Privacy Policy

1. Overview

At Flaxu ("we", "our"), we value your privacy. This Privacy Policy explains how your personal data is collected, processed, stored, and protected when you use the Flaxu platform. By using our service, you are deemed to have accepted this policy.

2. Data We Collect

We collect the following data in order to provide our service:

Account Information

• First name, last name
• Email address
• Encrypted password
• Profile picture (when signing in via OAuth)

Subscription and Payment Information

• Selected subscription plan
• Billing period information
• Lemon Squeezy customer identification number

Note: Your credit card information is processed directly by Lemon Squeezy and is not stored on our servers. Lemon Squeezy is a PCI DSS compliant payment processor.

Usage Data

• Created channels and their configurations
• Message counts and token usage
• AI model preferences

API Keys

API keys provided by Starter plan users are stored encrypted (AES-256). Keys are only used for AI model requests and are never displayed in plain text.

3. Purpose of Data Use

• Providing and improving the service
• Account management and authentication
• Subscription and payment processing
• Providing customer support
• Sending service-related notifications
• Security and fraud prevention
• Fulfilling legal obligations

4. Data Sharing

We only share your personal data with third parties in the following cases:

• Lemon Squeezy: For payment processing (including tax/VAT management as Merchant of Record)
• AI Model Providers: To send messages to your selected AI model (Anthropic, OpenAI, Google)
• Legal Requirement: To authorized authorities when there is a legal obligation

We do not sell or share your data with third parties for marketing purposes.

5. Data Security

• All data transmission is encrypted with SSL/TLS
• API keys are stored encrypted with AES-256
• Passwords are stored hashed with bcrypt
• Database access is restricted and monitored
• Regular security audits are conducted

6. Cookies

Flaxu uses essential cookies for session management. These cookies are necessary for the service to function. Third-party cookies for analytics or advertising purposes are not used.

7. Data Retention

Your account data is retained as long as your account is active. Upon an account deletion request, your data will be permanently deleted within 30 days. Message histories are retained for 90 days and then automatically cleared. In cases where legal obligations require it, some data may be retained for a longer period.

8. Your Rights

Under the GDPR and related data protection legislation, you have the following rights:

• Request access to your data
• Request correction of your data
• Request deletion of your data (right to be forgotten)
• Request restriction of data processing
• Right to data portability
• Object to data processing

To exercise these rights, you can contact us at support@flaxu.network.

9. Changes

This Privacy Policy may be updated from time to time. Significant changes will be communicated via email. The current version will always be published on this page.

10. Contact

For questions regarding privacy, you can send an email to support@flaxu.network.