request a copy;
  • restrict certain processing;
  • object to certain processing;
  • withdraw consent; or
  • appeal certain privacy decisions.

To make a privacy request, contact:

support@getonhx.com

HX may need to verify your identity before completing a request.

25. California Privacy Rights

California residents may have rights under applicable California privacy laws, including rights to:

  • know;
  • access;
  • correct;
  • delete; and
  • receive information regarding certain uses or disclosures of personal information.

HX does not discriminate against users for exercising applicable privacy rights.

If HX becomes subject to additional California disclosure obligations as its operations grow, this Privacy Policy will be updated accordingly.

26. International Users

HX is operated from the United States.

If you access HX from another country, your information may be processed in the United States or other locations where HX service providers operate.

Different countries may have different data-protection laws.

27. Children’s Privacy

HX is not intended for children.

Users must be at least 18 years old to create an HX account.

HX does not knowingly solicit personal information from children under 18.

If we become aware that an ineligible minor has created an account, we may remove the account and associated information as appropriate.

28. Third-Party Sites

HX may link to third-party sites.

HX is not responsible for their privacy practices.

Review their privacy policies before submitting personal information.

29. Changes to this Privacy Policy

We may update this Privacy Policy as HX changes.

Material changes may be communicated through:

  • HX;
  • email;
  • an updated effective date; or
  • another reasonable notice method.

30. Contact

Privacy questions and requests:

HX / SalesHospitality support@getonhx.com

© 2026 SalesHospitalityTermsPrivacyCommunity Rules