Privacy Policy

1. Scope of This Policy

This policy explains how we handle information that identifies you or can be linked to you (“Personal Information”). This includes data considered “personally identifiable information” or “personal data” under various privacy regulations.

Our Terms and Conditions (available at https://paxelo.ai/terms) incorporate this Privacy Policy and govern your use of the Platform.

2. Information We Gather

2.1 Types of Information Collected

We collect the following categories of Personal Information:

2.2 How We Collect Information

Directly From You:

• Account registration forms
• Content creation and AI interactions
• Support requests and communications
• Surveys and feedback submissions

Automatically:

• Tracking technologies like cookies
• IP-based location detection
• Usage analytics during Platform access

From Third Parties:

• Social media platforms (when you connect accounts)
• Analytics service providers
• Partners and referral sources

3. How We Use Your Information

We use Personal Information for these purposes:

3.1 Platform Operations

• Creating and maintaining your account
• Processing your content requests
• Delivering AI-generated outputs
• Personalizing your AI experience
• Providing customer assistance
• Enhancing Platform performance
• Security and fraud prevention
• Troubleshooting and debugging

3.2 Marketing Activities

• Promoting our services
• Delivering advertisements
• Targeting relevant content

3.3 Communications

• Responding to your inquiries
• Sending service-related updates
• Providing important notices

3.4 Legal Compliance

• Meeting legal requirements
• Protecting our rights and property
• Enforcing our policies
• Ensuring user safety

4. External AI Processing

4.1 What Gets Sent to AI Providers

• All prompts, questions, and instructions you submit
• Content you request for generation or analysis
• Your entire AI conversation history
• Personal or sensitive information included in your interactions
• Documents and files you upload
• Voice recordings (if using voice features)

4.2 How External AI Services Handle Your Data

Third-party AI providers process your information to generate responses and content. We engage these providers through contracts that restrict how they can use and retain your data:

• Contractual Protections: Data Processing Agreements prohibit AI providers from using your data for their own purposes, including training their models
• Retention Periods: Security and abuse monitoring may require AI providers to retain data for 30-90 days
• Processing Role: These providers function as data processors acting on our behalf

4.3 Your Control Over AI Processing

• Consent: Using AI features constitutes consent to third-party AI processing
• Optional Use: AI features are entirely optional—you can use paxelo.ai without engaging AI capabilities
• Discontinuation: You may stop using AI features anytime without affecting other Platform access
• Alternative: Users who don't consent to third-party AI processing should avoid AI features

5. How We Share Your Information

5.1 Service Providers

Third-party companies that help us operate the Platform, including:

• Hosting and infrastructure providers
• Analytics services
• Customer support platforms
• Security services

5.2 Payment Processors

Stripe handles all payment card processing. We don't store your complete payment card information. Review Stripe's privacy practices at https://stripe.com/privacy.

5.3 External AI Providers

Third-party AI services that process your content and conversations to generate responses (detailed above in “External AI Processing”).

5.4 Our Team

paxelo.ai employees and contractors may access your AI conversations and content when:

• You request technical assistance
• Troubleshooting is necessary
• Resolving technical issues

Access is limited to authorized personnel on a need-to-know basis under confidentiality obligations.

5.5 Advertising Partners

Marketing platforms and ad networks receive:

• Device and usage information
• Cookie identifiers
• Analytics data

This sharing may constitute a “sale” under some state privacy laws.

5.6 Business Partners

Companies we partner with for integrations and referrals may receive relevant information.

5.7 Legal Requirements

We may disclose information to:

• Comply with laws and regulations
• Respond to legal processes
• Enforce our agreements
• Protect rights, safety, and property

5.8 Corporate Transactions

If we merge with, are acquired by, or sell assets to another company, user information may transfer to the new entity.

5.9 With Your Permission

We may share data for other purposes when you explicitly consent.

5.10 Aggregated Data

We may create and share anonymized, aggregated data that cannot identify individual users.

5.11 Paxelo WordPress Plugin

We offer a free WordPress plugin that connects your WordPress site to the Paxelo platform via the Paxelo API at https://paxelo.ai/api/v1. The plugin is used to authenticate your account, check your license, validate coupons, and retrieve your content packages, orders, and deliverables.

Data transmitted by the plugin:

• API key — stored in your WordPress database and sent with every request for authentication.
• Plugin version number — included in request headers for compatibility.
• Coupon codes and package IDs — sent when you validate a coupon or browse packages.
• Order IDs — sent when you view or import your orders and deliverables.

What is NOT transmitted: The plugin does not collect or send any personal visitor data, WordPress user information, site content, analytics, or any data beyond what is listed above. All communication occurs over HTTPS.

Your use of the Paxelo Plugin is governed by our Terms of Service and this Privacy Policy. You may uninstall the plugin at any time to stop all data transmission.

6. Tracking Technologies

We use cookies, web beacons, and similar tools to recognize your device and enhance your experience.

6.1 Cookie Categories

Essential Cookies

• Required for Platform functionality
• Cannot be disabled

Preference Cookies

• Remember your settings and choices

Analytics Cookies

• Help us understand Platform usage
• Includes Google Analytics (opt out at https://tools.google.com/dlpage/gaoptout/)

Marketing Cookies

• Enable targeted advertising
• Measure campaign performance

6.2 Managing Tracking

Control cookies through:

• Your browser settings
• Our “Cookie Preferences” tool on the website

Do Not Track: Our Platform doesn't currently respond to Do Not Track browser signals.

7. Voice Data and Biometric Information

7.1 What Constitutes Biometric Information

Under state biometric privacy laws (including Illinois BIPA, Texas CUBI, and Washington laws), “biometric information” means data derived from biometric identifiers used to identify individuals. This includes voiceprints, faceprints, fingerprints, and similar unique biological markers.

For paxelo.ai, this specifically refers to voiceprints—unique identifiers created from your voice recordings when you use voice input features.

7.2 When We Collect Voice Data

Voluntary Collection: We collect voice data only when you choose to use voice input features.

What We Collect:

• Voice recordings you submit
• Voiceprint data derived from those recordings

Purpose:

• Enable speech-to-text conversion
• Personalize AI to recognize your voice
• Improve voice recognition accuracy for you
• Power voice-enabled content creation

7.3 Your Consent Requirements

Written Consent: Before first using voice features, you'll receive a clear notice explaining our collection, use, storage, and retention of voice data. You must affirmatively agree before accessing voice features.

Voluntary Participation: Voice input is completely optional. You can use all core Platform features without providing voice data.

Withdrawal: You may withdraw consent anytime by:

• Stopping voice feature use
• Requesting deletion of your voice data

7.4 How We Share Voice Data

We may share biometric information with:

Service Providers: Infrastructure and storage providers who process voice data on our behalf under contractual restrictions

External AI Providers: AI services that process voice input to generate responses, bound by contracts to protect your data and use it only for service provision

Legal Authorities: When required by law, regulation, legal process, or government request

What We Don't Do: We never sell, lease, or trade voice data to third parties. We only share as described above.

7.5 Voice Data Retention and Deletion

Retention Period: We keep voice data while your account is active or until you request deletion.

Illinois Residents: Voice data will be permanently deleted within three (3) years of your last Platform interaction, or when the collection purpose is satisfied, whichever is first.

Other States: Retention complies with applicable state biometric laws.

Deletion on Request: Request deletion anytime by:

• Contacting [email protected]
• Deleting your account

We permanently delete voice data within thirty (30) days of deletion requests, except where law requires retention.

Third-Party Retention: Voice data sent to external AI providers follows their retention policies (typically 30-90 days). We request deletion from these providers but cannot guarantee immediate removal.

7.6 Voice Data Security

We protect voice data through:

• Encryption during transmission and storage
• Access controls limiting access to authorized personnel
• Secure storage infrastructure
• Regular security audits

7.7 Your Voice Data Rights

You have the right to:

• Access voice data we've collected about you
• Request deletion anytime
• Withdraw consent by stopping voice feature use
• Learn how your voice data is used and shared

Exercise Rights: Contact [email protected]

7.8 State-Specific Voice Rights

Illinois (BIPA): Illinois residents have additional rights including the right to sue for violations. We comply with all BIPA requirements: informed written consent, published retention schedules, and limited disclosure.

Texas (CUBI): Texas residents are protected against unauthorized voice data capture and commercial disclosure.

Washington: Washington residents have rights regarding collection, use, and disclosure of biometric data.

8. Your Responsibility for Generated Content

We provide tools, but you retain full responsibility for:

• Reviewing all AI outputs before use or publication
• Verifying accuracy and appropriateness
• Ensuring no infringement of intellectual property rights
• Confirming compliance with laws and regulations
• Meeting professional and ethical standards
• Checking that content doesn't defame or harm others
• Determining suitability for your intended purpose

AI-Generated Content May Include:

• Errors and inaccuracies
• Inappropriate material
• Outdated information
• Potentially infringing content

We Do Not:

• Guarantee accuracy, completeness, or reliability of AI outputs
• Assume liability for how you use or distribute generated content
• Endorse or verify content created through the Platform
• Take responsibility for your decisions based on generated content

You agree to hold us harmless from claims arising from your use of generated content. See our Terms and Conditions for complete liability details.

9. Information Security

We implement reasonable security measures to protect Personal Information:

• Encryption during transmission and storage
• Secure connections with third-party AI providers
• Authentication and access controls
• Regular security assessments

10. Data Retention

We retain Personal Information only as long as necessary for the purposes described in this policy, unless law requires longer retention.

10.1 Retention Periods

• Account Data: While your account is active
• AI Conversation Data: To maintain personalization
• Payment Records: Typically 7 years for accounting and tax purposes
• Voice Data: During active use or up to 3 years from last use (Illinois residents)

10.2 Deletion Process

Request deletion of your data at any time. Upon deletion:

• We remove data within 30 days (except where legally required)
• Voice data is permanently and irretrievably deleted
• Data already shared with external AI providers follows their retention policies (30-90 days)

11. Children's Privacy

Our Platform is not intended for individuals under 13 (or under 16 in the EU/UK).

Age Verification: Users must confirm minimum age during registration.

No Intentional Collection: We don't knowingly collect information from children.

Parental Notice: If we discover we've collected a child's information without appropriate consent, we'll delete it promptly.

Parents/Guardians: If you believe your child has provided information to us, contact [email protected] immediately.

12. Your Privacy Rights

Depending on your location, you may have rights regarding your Personal Information:

• Access: Confirm what information we hold and obtain a copy
• Correction: Request fixes to inaccurate or incomplete information
• Deletion: Request removal of your information
• Portability: Receive your data in machine-readable format
• Marketing Opt-Out: Unsubscribe from promotional emails
• Sale/Sharing Opt-Out: Stop data sharing for advertising

Exercise Rights: Contact [email protected] or use account settings

Verification: We may verify your identity before processing requests

No Penalty: You won't face discrimination for exercising privacy rights

13. State-Specific Rights

13.1 California (CCPA/CPRA)

California residents have additional rights:

• Know what Personal Information is collected
• Delete Personal Information
• Correct inaccurate information
• Opt out of “sale” or “sharing” for targeted advertising
• Limit use of sensitive information

Information We Sell/Share for Advertising:

• Identity and contact information
• Technical information
• Usage information
• Location information

Opt Out: Email [email protected] or use “Cookie Preferences”

13.2 Virginia, Colorado, Connecticut, Utah, Montana, Oregon, Texas

Residents have rights to:

• Access, delete, correct, and port data
• Opt out of targeted advertising and sales

Exercise Rights: Contact [email protected]

13.3 Washington State - Health Data Privacy

Washington residents who share health information have additional rights under the My Health My Data Act:

• Access health data
• Delete health data
• Withdraw consent for health data processing
• Know which third parties receive health data

Health Data Sharing: Health information in conversations may be transmitted to external AI providers.

Appeals: If we deny a privacy request, you may appeal by contacting [email protected]. If we deny the appeal, you may contact the Washington Attorney General at https://www.atg.wa.gov/file-complaint.

13.4 European Union and United Kingdom (GDPR)

EU/UK residents have rights under GDPR:

• Access, rectify, erase, restrict processing, and port data
• Object to processing
• Withdraw consent
• Lodge complaints with supervisory authorities

Legal Basis for Processing:

We process your data based on:

• Contract: Information necessary to provide Platform services (account data, profile, payment, content)
• Legitimate Interests: Analytics, improvement, security, fraud prevention, existing customer marketing
• Consent: Prospect marketing, optional cookies, advertising cookies, voice data
• Legal Obligation: Compliance with laws, tax requirements, regulations

International Transfers: Data is processed in the United States. We use Standard Contractual Clauses and appropriate safeguards for transfers.

GDPR Contact: For GDPR matters, contact [email protected]

14. International Data Transfers

Our Platform operates from the United States. Personal Information from users outside the U.S. is transferred to and processed in the United States, where data protection laws may differ.

By using paxelo.ai, you consent to these transfers.

Safeguards We Use:

• Standard Contractual Clauses with service providers
• Data Processing Agreements with third parties
• Security measures for data in transit and at rest

15. Marketing Communications

We may send newsletters and promotional materials using your Personal Information.

Opt Out:

• Follow unsubscribe links in emails
• Contact [email protected]

Email Platform: We use ActiveCampaign for email marketing. See their privacy policy at https://www.activecampaign.com/legal/privacy-policy.

16. Payment Processing

Stripe processes all payment card information. We don't store complete payment card details.

Stripe's privacy practices are governed by their Privacy Policy at https://stripe.com/us/privacy. Stripe adheres to PCI-DSS standards.

17. Policy Updates

We may update this Privacy Policy periodically. We'll notify you of material changes via:

• Email notifications
• Prominent Platform notices

Continued use after changes indicates acceptance of the updated policy.

The “Last Updated” date above shows when the current version became effective.

18. Legal Framework and Disputes

Governing Law: This Privacy Policy is governed by Delaware state law (United States), without regard to conflict of law provisions.

Jurisdiction: Disputes arising from this policy or Personal Information processing are subject to exclusive jurisdiction of state and federal courts in Delaware, unless otherwise required by law.

EU/UK Rights: For EU/UK users, this provision doesn't affect rights under GDPR or mandatory consumer protection laws.

Arbitration: Disputes may be subject to binding arbitration as outlined in our Terms and Conditions. Review the Terms and Conditions for complete dispute resolution procedures.

19. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights:

EU/UK Data Protection: Contact [email protected] for data protection representative information.