Privacy Policy

1. What data we process

Account data: name, email, password (stored only as a hash), your workspace, and session records. Service usage data: connected sources, quality metrics, issues, suggestions and generated reports.

Analysed data: DataVault reads metadata and limited samples from the sources the customer connects, in read-only mode. Those samples may contain personal data from the customer's systems — for that processing Praxis acts as processor and the customer as controller.

2. Why we use it

To provide the service (measure quality, detect problems, propose fixes), authenticate access, send transactional email (account verification, password reset, invitations, and the alerts and digests the customer configures) and bill paid plans. We do not sell data or use it for advertising.

3. Sub-processors

Google Cloud (hosting, EU where available), Resend (transactional email) and Anthropic (AI features: limited, anonymisable samples sent exclusively to generate the requested analysis; AI-generated content is always labelled). An up-to-date list is available on request.

4. Retention

Measurement data follows the history window of the subscribed plan. Account data is kept while the account exists. Deleting the workspace permanently erases all customer data — including users, measurements and reports.

5. Your rights

Access, rectification, portability and erasure: full export and workspace deletion are available inside the application (Team → Danger zone), with no support ticket needed. A member can delete their own account in the app. For any other request, or complaints, write to hello@praxis.pt; you also have the right to lodge a complaint with your supervisory authority.

6. Security

Source credentials encrypted before persistence, strictly read-only access to sources, strong password hashing, per-workspace isolation and audit trails on remediation flows. No system is infallible: relevant incidents will be communicated as required by law.