Privacy Policy

1. Our Commitment

At SPRAXXX, privacy is not a feature — it's the foundation. We do not sell, trade, or rent your personal information. Your data belongs to you.

We believe in radical transparency: you have the right to know exactly what we collect, why we collect it, and how it's used. No fine print, no tricks, no data brokerage.

2. What We Collect

• Account Information: Email address, username, and payment details (via Stripe) if you subscribe to a paid plan.
• Identity Verification: Data required for Mail-Safe™ verification, handled securely through our identity partner.
• Technical Logs: Minimal server logs necessary for security, fraud prevention, and service uptime. We retain only what's essential.
• No Tracking: We do not use third-party advertising pixels, social media trackers, or analytics that profile your behavior across the web.

3. How We Use Your Data

We use your information exclusively to:

• Provide services you've requested (verified email, identity keys, signed receipts, QR passes).
• Maintain security and prevent fraud, spam, and abuse.
• Process payments and manage subscriptions through our payment processor, Stripe.
• Comply with legal obligations under applicable law, without overreach.
• Communicate with you about service updates, security alerts, or your account.

We will never use your data to train third-party AI models, sell to data brokers, or serve targeted advertising.

4. Data Sharing

We do not sell or rent your data. Period.

We may share limited information with:

• Service Providers: Stripe for payment processing, infrastructure providers for hosting (all under strict data processing agreements).
• Legal Requirements: If required by law, court order, or government regulation — but we will challenge overly broad requests.
• Your Consent: If you explicitly authorize us to share data (e.g., exporting your receipts to a third-party service).

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, access controls, and regular security audits. Mail-Safe™ receipts use cryptographic signing to ensure authenticity and integrity.

While no system is 100% secure, we take your security seriously and continuously improve our defenses against evolving threats.

6. Your Rights

You have the right to:

• Access: Request a copy of all personal data we hold about you.
• Correct: Update or correct inaccurate information in your account.
• Export: Download your data in a portable format (JSON, CSV, or mbox for email).
• Delete: Request deletion of your account and associated data (subject to legal retention requirements).
• Revoke Consent: Withdraw consent for optional data processing at any time.

To exercise these rights, contact us at privacy@spraxxx.com or use the account management tools in your dashboard.

7. Data Retention

We retain your data only as long as necessary to provide services or comply with legal obligations:

• Active Accounts: Data retained while your account is active.
• Deleted Accounts: Most data deleted within 30 days. Cryptographic receipts and revocation records may be retained for legal integrity.
• Financial Records: Payment records retained for 7 years per tax and accounting requirements.

8. International Transfers

SPRAXXX is based in Canada. If you access our services from outside Canada, your data may be transferred to and processed in Canada or other jurisdictions where our service providers operate.

For users in the EU/EEA, we comply with GDPR requirements and use standard contractual clauses for international data transfers. Org plans can request data residency options.

9. Children's Privacy

SPRAXXX is not intended for users under 13 years of age. We do not knowingly collect personal information from children. If we learn we've collected data from a child, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy to reflect service improvements, legal changes, or user feedback. We'll always note the "Effective Date" at the top.

Material changes will be announced via email or a prominent notice on our website. Continued use after changes constitutes acceptance.

11. Contact Us

Questions, concerns, or requests about your privacy?

Email: privacy@spraxxx.com
Postal: SPRAXXX Privacy Office, Ontario, Canada