Privacy Policy

1. Introduction

Said Borna ("we," "us," or "our") operates PRAXIS, a prompt engineering platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service.

We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA), and other applicable privacy laws.

2. Data Controller

For the purposes of GDPR and other data protection laws, the data controller is:

3. Information We Collect

3.1 Information You Provide

• Account Information: Email address, name, and password when you create an account
• User Content: Prompts you create, save, or enhance using the Service
• Payment Information: Billing address and payment method details (processed by our payment processor, not stored by us)
• Communications: Information you provide when contacting support or providing feedback

3.2 Information Collected Automatically

• Usage Data: Features used, actions taken, time spent, and interaction patterns
• Device Information: Browser type, operating system, device type, and screen resolution
• Log Data: IP address, access times, pages viewed, and referring URLs
• Cookies and Similar Technologies: See our Cookie Policy for details

3.3 Information from Third Parties

• OAuth Providers: If you sign in using Google, GitHub, or other OAuth providers, we receive basic profile information as permitted by your privacy settings
• Payment Processors: Transaction confirmations and billing status from payment providers

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide the Service you requested
• Legitimate Interests: Improving our Service, preventing fraud, and ensuring security
• Consent: Where you have given explicit consent for specific processing activities
• Legal Obligation: Compliance with applicable laws and regulations

5. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Service
• Process your prompts and deliver enhanced outputs
• Store your prompt history so you can access it from your account
• Process payments and manage subscriptions
• Send transactional emails (account confirmation, password reset, billing)
• Respond to support requests and communications
• Analyze usage patterns, prompt categories, and feature interactions to improve user experience and develop new features
• Generate aggregated, anonymized insights from usage data to improve the quality and accuracy of our prompt enhancement algorithms
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

5.2 Data Used for Service Improvement

Your prompts, enhanced outputs, and interaction data (such as which features you use, prompt quality scores, and platform preferences) are stored in our database and may be used in aggregated, anonymized form to improve and develop the Service. This includes improving our prompt enhancement algorithms, identifying common usage patterns, and developing new features. We use this data based on our legitimate interest in providing and improving the Service.

We do not: Sell your personal data, use your individual prompts to train third-party AI models, or share your content with third parties for their marketing purposes. Any data used for service improvement is aggregated and anonymized so that it cannot be traced back to individual users.

6. Data Sharing and Disclosure

We may share your information with:

6.1 Service Providers

Third-party vendors who assist in operating the Service, including:

• Cloud hosting providers (Cloudflare)
• Payment processors (Stripe)
• Authentication providers
• Analytics services

6.2 AI Providers (A/B Testing Only)

When you use the A/B testing feature, your prompts are sent to third-party AI providers (such as OpenAI) for execution. This is initiated only by your explicit action.

6.3 Legal Requirements

We may disclose information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you before your information becomes subject to a different privacy policy.

7. Data Retention

We retain your personal data for as long as necessary to provide the Service and fulfill the purposes described in this policy:

• Account Data: Retained until you delete your account, plus a reasonable period for backup and legal compliance
• User Content: Retained until you delete it or your account, whichever comes first
• Usage Data: Aggregated and anonymized after 24 months
• Payment Records: Retained for 7 years as required by tax and accounting regulations

Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

8. Your Rights (GDPR)

Under GDPR, if you are in the EEA, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restriction: Request restriction of processing in certain circumstances
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at said@saidborna.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

9. International Data Transfers

Your information may be transferred to and processed in countries outside the EEA. When we transfer data internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses approved by the European Commission
• Transfers to countries with adequacy decisions
• Binding corporate rules where applicable

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit (TLS 1.3) and at rest
• Regular security assessments and penetration testing
• Access controls and authentication requirements
• Employee training on data protection
• Incident response procedures

While we strive to protect your information, no method of transmission over the Internet is 100% secure. In the event of a data breach affecting your personal data, we will notify you and relevant authorities as required by law.

11. Children's Privacy

The Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice (such as email notification).

13. Contact Us

For questions about this Privacy Policy or our data practices, please contact: