Privacy Policy

1. Who is responsible

ProjectX, the publisher of RaxlovAI, is responsible for the processing described here.

Contact: projectxlabs@proton.me.

The publisher’s full legal details will be added where the law requires them.

2. Data we handle

Depending on what you do on the site, we may handle your messages, images, uploaded files and the text extracted from them, your IP address, basic technical details about your browser, your settings, and whatever else the service needs to run.

What you type into a conversation can include personal data. Please don’t share confidential or highly sensitive information.

3. Why we use it, and on what legal basis

To run the interface, process your messages and forward them to generate replies: performance of a contract or steps taken before one, where that applies (GDPR Article 6(1)(b)).

To keep the service secure, prevent abuse and limit the number of requests: our legitimate interests (GDPR Article 6(1)(f)), after weighing them against your rights.

To measure audience and improve the service: legitimate interests, or your consent where it is required, depending on the tools in use.

To meet our legal obligations: GDPR Article 6(1)(c).

4. What stays on your device

Your chats, files and preferences can be saved in your browser, using IndexedDB and localStorage.

They stay on your device until you delete them, unless your browser or device clears them first.

You can delete them from the site’s settings where that option exists, or by clearing the site’s data in your browser.

5. How conversations are processed

When you send a message, its text, any images and the content extracted from your files are sent to our servers so we can forward them.

Your request is then passed on to the third-party AI model providers that generate the reply. We do not generate the replies ourselves.

We may hold your data in memory for a short time. We can’t promise that our providers keep no technical copies: their own retention and logging rules may apply.

Replies are not necessarily professional advice, and they can be wrong.

6. Providers who receive data

As a forwarder, we share your data with these kinds of providers to fulfill your request:

• Hosting and infrastructure, including Vercel and any other provider actually in use.

• AI model providers, meaning the third parties behind the models you pick.

• Web search services, when web search is turned on.

• Technical services that display sources and site icons.

Each provider has its own privacy, retention and security rules. We encourage you to read them.

7. Web search

When you use web search, all or part of your question may be sent to a search engine or another outside search provider.

Our infrastructure may then open relevant web pages to prepare an answer.

The sites it visits follow their own privacy policies.

8. How long we keep data

Data on your device: kept until you delete it.

Requests and content you send: used only for as long as it takes to forward the request and handle the response, apart from any technical copies our providers may hold.

IP addresses and security data: kept for as long as we need them to prevent abuse and protect the service, depending on how it is set up.

Technical logs: kept according to the settings and retention periods of our host and other providers.

We haven’t listed exact periods here. They depend on each provider and on how the service is actually configured.

9. Cookies and similar technologies

The site may use local storage that the service needs in order to work, for example to remember your preferences.

Analytics tools and other non-essential technologies are subject to the consent rules that apply.

How cookies and similar technologies are actually set up on the site determines what this policy says about them.

10. Transfers outside your country

Some providers may process data in countries outside the one where you live or outside the European Economic Area.

Where the GDPR applies, those transfers need a proper legal mechanism, such as an adequacy decision, Standard Contractual Clauses or another recognized safeguard.

The countries involved and the safeguards in place depend on the providers actually used.

11. Your rights

Where the GDPR applies, you may have the right to access, correct, erase, restrict or object to the use of your data, and to receive it in a portable format, under the conditions set by law.

To use these rights, write to projectxlabs@proton.me.

In France you can also complain to the CNIL. In the United Kingdom you can contact the ICO.

California (CCPA/CPRA): where it applies, your rights may include access, deletion, correction, and opting out of some uses or disclosures of your personal information.

Brazil (LGPD): your rights may include confirmation that your data is processed, access, correction and deletion, under the conditions set by law.

Canada: which rights apply depends on federal and provincial law, including Quebec’s Law 25.

Australia: your rights and remedies under the Privacy Act depend on whether and how that law applies.

12. Security

We take reasonable technical and organizational steps to protect the service and the data we handle.

No system is completely secure, so we can’t promise that an incident will never happen.

13. Children

The service is not meant for children who are too young to agree to the processing of their data on their own in their country.

The age limit and the rules on parental consent differ from one country to another.

Parents and legal guardians can contact us about a child’s data.

14. Changes to this policy

We may update this policy when the service or the law changes. Last updated: 2026-11-15.