Privacy Policy
How we handle data on the Proxara website and sandbox. Covers analytics, cookies, CCPA/CPRA, and UK GDPR rights.
Updated July 2026
Privacy Policy
Last updated: July 2026
This Privacy Policy describes how Proxara, Inc. ("Proxara," "we," "us," or "our") collects, uses, and discloses information when you visit our website at proxara.ai (the "Site") or use our downloadable sandbox app (the "Demo"). This policy does not govern the Proxara product as deployed within customer environments; for that, please refer to our Product Privacy Policy.
1. Information We Collect
1.1 Information You Provide
- Contact Information. If you contact us via email at support@proxara.ai or through any inquiry form on the Site, we collect your name, email address, and the content of your message.
- Sandbox App. The Proxara sandbox (the "Demo") is a self-contained app you can download and run on your own device. Anything you type into it is processed locally, on your own device, to illustrate Proxara's data-protection behavior. Proxara does not receive, collect, or retain what you enter into the sandbox.
1.2 Information Collected Automatically
- Analytics Data. We use Google Analytics 4 ("GA4") to collect aggregated usage information, including pages visited, time spent on pages, referral sources, approximate geographic location (city/region level, derived from IP address), device type, browser type, and operating system. GA4 may set cookies on your device (see our Cookie Policy for details).
- Server Logs. Our hosting infrastructure may automatically record your IP address, request timestamps, and HTTP headers. These logs are used for security monitoring and are retained for no more than 90 days.
1.3 Information We Do Not Collect
We do not collect payment information on the Site. We do not require account creation. We do not use fingerprinting, session recording, heatmaps, or retargeting pixels.
2. How We Use Information
We use the information we collect for the following purposes:
- To respond to inquiries. We use your contact information to reply to your messages.
- To improve the Site. We use analytics data to understand how visitors use the Site and to improve its content and performance.
- To demonstrate our product. We offer a downloadable sandbox (the Demo) that runs on your own device. We do not receive or process what you enter into it.
- To maintain security. We use server logs to detect and respond to security incidents.
3. Legal Bases for Processing (UK GDPR / EU GDPR)
If you are located in the United Kingdom or the European Economic Area, we process your personal data under the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Responding to inquiries | Legitimate interest (pre-contractual communications) |
| Analytics | Consent (via cookie consent mechanism) |
| Sandbox demonstration | Runs locally on your device; no input is sent to Proxara |
| Security monitoring | Legitimate interest (fraud prevention, network security) |
4. How We Share Information
We do not sell, rent, or trade your personal information. We share information only in the following circumstances:
- Service Providers. We use Google Analytics 4 (operated by Google LLC) to process analytics data. Google's privacy policy is available at https://policies.google.com/privacy.
- Legal Obligations. We may disclose information if required by law, regulation, legal process, or governmental request.
- Business Transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Contact information (emails) | Until your inquiry is resolved, plus 12 months |
| Analytics data | 14 months (GA4 default retention setting) |
| Sandbox input | Processed locally on your device; never received or retained by Proxara |
| Server logs | 90 days |
6. Your Rights
6.1 All Users
You may contact us at any time at support@proxara.ai to:
- Request access to the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your personal information
- Request that we restrict processing of your information
6.2 California Residents (CCPA/CPRA)
If you are a California resident, you have the following additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:
- Right to Know. You may request the categories and specific pieces of personal information we have collected about you.
- Right to Delete. You may request that we delete your personal information, subject to certain exceptions.
- Right to Correct. You may request that we correct inaccurate personal information.
- Right to Opt-Out of Sale/Sharing. We do not sell or share your personal information for cross-context behavioral advertising. No opt-out is necessary.
- Right to Non-Discrimination. We will not discriminate against you for exercising your privacy rights.
To exercise these rights, contact us at support@proxara.ai. We will verify your identity before fulfilling your request. We will respond within 45 days.
6.3 UK and EEA Residents
If you are located in the United Kingdom or the European Economic Area, you have rights under the UK GDPR and EU GDPR, including:
- Right of access (Article 15)
- Right to rectification (Article 16)
- Right to erasure (Article 17)
- Right to restriction of processing (Article 18)
- Right to data portability (Article 20)
- Right to object to processing (Article 21)
- Right to withdraw consent at any time (Article 7)
- Right to lodge a complaint with your local supervisory authority
UK Supervisory Authority: Information Commissioner's Office (ICO), https://ico.org.uk
To exercise these rights, contact us at support@proxara.ai.
6.4 Other U.S. State Privacy Laws
Residents of states with comprehensive privacy laws (including Colorado, Connecticut, Virginia, Utah, Oregon, Texas, Montana, Delaware, Iowa, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, and others as enacted) may have similar rights to access, correct, delete, and opt out. Contact us at support@proxara.ai to exercise these rights.
7. International Data Transfers
The Site is hosted in the United States. If you access the Site from outside the United States, your information may be transferred to and processed in the United States. Where required by applicable law, we rely on Standard Contractual Clauses or other lawful transfer mechanisms approved by the relevant supervisory authority.
8. Children's Privacy
The Site is not directed to children under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete it promptly.
9. Security
We implement reasonable administrative, technical, and organizational measures to protect the information we collect. These include encryption in transit (TLS), access controls, and regular security reviews. No method of transmission or storage is completely secure.
10. Third-Party Links
The Site may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review their privacy policies.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last Updated" date. Material changes will be communicated via a notice on the Site.
12. Contact Us
If you have questions about this Privacy Policy, contact us at:
Proxara, Inc.
28 Geary St. Suite 650 PMB 5328, San Francisco, CA 94108
Email: support@proxara.ai
Security inquiries: security@proxara.ai