Legal

PRIVACY POLICY

Effective Date: August 10, 2026  |  Last Updated: August 10, 2026

This Policy explains how STAX AI Business OS collects, uses, shares, and protects your information.

STAX AI Business OS ("STAX," "Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website stax.bywillo.ai, make a purchase, or use any of our Services. Please read this Policy carefully. If you disagree with its terms, please discontinue use of our Services.

1. Information We Collect

A. Information You Provide Directly

• Account Information: Name, email address, password when you register for an account.
• Purchase Information: Billing name, email, and payment details (processed securely by Stripe — we do not store full card numbers).
• Communications: Messages, support inquiries, and survey responses you send to us.
• Newsletter Signup: Email address when you subscribe to our mailing list.

B. Information Collected Automatically

• Log Data: IP address, browser type and version, operating system, referral URLs, pages visited, time and date of visits, and time spent on pages.
• Device Information: Device type, unique device identifiers, and mobile network information.
• Cookie Data: See our Cookie Policy for full details on cookies and tracking technologies we use.
• Analytics Data: Aggregated usage statistics about how visitors interact with our Services.

C. Information from Third Parties

We may receive information about you from third-party services including payment processors, analytics providers, and social media platforms when you interact with our content on those platforms.

2. How We Use Your Information

We use the information we collect to:

• Process transactions and deliver purchased products and Services;
• Create and manage your account;
• Send transactional emails (purchase confirmations, receipts, access credentials);
• Send marketing communications where you have provided consent or where permitted by law;
• Respond to your inquiries and provide customer support;
• Monitor and analyze usage patterns to improve our Services;
• Detect, prevent, and address fraud, security breaches, and technical issues;
• Comply with legal obligations and enforce our Terms of Service;
• Personalize your experience and deliver content relevant to your interests.

Legal Basis for Processing (GDPR): Where the GDPR applies, our legal bases for processing your personal data are: (a) contract performance — to deliver Services you have purchased; (b) legitimate interests — to improve our Services and prevent fraud; (c) consent — for marketing communications and non-essential cookies; and (d) legal obligation — to comply with applicable laws.

3. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your information with:

• Service Providers: Third-party vendors who assist us in operating our Services (payment processors, email delivery services, analytics platforms, hosting providers) — bound by confidentiality obligations.
• Legal Requirements: When required by law, court order, subpoena, or governmental authority, or to protect the rights, property, or safety of STAX, our users, or others.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.
• With Your Consent: Where you have given us specific consent to share your information.

4. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. Account information is retained while your account is active and for a reasonable period thereafter to resolve disputes and enforce agreements. Purchase records are retained for a minimum of seven (7) years for tax and accounting purposes. You may request deletion of your data subject to legal obligations; see Section 7 for your rights.

5. Data Security

We implement industry-standard administrative, technical, and physical security measures designed to protect your information from unauthorized access, alteration, disclosure, or destruction. These include SSL/TLS encryption for data in transit, encrypted storage of sensitive data, and access controls limiting employee access to personal data. However, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your information, and we encourage you to use strong, unique passwords and exercise caution online.

6. International Data Transfers

STAX is based in the United States. If you access our Services from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. Where required by applicable law (including GDPR), we implement appropriate safeguards for international transfers, such as Standard Contractual Clauses approved by the European Commission.

7. Your Rights & Choices

All Users:

• Marketing Opt-Out: You may unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in any email or contacting us directly.
• Cookies: You may manage cookie preferences through your browser settings. See our Cookie Policy.

GDPR Rights (EEA, UK & Switzerland Residents):

• Right of Access: Request a copy of personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal exceptions.
• Right to Restriction: Request that we restrict processing of your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

CCPA Rights (California Residents):

• Right to Know: Request disclosure of the categories and specific pieces of personal information collected about you.
• Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions.
• Right to Opt-Out of Sale/Sharing: We do not sell or share personal information as defined under CCPA. You may submit a "Do Not Sell or Share" request to support@stax.bywillo.ai.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information for purposes beyond those permitted under the CCPA.

To exercise any of these rights, contact us at support@stax.bywillo.ai. We will respond within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

8. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information promptly. If you believe we have inadvertently collected information from a minor, please contact us at support@stax.bywillo.ai.

9. Third-Party Services

Our Services integrate with or link to third-party services including but not limited to Stripe (payment processing), and analytics providers. These third parties have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third parties.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date and, where appropriate, notify you by email. Your continued use of our Services after any changes constitutes acceptance of the updated Policy.

11. Contact & Data Controller

For privacy-related inquiries, to exercise your rights, or to reach our Data Protection contact:

Terms of Service | Refund Policy | Cookie Policy | Disclaimer | ← Back to STAX