Privacy Policy

Praxsys is operated by Maher Khamiss. In this policy, “we,” “us,” and “our” refer to the operator. We are responsible for personal information used to administer accounts, operate the website, respond to inquiries, and manage the service. Contact maher@praxsys.io for privacy questions, access or deletion requests, and legal notices.

When a customer adds personal information to a Space, that customer determines the purposes of processing its content. We process that information on the customer’s instructions to provide Praxsys. The Data Processing Agreement describes that relationship. For customer-controlled information, contact the customer or Space administrator first; you may also contact us for assistance.

• maher@praxsys.io
• Data Processing Agreement

Information comes from you, people you collaborate with, your chosen sign-in provider, and your interactions with the service:

• Account information: your email address, name, profile information, account identifiers, authentication records, and Space memberships.
• Customer content: client and business contacts, projects, tasks, Packages, documents, files, requests, approvals, comments, and other information you or authorized collaborators provide.
• Inquiries and support: your name, email address, message, and information supplied while resolving a request. Avoid sending unnecessary sensitive information.
• Product updates: the email address you submit and your subscription preferences. Requesting access does not subscribe you to the newsletter.
• Technical information: network requests, IP addresses, browser and device information, service logs, security and abuse-prevention signals, website usage measurements, and saved preferences.
• Billing information, when you purchase a subscription: customer and subscription identifiers, plan information, and transaction status. The checkout provider handles payment-card details; do not send those details to us by email.

If you choose Continue with Google, Praxsys uses Google to authenticate you through Supabase, our authentication provider. We receive basic identity information made available for sign-in, such as your Google account identifier, email address and verification status, name, and profile picture. Praxsys does not receive your Google password.

We use this information to create or identify your Praxsys account, sign you in, display your profile, and protect account access. Basic account information is stored with your authentication and profile records in Supabase. Profile information may be visible to authorized collaborators as part of using the app. Service providers process it only as needed for the service functions described in this policy.

The Google sign-in feature does not request access to your Gmail messages, Google Drive files, Google Calendar, or Google contacts. Signing in with Google does not authorize Praxsys to read those services.

We do not sell Google user data, use it for targeted advertising, or use it to train general-purpose AI or machine-learning models. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements where applicable.

You can remove Praxsys access in your Google Account’s third-party connections settings. Removing that connection does not by itself delete information already stored in Praxsys or end an existing Praxsys session. Contact maher@praxsys.io to request deletion of your Praxsys account and associated Google identity information, subject to the retention and shared-content provisions below.

• Manage Google Account connections
• Google API Services User Data Policy

We use account and customer information to provide authentication, workspace access, collaboration, service notifications, support, and subscription administration. We use inquiry information to respond to you and separately submitted newsletter information to send product updates. Technical information helps deliver the service, understand website use, diagnose faults, and prevent abuse.

Where data-protection law requires a legal basis, we rely on performing our agreement with you for requested account and service functions; legitimate interests in operating, securing, and supporting the service for necessary administration and abuse prevention; consent where required for optional communications or technologies; and legal obligations where records or disclosures are required by law. You can withdraw consent without affecting processing that was lawful before withdrawal.

We do not sell personal information or share it for cross-context behavioral advertising. Customer content is processed to provide the service and follow authorized instructions, not to create advertising profiles.

Information within a Space is shared with participants according to their access and permissions. Content you deliberately share with others may remain available to them under the customer’s instructions and applicable law.

We use service providers for hosting, authentication, databases, file storage, email, and website analytics. These include Vercel, Supabase, and Resend. Google participates when you choose Google sign-in. For purchases processed through Paddle, Paddle handles checkout and related payment, tax, and fraud responsibilities under its own terms. The provider page explains these roles.

We may disclose information when required by law, to address fraud or security threats, or to protect lawful rights. If operation of the service is transferred, personal information remains subject to applicable privacy obligations and required notice or consent. Google user data remains subject to Google’s applicable transfer restrictions.

• Subprocessors and service providers

We retain information only for as long as needed for the purposes described here. Retention depends on whether your account or Space is active, customer instructions, unresolved support or billing matters, security needs, and legal recordkeeping or dispute requirements. We keep inquiry records as needed to resolve and follow up on the inquiry, subscription details while you receive updates, and limited suppression information as needed to respect an opt-out.

You may request account deletion by emailing maher@praxsys.io. We verify the request and explain any information that must remain and why. Account deletion, leaving a Space, and canceling a subscription are separate actions. Shared workspace content may be controlled by the customer and may need to be retained for other authorized participants or legal reasons; a request does not automatically erase everyone’s shared work.

Information removed from active systems may remain in restricted backups until those copies are overwritten or deleted through the provider’s backup lifecycle. Backup copies are not used for ordinary service activity. Legal holds and required records may have a different retention period. Contact us for information about the treatment of your particular data.

Praxsys uses authentication, permission controls, and restricted service access to protect information. No online service can guarantee absolute security. Protect your account and promptly report suspected unauthorized access to maher@praxsys.io.

Our providers may process information in countries other than your own. Praxsys does not promise storage in one country. Where applicable law restricts international transfers, the relevant processing must be covered by an appropriate legal mechanism, such as an adequacy decision or applicable contractual safeguards. Contact us for information about the providers and safeguards relevant to your data.

Depending on applicable law, you may have rights to access, correct, delete, or obtain a copy of personal information; object to or restrict processing; withdraw consent; and complain to a data-protection authority. Send requests to maher@praxsys.io. We may need to verify identity and authority, and legal exceptions can apply. We handle requests within the periods required by applicable law.

To stop product updates, use an unsubscribe link where provided or email maher@praxsys.io. You may still receive necessary account, security, billing, or service messages. Browser settings let you manage cookies and local storage; the Cookies policy explains the effects.

Praxsys is intended for people managing work and business collaboration and is not directed to children. If you believe a child has provided personal information inappropriately, contact us so we can investigate and take appropriate action.

• maher@praxsys.io
• Cookies & Similar Technologies

We will publish updates here with a revised effective date. For material changes, we will provide additional notice through the service or an appropriate contact channel where required. We will obtain consent where a change requires it under applicable law.