Privacy Policy

Praxday is a practical AI product for professionals. The public website is a marketing and waitlist surface. An iOS application is under development. Personalized email digest delivery is planned but is not currently active. Additional platforms (for example Android) remain unconfirmed.

This draft describes Praxday’s current website and waitlist practices. It also notes planned features that are not live yet. Where something is planned, this policy says so clearly.

“Praxday” refers to the product and the person or organization that operates the website (the legal operator entity name will be confirmed before launch and may be updated here after legal review).

Waitlist form — required. When you join the beta waitlist, we collect:

• Email address
• Role or industry
• One to three AI-help goals you select
• Preferred access format (for example mobile app, personalized email digest (planned), both, or no preference)
• Your consent to be contacted about beta access and product updates

Waitlist form — optional. You may also provide:

• Preferred name (how we should address you)
• AI experience level
• Preferred digest frequency
• Short “Other” text if you choose Other for role/industry or AI-help goals (intended for general preference wording only)

Operational information created when you submit. Our systems may also create or store:

• Submission and update timestamps
• Consent version and consent timestamp
• Waitlist status (for example waiting, invited, testing, declined, or removed)
• A source identifier such as “website”
• A database record identifier

Praxday does not deliberately collect gender, age, income, employer name, home address, precise location, or other sensitive demographic information through the waitlist form.

Like most websites, technical hosting, security, and delivery systems may process limited connection or diagnostic information (for example IP-related logs or request metadata) depending on the hosting and infrastructure providers in use. Those logs, if any, are handled for security and operations—not as waiting-list marketing profiles.

The website does not currently create user accounts or process payments.

We may use waitlist and related information to:

• Manage the beta waitlist
• Contact you about beta access opportunities
• Send Praxday product-development updates where your consent allows
• Understand roles, workplace needs, experience, delivery preferences, and digest-frequency preferences so we can improve and prioritize the product
• Help prevent abuse and protect the website
• Maintain records of consent
• Comply with legal obligations

Waitlist consent is not permission to sell your personal information, and it is not permission to send unrelated third-party promotional offers.

Joining the waitlist does not guarantee immediate beta access.

Personalized email digest delivery is a planned channel. It is not currently active. Until that feature launches, email (if used) would be for beta-access or Praxday product-development communications consistent with the consent you provided on the form.

Production requirement: before Praxday runs ongoing commercial or promotional email campaigns, it must put in place appropriate consent practices, clear sender identification, consent recordkeeping, and a working unsubscribe process (including CASL considerations for Canadian electronic messaging). A production unsubscribe system is not yet implemented.

The waitlist form asks you to check an unchecked checkbox confirming that Praxday may use the information you provide to contact you about beta access and product updates. We do not pre-check that box.

You may withdraw consent by contacting us using the details below. Withdrawal will not affect processing that was already lawfully completed before we received and acted on your request. We may retain limited records where needed for legal, security, audit, or consent-proof purposes.

Consent is one way Praxday may process waitlist information. Depending on applicable law and the specific processing activity, other lawful grounds may also apply. This draft does not inventory every jurisdiction-specific legal basis, and that analysis is part of the required lawyer review—especially if Praxday serves users outside Canada.

Current processors. Praxday currently uses Supabase to host the waitlist database and store waitlist submissions. Waitlist writes are performed through a Praxday server route; the browser does not receive the database service-role credential.

Planned or possible future processors. Current and possible processors include:

• A website hosting or deployment provider (not yet selected)
• PostHog (US Cloud) for marketing-site analytics — see the Analytics and cookies section
• An email-delivery provider (not yet selected; personalized digests are not live)

Providers may process information on Praxday’s behalf according to their roles and any applicable contractual terms. This policy will be updated when additional providers are chosen.

Service providers may store or process information in jurisdictions outside your province or country, depending on how those providers are configured. Information may therefore be subject to the laws of those jurisdictions, which can differ from the laws where you live.

This draft does not claim that waitlist data resides exclusively in Canada. Data-residency details should be verified against the active Supabase project configuration and any future hosting setup as part of legal and operational review.

Praxday intends to retain active waitlist information while the beta is being developed and while contact remains reasonably relevant. Inactive records should be reviewed periodically. Information that is no longer needed should be deleted or anonymized, subject to legal, security, fraud-prevention, and consent-record requirements.

You may ask to be removed from the waitlist. See the contact section below.

Internal action item: define and approve a production retention schedule before broad public launch. This draft does not invent a precise number of months or years until that schedule is approved.

Subject to applicable law, you may request:

• Access to personal information Praxday holds about you
• Correction of inaccurate information
• Withdrawal from the waitlist
• Deletion where applicable
• Information about our privacy practices

Privacy requests: privacy@praxday.com. General questions may also be sent to hello@praxday.com.

No method of transmission or storage is completely secure, but Praxday uses reasonable administrative and technical measures appropriate to the information handled.

Current safeguards for the waitlist include measures such as:

• Server-side database writes rather than browser direct table access
• Keeping the service-role credential out of browser code
• Row Level Security on the waitlist table with no public table access policies
• Server-side validation and input length limits
• Basic abuse protections such as a honeypot field and starter rate limiting
• Secret management through server environment variables
• Restricted administrative access to database tooling

If Praxday becomes aware of a suspected privacy or security incident involving personal information, it will assess the situation and take notification or reporting steps where applicable under relevant law.

A written breach-response procedure remains a pre-launch operational requirement and should be completed as part of legal and security readiness.

Praxday uses PostHog (US Cloud) for product and web analytics on this marketing website. Analytics helps us understand traffic, engagement, performance (including Core Web Vitals), and waitlist conversion so we can improve the site and product.

We send only explicit, privacy-safe events through our analytics abstraction. Session replay, heatmaps, and form-value / interaction autocapture are disabled in our configuration. We do not intentionally send direct identifiers such as email addresses or preferred names, free-text waitlist answers, consent text, or database identifiers.

Analytics may use browser storage or cookies depending on PostHog’s configuration and the visitor’s browser. Essential technical storage required to operate the site may also be used by the hosting or application platform. This draft does not claim that the site uses “no cookies” or that analytics is fully anonymous.

Legal assumption (pending review): analytics currently loads as part of the marketing site without a separate cookie-consent banner. A qualified privacy lawyer must confirm whether a consent banner is required for intended launch regions, whether analytics may load before consent, appropriate persistence settings, retention, cross-border processing disclosure, and an opt-out process. Lawyer review remains a launch blocker.

Please do not submit confidential company, client, employee, financial, health, legal, or other sensitive information through the waitlist form. The conditional “Other” fields are intended only for general product-preference information.

Praxday is directed to professionals and general adult users. The waitlist is not intended for individuals who cannot provide valid consent under applicable law. A precise age threshold and children/minors approach must be confirmed during legal review.

Praxday may update this Privacy Policy as the product evolves—for example when email delivery launches, analytics configuration changes, new providers are used, or legal requirements change. When updates are published, the “Last updated” date at the top of this page will be revised.

This draft does not promise that Praxday will always send individual notice of every policy change.

Privacy requests: privacy@praxday.com

General contact: hello@praxday.com