Privacy Policy

01Overview

Phoxta is a platform that helps people own, launch, and run SI-powered businesses — from storefronts and booking sites to the operating console and SI agents that act on a business's behalf. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to phoxta.com, the dashboard, and the storefronts we host on your behalf.

We act as a data controller for the account and platform data you provide to us, and as a data processor for the customer data you collect through the businesses you run on Phoxta.

02Information we collect

We collect the following categories of information:

• Account information — your name, email address, password, organization, and billing details when you sign up or subscribe.
• Business content — the pages, products, listings, media, pricing, and other content you create for the businesses you run on Phoxta.
• Customer data — information your own customers submit through your storefronts, forms, bookings, and conversations (for example contact details, orders, and messages), which you control.
• Usage data — how you interact with the platform, including pages visited, features used, device and browser information, and approximate location derived from your IP address.
• Communications — messages you exchange with us for support, and messages routed through our omnichannel inbox (SMS, WhatsApp, email, and voice).

03How we use information

We use the information we collect to:

• Provide, operate, and maintain the platform and the businesses you run on it.
• Process payments, manage subscriptions, and send service and billing notifications.
• Power SI features such as content generation, agent replies, and recommendations.
• Improve and secure the platform, prevent abuse, and troubleshoot issues.
• Communicate with you about your account, updates, and (where permitted) relevant offers.
• Comply with legal obligations and enforce our Terms of Service.

04SI features and automated processing

Phoxta uses SI models — our own and trusted third-party providers — to generate content, draft replies, transcribe and synthesize voice, and take governed actions on your behalf. When you use these features, the relevant inputs (such as prompts, knowledge-base content, and conversation history) are processed to produce a result.

Agent actions that change data follow your configured policy (off, approve, or auto) and are recorded in an audit log. We do not use your private business content or your customers' data to train foundation models, and we contractually require our SI providers not to do so.

05Sharing and disclosure

We do not sell your personal information. We share information only as needed to run the service:

• Service providers — hosting, payments, messaging, email, voice, SI, and analytics vendors who process data on our behalf under contract.
• At your direction — integrations and channels you connect to your business.
• Legal and safety — when required by law, to protect rights and safety, or in connection with a merger, acquisition, or sale of assets.

06Payments and third-party services

Payments are processed by third-party payment providers. We do not store full card numbers on our servers. Messaging, voice, email delivery, custom domains, and SI features are provided through reputable vendors, each of which processes the minimum data needed to deliver that feature.

07Cookies and tracking

We use essential storage to maintain your session, protect your account and remember your privacy choices. Optional Vercel analytics and product-usage events are disabled until you opt in. Use Cookie settings to reject optional analytics or change your choice at any time. We retain this device-level choice for up to 180 days. Workspace behaviour learning has a separate opt-in in your account settings; it does not record typed message bodies, passwords or payment details.

08Data retention

Onboarding answers personalise your workspace and are available to authorised platform administrators, with access logged. Data requests can be submitted from the app Data & privacy page or by emailing femi@phoxta.com. We may verify your identity before providing, correcting or deleting information. Completed or declined privacy requests and platform data-access logs are retained for up to 365 days after resolution or creation, respectively, then removed by scheduled maintenance. We retain personal information for as long as your account is active or as needed to provide the service, then delete or anonymize it within a reasonable period, unless a longer retention is required for legal, tax, security, or dispute-resolution purposes.

09Security

We use technical and organizational safeguards — including encryption in transit, access controls, and audit logging — to protect your information. No method of transmission or storage is completely secure, but we work to protect your data and to notify you of incidents where required by law.

10Your rights and choices

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update most account details in your dashboard, or contact us to exercise your rights. We will respond consistent with applicable law.

11International data transfers

We may process and store information in countries other than your own. Where we transfer personal data across borders, we use appropriate safeguards consistent with applicable data-protection law.

12Children's privacy

Phoxta is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can remove it.

13Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you. Your continued use of Phoxta after changes take effect means you accept the updated policy.