Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and business name. This information is necessary to provide the Service.

Billing Information

Payments are processed by Stripe. We do not store your credit card numbers or payment card details on our servers. Stripe handles all payment data in compliance with PCI-DSS standards.

Usage Data

We collect anonymized analytics and server logs to monitor performance and improve the Service.

Business Content

You may upload business content such as FAQs, menus, product descriptions, and other materials to train your AI assistant. This content is stored on your dedicated server.

2. How We Use Your Information

• Provide, operate, and maintain the Service.
• Process subscription payments and billing.
• Send transactional emails (account confirmations, billing receipts, service updates).
• Improve and optimize the product experience.
• Provide customer support when you reach out to us.

3. Data Isolation

Each Eaxy AI customer receives a dedicated server instance. Your customer conversation data is stored exclusively on your dedicated server and is not shared with or accessible to other customers.

We do not access your customer conversations unless you explicitly grant us permission for technical support purposes.

4. Third-Party Services

We use the following third-party services to operate the platform:

• Stripe — Payment processing.
• Brevo — Transactional and marketing email delivery.
• Cloudflare — DNS, CDN, and DDoS protection.
• Contabo — VPS hosting for dedicated customer instances.
• Google Analytics — Anonymized website usage analytics.

Each third-party service has its own privacy policy governing the data it processes on our behalf.

5. Data Retention

• Account data is retained for as long as your account is active.
• Upon cancellation, your data is deleted within 30 days.
• Backups containing your data are purged within 90 days of account deletion.

6. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Request deletion of your personal data and account.
• Export your data in a portable format.
• Opt out of marketing emails at any time.

To exercise any of these rights, contact us at [email protected].

7. Cookies

• Essential cookies are used for authentication and session management. These are required for the Service to function.
• Analytics cookies are optional and used only with your consent to help us understand how the Service is used.
• We do not use advertising or tracking cookies.

8. Security

We take the security of your data seriously and implement the following measures:

• All data in transit is encrypted using TLS (HTTPS).
• Each customer receives dedicated, isolated server infrastructure.
• We apply regular security updates and patches to all systems.

9. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can promptly delete it.

10. International Data

Our servers are located in the United States and the European Union. Your data is processed in accordance with applicable data protection laws, including the GDPR where applicable.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to the address associated with your account. The “Effective date” at the top of this page indicates when the policy was last revised.

12. Contact

If you have questions or concerns about this Privacy Policy, you can reach us at:

• General inquiries: [email protected]
• Privacy-specific requests: [email protected]