Privacy Policy

Last updated: October 2, 2026

1. Scope of This Policy

This Privacy Policy describes how Proxonyx Intelligence Platform ("Proxonyx", "we", "us") collects, uses, discloses, and protects information when you use our website and application (the "Service"). It applies to registered users, guest users, and visitors of the Service.

2. Information We Collect

• Account information: your email address and a securely hashed password. We never store passwords in plain text.
• Chat and query content: the queries you submit, model responses, generated analyses and reports, reinforcement instructions, and any files or images you attach.
• Generated images: images produced or edited through the Service, stored so you can revisit, download, or delete them.
• Billing information: subscription plan, billing status, and payment metadata processed by our payment processor, Stripe. We do not store full payment card numbers on our servers.
• Usage and operational data: request counts, model calls, cost and performance telemetry, timestamps, and error logs, used for billing accuracy, abuse prevention, and service reliability.
• Technical and log data: IP address, browser type, device information, and session identifiers, collected automatically through server logs and session cookies necessary for authentication.

3. Legal Bases for Processing (EEA/UK Users)

Where the General Data Protection Regulation (GDPR) or UK GDPR applies, we process personal data on the following legal bases: performance of a contract (providing the Service you requested), legitimate interests (fraud prevention, service security, and product improvement), consent (where you have given it, such as for optional communications), and compliance with legal obligations.

4. How We Use Information

We use your information to: authenticate your account and maintain your session; route your queries to connected AI providers and return synthesized results; store your chat history, reports, and generated images so you can return to them; process billing and enforce plan and usage limits; monitor, secure, and improve the Service; and communicate with you about your account, security notices, or changes to our policies.

5. Third-Party AI Providers and Sub-processors

To generate responses, your query text and any attached files or images are transmitted to one or more third-party AI and research providers selected by Proxonyx for the particular request or workflow. Each provider processes this data under its own privacy policy and retention terms, and each provider independently applies its own content-moderation and safety systems to submitted prompts and generated outputs. We select sub-processors that offer commercially reasonable data-handling and security practices, but we do not control how these third parties handle data once transmitted to them.

6. Payment Processing

Subscription payments are handled by Stripe, Inc. Stripe collects and processes your payment card information directly under its own privacy policy and PCI-DSS compliant infrastructure. We receive only limited billing metadata (plan, status, and transaction identifiers) from Stripe, not full card numbers.

7. Cookies and Similar Technologies

We use an essential session cookie to keep you signed in. If you choose the no-sign-in preview, we also set an essential first-party cookie named proxonyx_preview to remember your preview usage and protect access to your result. It contains a random identifier, not your prompt or email address, and expires after 7 days. The preview allows one turn total, shared across research queries and image generation; a turn is used when execution starts, even if it is stopped or fails. We also apply IP-based rate limits to prevent abuse. Cookies must be enabled for the preview to work. We do not use third-party advertising cookies or cross-site tracking pixels.

8. Data Sharing and Disclosure

We do not sell or rent your personal information. We disclose information only: to third-party AI providers and payment processors as necessary to operate the Service, as described above; to comply with a legal obligation, subpoena, or valid governmental request; to protect the rights, property, or safety of Proxonyx, our users, or the public; or in connection with a merger, acquisition, or sale of assets, subject to continued protection under a policy of at least equal protectiveness.

9. International Data Transfers

Our infrastructure and the third-party providers we use may process and store data in countries other than your own, including the United States. Where required by applicable law, we rely on appropriate safeguards (such as standard contractual clauses) for cross-border transfers of personal data.

10. Data Retention

We retain account records, chat history, generated images, and billing metadata for as long as your account remains active, or as needed to comply with legal, tax, or accounting obligations. You may delete individual chats, messages, or generated images at any time from within the app. Deleting your account permanently removes your stored chat history, generated images, and account record from our production database, subject to any residual copies retained by third-party AI providers under their own policies and any copies retained in encrypted backups for a limited period for disaster-recovery purposes.

No-sign-in preview identifiers, results, and generated images expire 7 days after the preview is opened and are removed by scheduled cleanup, normally within the following hour while the service is running. Preview results are not added to a registered account or account chat history. Operational usage records and logs may be retained for security, cost accounting, and reliability as described above. Preview prompts and attachments are processed by the AI providers described in Section 5, whose retention terms also apply.

11. Data Security

We use industry-standard safeguards including password hashing (bcrypt), HTTPS/TLS encryption in transit, session-based authentication, origin validation, and rate limiting on sensitive endpoints. No method of transmission or storage is completely secure, and we cannot guarantee the absolute security of information transmitted to or from the Service.

12. Your Privacy Rights (EEA, UK, and Similar Jurisdictions)

If data protection law applicable to you (such as the GDPR or UK GDPR) grants you these rights, you may request to: access the personal data we hold about you; correct inaccurate data; erase your data; restrict or object to certain processing; receive a portable copy of your data; and withdraw consent where processing is based on consent. You may also lodge a complaint with your local data protection supervisory authority. To exercise these rights, contact us using the details in Section 17.

13. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to: know what personal information we have collected about you; request deletion of your personal information; correct inaccurate personal information; and not be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising. To exercise these rights, contact us using the details in Section 17; we may need to verify your identity before completing your request. You may designate an authorized agent to submit a request on your behalf.

14. Automated Processing and AI-Generated Output

The Service uses automated systems, including third-party large language models, to generate analyses, reports, and images from your input. These outputs are generated automatically and may contain errors; they are not the product of human review before being returned to you.

15. Children's Privacy

The Service is intended only for users who are 18 years of age or older. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If we learn we have collected personal information from a child under 18, we will delete it.

16. Data Breach Notification

In the event of a security incident affecting your personal information, we will notify affected users and, where required, relevant regulators, in accordance with applicable law.

17. Contact

Questions about this Privacy Policy, or requests to exercise your privacy rights, can be directed to info@proxonyx.org.

18. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.