This Privacy Policy explains how we handle your personal data when you visit https://praxtify.com, join our early access list and use the Praxtify application.
This English text is the binding version. The single exception is the Türkiye — KVKK Notice section below, whose binding version is Turkish.
1. Who We Are
Your personal data is processed by Praxtify, LLC, a Delaware limited liability company established in the United States ("Praxtify", "we").
- Address: 131 Continental Dr, Suite 305, Newark, DE 19713, USA
- Privacy contact: privacy@praxtify.com
- General contact: info@praxtify.com
2. Two Different Roles
Praxtify processes data in two distinct relationships, and our role differs in each:
| Relationship | Data | Our Role |
|---|---|---|
| You and Praxtify | Visits, early access sign-up, account, billing, support | Controller (this policy) |
| Our customer and their buyers | Buyer company and contact data arriving in our customer's inbox | Processor (Data Processing Agreement) |
For buyer data held in an exporter's Praxtify account, that exporter is the controller; we process it only on their instructions. Scope, subprocessors and security commitments are set out in the Data Processing Agreement and Other Service Providers.
3. What We Process
When you visit the website
- Technical records: IP address (truncated or hashed), browser and device information, request time, error logs.
- Cookies and similar technologies: see the Cookie Policy.
When you join early access
- Email address, confirmation status, sign-up time, channel and the version of the consent text.
- A hash of your IP address, to limit abuse.
When you open an account
- Full name, work email, phone number (in E.164 format), company name.
- If you sign in with Google or X, the name, email and profile image returned by that provider.
- Session records: sign-in time, IP hash, browser information; for account security and audit.
When you use the product
- Organization settings, products and price lists, templates, connected channels and calendar.
- Usage metrics: conversation counts, credit consumption, quota status.
When you pay
- Billing details, subscription status and payment history. Card details never reach us; Stripe processes the payment.
When you write to us
- Your message, your contact details and the reply thread.
4. Why We Process İt, and on What Basis
| Purpose | Example | Legal Basis (EEA/UK/Switzerland) |
|---|---|---|
| Providing the service | Opening an account, running the inbox, drafting quotes | Performance of a contract |
| Charging | Subscription, invoicing, quota tracking | Contract, legal obligation |
| Security and abuse | Rate limiting, audit log, fraud prevention | Legitimate interests |
| Improving the product | Aggregate usage measurement, error logs | Legitimate interests |
| Marketing and measurement | Newsletter, early access announcements, advertising pixels | Consent (region dependent; Section 8) |
| Legal claims | Record keeping, defending claims | Legal obligation, legitimate interests |
Prompts sent to AI providers may contain customer content; those providers operate under zero data retention or no-training terms (Other Service Providers).
5. Who We Share İt with
- Subprocessors: hosting, database, email, payment, AI and monitoring providers. The current list is on the Other Service Providers page.
- Messaging channels: when you connect WhatsApp, Instagram or Messenger, messages pass through Meta infrastructure (Messaging Channels Terms).
- Legal requirements: requests from competent authorities, establishing or defending legal claims.
- Corporate transactions: in a merger or transfer, provided the same protections continue.
We do not sell your personal data. For "sharing" through advertising pixels under US state law, see Section 9.
6. International Transfers
Our servers and subprocessors are located in the European Union and the United States. The safeguards we rely on:
- EEA and Switzerland: European Commission Standard Contractual Clauses (SCCs).
- United Kingdom: UK International Data Transfer Addendum.
- Türkiye: the standard contract notified to the Turkish DPA under Article 9 of the KVKK (2024 amendment) for regular transfers, in the absence of an adequacy decision.
7. Retention
- Early access record: until the list closes or you opt out.
- Account data: while the account is open; deleted or anonymized within 90 days of closure.
- Billing records: for the period required by tax law (usually 10 years).
- Audit and security logs: 12 months.
- Customer data (our processor role): per the customer's instructions; on termination we follow the period in the Data Processing Agreement.
8. Cookies and Measurement
Our cookie use and preference panel are on the Cookie Policy page. The consent regime depends on your country:
- EEA, United Kingdom, Switzerland, Türkiye, Brazil, Canada-Québec and visitors whose country we cannot determine: analytics and marketing cookies do not run until you allow them.
- Other countries (including the United States): those cookies run until you decline; the way to decline is at the bottom of every page.
Cookieless measurement: we count page views with Vercel Web Analytics. It writes no cookie, assigns no visitor identifier and identifies no individual; it produces aggregate counts only, so it does not require consent.
9. United States — State Privacy Notice
This section is for visitors covered by California (CPRA) and comparable state laws.
- Notice at collection: we collect the categories in Section 3 for the purposes in Section 4; retention periods are in Section 7.
- No sale; there may be "sharing". When advertising pixels (Meta, TikTok, LinkedIn, Google) run, the resulting transfer may count as "sharing" for cross-context behavioral advertising.
- Opting out: the "Your Privacy Choices" link at the bottom of the page takes you to the cookie preference panel. Declining stops the pixels.
- Global Privacy Control: if your browser sends a GPC signal, we treat it as a valid opt-out and you need to do nothing else.
- Your rights: to know, delete, correct, opt out of sharing, and not be discriminated against for exercising these rights. Requests: privacy@praxtify.com.
10. EEA, United Kingdom and Switzerland
- Legal bases are listed line by line in the table in Section 4.
- Your rights: access, rectification, erasure, restriction, portability, objection and withdrawal of consent. Withdrawal does not affect processing carried out before it.
- You may lodge a complaint with your supervisory authority.
- EU representative (GDPR Art. 27): whether Praxtify must appoint a representative in the EEA is under review with our counsel; once appointed, it will be named in this section.
11. Türkiye — KVKK Notice
The binding version of this section is Turkish; this English text is provided for information only (disclosure obligation under Law No. 6698).
Controller: Praxtify, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, USA. Contact: privacy@praxtify.com.
Categories of data processed: identity (full name), contact (email, phone), customer transaction (account and usage records), transaction security (IP hash, session and audit logs), finance (billing details), marketing (newsletter preference and consent record).
Purposes: providing the service and performing the contract, managing the user account, invoicing, ensuring information security, handling requests and complaints, and — if you have consented — sending commercial electronic messages.
Legal grounds (KVKK Art. 5):
- Necessary for the conclusion and performance of a contract (Art. 5/2-c).
- Compliance with a legal obligation (Art. 5/2-ç), such as retaining invoices.
- Legitimate interests (Art. 5/2-f), such as security and abuse prevention.
- Explicit consent (Art. 5/1) for marketing cookies and commercial electronic messages. The consent text is shown where consent is collected (sign-up screen and cookie banner) and recorded with the version you accepted.
Collection method: website forms, cookies and similar technologies, records generated automatically while you use the application, and messages you send us; electronically, by partly automated means.
Transfers: to our service providers (hosting, email, payment, AI, monitoring — Other Service Providers) and to competent public authorities upon request.
Transfers abroad: our servers and providers are outside Türkiye. In the absence of an adequacy decision, regular transfers rely on the standard contract safeguard under KVKK Art. 9, notified to the Authority. Occasional transfers may rely on the other exceptions in Art. 9.
Your rights under KVKK Art. 11: to learn whether your data is processed; to request information if it is; to learn the purpose of processing and whether it is used accordingly; to know the third parties to whom it is transferred in Türkiye or abroad; to request correction if it is incomplete or inaccurate; to request erasure or destruction; to request that these actions be notified to third parties; to object to an adverse outcome produced solely by automated analysis; and to claim compensation for damage caused by unlawful processing.
Send requests to privacy@praxtify.com; applications complying with the Communiqué on Application Procedures are concluded within 30 days at the latest.
Cookie consent: for visitors connecting from Türkiye, analytics and marketing cookies do not run until explicit consent is given.
12. Security
We transport data over encrypted connections, restrict access by role and separate tenant data at the database level. To report a vulnerability, see Security and Responsible Disclosure.
13. Children
Praxtify is for commercial use only, is not directed at anyone under 18, and we do not knowingly collect children's data.
14. Changes
When this policy changes, the new version is published on this page with its effective date and a summary of changes at the top. Earlier versions remain readable in the archive.
15. Contact
For anything privacy related: privacy@praxtify.com · Praxtify, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, USA.