Privacy Policy

Saxa Litore LLC, a Wyoming limited liability company doing business as Saxalit ("Company," "we," "us," or "our"), operates the website located at www.saxalit.com and the data broker opt-out tracking application accessible through that website (collectively, the "Service"). This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website or use our Service.

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

This Privacy Policy is incorporated into and subject to our Terms of Service. Capitalized terms not defined herein shall have the meanings assigned to them in our Terms of Service.

2.1 Information You Provide Directly

We collect information that you provide when you:

• •Create an account through our Google OAuth sign-in integration. We receive your name, email address, and Google profile picture from Google upon authentication.
• •Submit a contact form on our website. We collect your name, email address, subject, and message content.
• •Correspond with us by email or other means.

2.2 Information We Generate on Your Behalf

Upon account creation, we generate a unique, randomly assigned privacy email address at the @saxalit.com domain on your behalf (your "Privacy Email Address"). This address is used exclusively within the Service to receive correspondence from data brokers during your opt-out process. We associate this Privacy Email Address with your account.

2.3 Information We Collect Automatically

When you access or use the Service, we automatically collect:

• •Session information via authentication cookies set by NextAuth.js, our authentication provider. This cookie is strictly necessary for the operation of the Service and contains an encrypted session token.
• •Log data, including your IP address, browser type, browser version, pages visited, time and date of your visit, and time spent on those pages.
• •Device information, including information about the device you use to access the Service.

2.4 Information Related to Your Use of the Service

We collect and store data you generate while using the Service, including:

• •Your opt-out status and progress for each data broker we track.
• •Timestamps associated with status changes (in progress, completed, follow-up, appeal).
• •Emails received at your Privacy Email Address from data brokers in connection with your opt-out requests.
• •Onboarding progress and user preferences within the Service.

We use the information we collect for the following purposes:

• •To provide, operate, and maintain the Service, including creating and managing your account.
• •To generate and manage your Privacy Email Address and associated inbox.
• •To track and display your data broker opt-out progress and Time to Freedom metric.
• •To authenticate your identity and maintain the security of your account.
• •To respond to your inquiries and provide customer support.
• •To send administrative communications, such as service updates or security notices.
• •To detect, prevent, and address technical issues, fraud, or unauthorized access.
• •To comply with legal obligations.
• •To improve and personalize the Service based on your usage patterns.

We do not sell, rent, trade, or otherwise transfer your personal information to third parties for their marketing purposes. We do not use your information to display advertisements. The Service is entirely ad-free.

4.1 Payment Processing

Saxalit offers a paid Pro subscription plan. Payment processing is handled exclusively by Stripe, Inc. We do not collect, store, or process your payment card information directly. When you subscribe, you are directed to Stripe's secure checkout interface. Stripe collects and processes your payment details in accordance with their own privacy policy and PCI-DSS compliance standards.

Upon successful payment, Stripe provides us with a customer identifier and subscription identifier that we store in association with your account. We use these identifiers to manage your subscription status.

4.2 Subscription Billing

The Pro plan is billed on a recurring monthly basis. Your subscription renews automatically at the end of each billing period unless you cancel before the renewal date. You may cancel your subscription at any time through your account settings or by contacting us. Upon cancellation, you retain access to Pro features until the end of the current billing period. We do not provide refunds for partial billing periods, except where required by applicable law.

4.3 Subscription Changes

We reserve the right to modify subscription pricing with reasonable advance notice. Price changes will take effect at the start of your next billing cycle. Continued use of the Pro plan after a price change constitutes acceptance of the new pricing.

4.1 Service Providers

We share your information with third-party vendors and service providers that perform services on our behalf, subject to confidentiality obligations. These include:

• •Vercel, Inc.: Cloud hosting and deployment infrastructure for the Service.
• •Upstash, Inc.: Cloud database (Redis) provider used to store your account data, opt-out progress, and Privacy Email Address.
• •Resend, Inc.: Transactional email delivery provider used to send service-related emails.
• •Google LLC: OAuth authentication provider. When you sign in with Google, Google provides us with your name, email address, and profile picture in accordance with Google's own privacy policy.
• •Stripe, Inc.: Payment processing provider for Pro subscriptions. Stripe collects and processes payment card information directly and is subject to its own privacy policy.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency), including to meet national security or law enforcement requirements.

4.3 Business Transfers

If we are involved in a merger, acquisition, asset sale, or bankruptcy proceeding, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information for any other purpose with your prior consent.

We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you request deletion of your account, we will begin the deletion process as described in Section 7 below. Certain information may be retained where required by law or for legitimate business purposes such as fraud prevention or dispute resolution.

Emails received at your Privacy Email Address are retained for as long as your account is active and are deleted upon account termination. Log data is retained for a maximum of ninety (90) days.

You may request deletion of your Saxalit account at any time through your account Profile page. When you initiate account deletion:

• •Your account enters a 30-day grace period during which it remains accessible in a limited read-only state.
• •If you have an active Pro subscription, it is cancelled immediately upon initiating deletion.
• •You may cancel the deletion request and restore full account access at any time during the 30-day grace period.
• •After 30 days, all account data is permanently and irreversibly deleted, including your opt-out progress, Privacy Email Address, inbox emails, and profile information.
• •Permanent deletion cannot be undone. We strongly encourage you to export or record any information you wish to retain before the grace period expires.

Deletion of your account does not affect the opt-out requests you have already submitted to data brokers. Those requests remain in effect with those brokers independently of your Saxalit account status.

We implement appropriate technical and organizational security measures designed to protect your personal information from unauthorized access, use, alteration, or destruction. These measures include encrypted data storage, secure HTTPS transmission, and restricted access to personal data on a need-to-know basis.

However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You acknowledge that you provide your personal information at your own risk.

9.1 Access and Correction

You have the right to access the personal information we hold about you and to request correction of any inaccurate information. You may review and update certain account information directly through your account settings within the Service.

9.2 Deletion

You have the right to request deletion of your personal information. You may do this directly through the Profile page in your account. See Section 7 for the full account deletion process, including the 30-day grace period.

9.3 Data Portability

You may request a copy of the personal information we hold about you in a commonly used, machine-readable format by contacting us.

9.4 California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, please contact us as described in Section 13.

9.5 Other State Residents

Residents of Virginia, Colorado, Connecticut, and other states with applicable privacy laws may have additional rights regarding their personal information. To exercise any such rights, please contact us as described in Section 13.

The Service may contain links to third-party websites, including data broker opt-out pages. This Privacy Policy does not apply to those third-party websites. We are not responsible for the privacy practices of third parties and encourage you to review the privacy policies of any third-party websites you visit.

When you use your Privacy Email Address to contact data brokers, those brokers may collect and process information in accordance with their own privacy policies. Your Privacy Email Address is designed to limit, but cannot entirely prevent, the collection of your information by data brokers during the opt-out process.

The Service is not directed to individuals under the age of eighteen (18). We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 18, please contact us immediately using the information in Section 13.

We reserve the right to update or modify this Privacy Policy at any time. If we make material changes, we will notify you by updating the "Last Updated" date at the top of this Policy and, where required by applicable law, by providing additional notice such as an email notification or a prominent notice on our website.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

We will respond to verifiable requests within the timeframes required by applicable law, and in any event within thirty (30) days of receipt.