Privacy Policy

Last updated: October 20, 2026

1. Scope of This Policy

This Privacy Policy describes how Proxonyx Corp, based in Washington State, United States ("Proxonyx", "we", "us"), operates the Proxonyx Intelligence Platform and handles information about registered users, preview users, and visitors. Proxonyx Corp is responsible for its own processing described here; where a separate business data-processing agreement applies, that agreement also governs our processing for the customer. This notice explains practices; it is not a waiver of privacy rights, a blanket consent, or a release of our legal obligations.

2. Information We Collect

• Account information: your email address and a securely hashed password. We never store passwords in plain text.
• Chat and query content: the queries you submit, model responses, generated analyses and reports, reinforcement instructions, and any files or images you attach.
• Memory and connected tools: when enabled, account memory may retain extracted facts, preferences, lessons, and source references used to inform later requests. Authorized SDKs or connected tools may exchange account-scoped content within their permissions. Settings provides memory controls; disconnect or revoke connections you no longer authorize.
• Generated images: images produced or edited through the Service, stored so you can revisit, download, or delete them.
• Billing information: subscription plan, billing status, and payment metadata processed by our payment processor, Stripe. We do not store full payment card numbers on our servers.
• Usage and operational data: request counts, model calls, cost and performance telemetry, timestamps, and error logs, used for billing accuracy, abuse prevention, and service reliability.
• Technical and log data: IP address, browser type, device information, and session identifiers, collected automatically through server logs and session cookies necessary for authentication.

3. Legal Bases for Processing (EEA/UK Users)

Where the General Data Protection Regulation (GDPR) or UK GDPR applies, we process personal data on the following legal bases: performance of a contract (providing the Service you requested), legitimate interests (fraud prevention, service security, and product improvement), consent (where you have given it, such as for optional communications), and compliance with legal obligations.

4. How We Use Information

If you enable "Help improve Proxonyx" in Memory, feedback may also contribute generalized lessons intended to improve later responses across accounts. This is separate from private account memories and from training model weights. Use Settings to manage sharing, inspect saved memories, or remove your contributions. Generalization and filtering are safeguards, not a guarantee that every unusual detail is anonymous; do not contribute confidential or sensitive information.

We use your information to: authenticate your account and maintain your session; route your queries to connected AI providers and return synthesized results; store your chat history, reports, and generated images so you can return to them; process billing and enforce plan and usage limits; monitor, secure, and improve the Service; and communicate with you about your account, security notices, or changes to our policies.

5. Third-Party AI Providers and Sub-processors

A workflow may send relevant prompts, instructions, selected prior conversation, account-memory context, attachments, search terms, or generated material to model-routing services, model hosts, search/extraction services, and image generators. More than one provider may process a request; automatic routing, review, or retries may use different providers. Providers may process information as processors under contract or as independent controllers for purposes described in their terms. We remain responsible for our own obligations, including lawful disclosure and appropriate arrangements where required.

Providers available to a workflow may include OpenRouter and its downstream model hosts, OpenAI, Anthropic, Google, other supported model hosts, Tavily for research, and Wiro or other supported image services. Actual providers depend on the requested feature, configuration, availability, and routing. Provider terms, retention periods, abuse monitoring, training practices, and processing locations differ. Do not assume that every route has zero retention or excludes model training. Any stronger confidentiality, retention, training, or data-residency commitment must be expressly confirmed for your contracted configuration; we do not promise a platform-wide arrangement that has not been established.

Official provider disclosures include OpenRouter's Privacy Policy, OpenAI's Privacy Policy, Anthropic's Privacy Policy, and Gemini API data-use terms. These external notices describe those providers, not a replacement for our duties or an automatic grant of their enterprise protections to you. Contact us before submitting data that requires specific processing restrictions.

The platform processes content to deliver responses and, where enabled, account memory; this is distinct from training model weights. We make no claim here that all providers exclude training. We will not introduce a new Proxonyx use of identifiable customer content for model-weight training without any notice, legal basis, and consent required by applicable law.

6. Payment Processing

Subscription payments are handled by Stripe, Inc. Stripe collects and processes your payment card information directly under its own privacy policy and PCI-DSS compliant infrastructure. We receive only limited billing metadata (plan, status, and transaction identifiers) from Stripe, not full card numbers.

7. Cookies and Similar Technologies

We use an essential session cookie to keep you signed in. If you choose the no-sign-in preview, we also set an essential first-party cookie named proxonyx_preview to remember your preview usage and protect access to your result. It contains a random identifier, not your prompt or email address, and expires after 7 days. The preview allows one turn total, shared across research queries and image generation; a turn is used when execution starts, even if it is stopped or fails. We also apply IP-based rate limits to prevent abuse. Cookies must be enabled for the preview to work. We do not use third-party advertising cookies or cross-site tracking pixels.

Browser storage also retains interface preferences and some browser-local state, such as selected conversations, image visibility, and certain legacy waste-bin entries. Account-saved history and account memory are separate from browser storage. Clearing a browser does not delete server-side records or provider-held copies.

8. Data Sharing and Disclosure

We do not sell or rent your personal information. We disclose information only: to third-party AI providers and payment processors as necessary to operate the Service, as described above; to comply with a legal obligation, subpoena, or valid governmental request; to protect the rights, property, or safety of Proxonyx, our users, or the public; or in connection with a merger, acquisition, or sale of assets, subject to continued protection under a policy of at least equal protectiveness.

9. International Data Transfers

Our infrastructure and providers may process data in countries other than yours, including the United States, where laws and government-access rules may differ. Where cross-border-transfer rules apply, an appropriate lawful transfer mechanism must be established. This notice does not itself execute standard contractual clauses or certify that a particular provider, region, or configuration meets your requirements. Contact us about applicable safeguards before using the Service for data requiring a specific transfer arrangement.

10. Data Retention

Account records and inactivity. Saved account records, chat history, reports, and generated images are retained while your account is maintained unless you delete them or another lawful retention requirement applies. There is no fixed automatic deletion deadline based solely on inactivity; stopping use or canceling a paid subscription is not the same as deleting your account. If we introduce an inactive-account closure policy, we will provide notice and an opportunity to retrieve available records where required.

Waste bin and permanent deletion. Moving supported chats, turns, or generated images to the waste bin hides them from the normal account view and provides a 30-day restore window; it is not immediate permanent erasure. Expired chats and turns are removed through cleanup. Image restore eligibility expires after 30 days, but expiry alone does not guarantee physical removal of the image file at that time. Use the permanent-delete control for a supported waste-bin item, or contact us for a deletion request covering retained material. Browser-local legacy waste-bin entries are separate from account-stored records.

Account deletion and retained records. Successful account deletion removes the account and associated application records from the active production database and initiates removal of account-owned generated image files. It does not erase downloaded copies, browser-local copies, historical backups, separately archived files, or copies held by providers under their policies. Certain billing, tax, fraud-prevention, security, or legal-claim records may need to be retained for their applicable purpose and legally required period. We do not promise immediate erasure of every copy or a universal 30-day purge deadline. Contact us for the scope and timing applicable to a particular request; statutory response and deletion deadlines still apply.

Database backups. Routine database backup rotation is configured to retain the latest 30 daily backup copies and 12 monthly backup copies. With successful daily and monthly runs, that corresponds to approximately 30 days of daily recovery points and 12 months of monthly recovery points, not an exact deletion deadline: rotation depends on successful backup runs. This schedule does not establish a retention limit for every log, image archive, provider-held record, or legally preserved copy. Historical backups are not selectively rewritten when an individual record is deleted. Retained copies remain subject to applicable privacy, access-control, and security obligations.

No-sign-in preview identifiers, results, and generated images expire 7 days after the preview is opened and are removed by scheduled cleanup, normally within the following hour while the service is running. Preview results are not added to a registered account or account chat history. Operational usage records and logs may be retained for security, cost accounting, and reliability as described above. Preview prompts and attachments are processed by the AI providers described in Section 5, whose retention terms also apply.

11. Data Security

We use industry-standard safeguards including password hashing (bcrypt), HTTPS/TLS encryption in transit, session-based authentication, origin validation, and rate limiting on sensitive endpoints. No method of transmission or storage is completely secure, and we cannot guarantee the absolute security of information transmitted to or from the Service.

Limit submissions to information needed for the task. Do not include credentials, private keys, full payment-card data, regulated health records, or other highly sensitive information without an expressly agreed lawful and safeguarded arrangement. The Service is not offered as a HIPAA-compliant service under these Terms. Incidental receipt of sensitive information does not eliminate our legal duties or your statutory rights.

12. Your Privacy Rights (EEA, UK, and Similar Jurisdictions)

If data protection law applicable to you (such as the GDPR or UK GDPR) grants you these rights, you may request to: access the personal data we hold about you; correct inaccurate data; erase your data; restrict or object to certain processing; receive a portable copy of your data; and withdraw consent where processing is based on consent. You may also lodge a complaint with your local data protection supervisory authority. To exercise these rights, contact us using the details in Section 17.

13. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to: know what personal information we have collected about you; request deletion of your personal information; correct inaccurate personal information; and not be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising. To exercise these rights, contact us using the details in Section 17; we may need to verify your identity before completing your request. You may designate an authorized agent to submit a request on your behalf.

14. Automated Processing and AI-Generated Output

The Service uses automated systems, including third-party large language models, to generate analyses, reports, and images from your input. These outputs are generated automatically and may contain errors; they are not the product of human review before being returned to you.

15. Children's Privacy

The Service is intended only for users who are 18 years of age or older. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If we learn we have collected personal information from a child under 18, we will delete it.

16. Data Breach Notification

When we become aware of a security incident affecting personal information, we will investigate, take appropriate containment and remediation steps, and notify affected users and relevant regulators as required by applicable law, without undue delay where that standard applies. We will provide available information and material updates as required, subject to lawful restrictions. A separately signed enterprise agreement may set additional notification and cooperation requirements; this Policy does not promise that every incident is immediately detectable.

17. Contact

Contact Proxonyx Corp, Washington State, United States at info@proxonyx.org for privacy questions, access, correction, deletion, portability, consent withdrawal, or other applicable rights. We may verify identity and authority without requesting unnecessary sensitive data. Rights, exceptions, response periods, and appeal options depend on applicable law; we will explain a refusal and any available appeal route. You may contact the relevant regulator without first contacting us.

Washington and other state laws may impose special obligations for sensitive or consumer health data, including separate notices or consents. A general acceptance of this Policy does not provide those consents. We do not ask you to waive protections under Washington's My Health My Data Act or other applicable privacy laws.

18. Changes to This Policy

We may update this Policy and will identify the revision date. We will provide email or prominent in-app notice of material changes before they take effect where required. If a new use or disclosure requires separate consent, we will obtain it before that processing; continued use alone does not supply that consent. An update does not retroactively remove privacy rights.