Who we are
Praxen is PRAXEN PTY LTD, ACN 703 320 174, ABN 65 703 320 174, an Australian company. We build websites, run social media and Google Ads for small businesses, and build AI automations.
Anything about your data goes to support@praxen.studio. A person reads it.
What this covers
Three groups of people. Visitors to this website, including anyone who asks the website assistant a question, uses the Spare Day Leak Finder, or asks us to email them if they don't finish checking out. Customers who write to us, book a call or buy. And Instagram users who are affected by the Praxen app, which is how we publish posts to Instagram accounts we manage and send private replies to comments on those posts.
If you only visited the site, the first five rows of the table are yours. If you left a comment on a post by an account that uses the Praxen app, the last three rows are yours, even though you never connected anything to us.
What we collect, and why
| Where it comes from | What we hold | What we use it for |
|---|---|---|
| You visit the site | A random visitor ID kept in your browser's local storage (not a cookie), where you came from (campaign tags, the referring site), phone or computer, and which steps you reached: saw the offer, clicked Pay, opened checkout. No name, email or browser details. We do not write your IP address into the visit record. A rate limit keeps a one-way hash of it for at most two days. | Seeing where people stop on the way to buying, so we can fix those pages. The ID goes to Stripe on the payment link so a paid order can be matched to the visit. There is no Google Analytics and no ad pixel on the site. |
| You ask the website assistant a question | Your question goes to Anthropic in the United States, whose Claude model writes the answer from our own pages. We keep counts of questions and the topics they were about. If the assistant could not answer, we keep that question for up to 90 days, with email addresses and phone numbers removed where we can spot them. Your visitor ID is kept with those records so we can limit how many questions can be asked in a short time. The assistant's records are deleted after 90 days. Please do not type private details into it. | Answering questions about our services, and improving the pages people have questions about. |
| You use the Spare Day Leak Finder (praxen.studio/leak-finder) | Your answers stay in your browser's local storage on your device. We count which steps people reach, using a random ID kept in your browser and where you came from (campaign tags). That count holds no name, email or IP address. If you ask us to email you a copy, we keep your email address, the jobs you picked, how you marked, scored and timed each one, the hourly value you set for your time, any jobs you named yourself, where you came from (campaign tags), and whether and when you ticked the box for occasional emails. We also keep the random ID, which links that request to the steps counted before it. The notes you typed about each fix stay on your device. The email only names jobs from our list. A job you named yourself shows as "Your own leak". If you tap Speak to talk instead of typing, your browser turns your words into text. Depending on the browser, Google, Apple or Microsoft may process the audio, and we never receive it. | Sending you the report once, and following up if you book a call. Occasional emails go out only if you ticked the box, and before the first one we email you to confirm. Every email tells you how to stop them. Report requests are kept for up to 13 months and step counts for 400 days, then deleted. Email support@praxen.studio to have yours deleted sooner or to stop all email. |
| You tick "email me if I don't finish" before checkout | Your email address, the service you were looking at, your visitor ID and when you ticked the box. If you type an email without ticking the box, it only fills in Stripe's checkout for you, and we do not keep it. | If you have not paid about an hour later, one email asking whether something stopped you and how we can help. Every email has an unsubscribe link and you can reply to it. If you pay, nothing is sent. If you unsubscribe, we stop at once. Our team gets an email with your address when this happens, and a copy of any answer you click, so a person can follow up; those stay in our mailbox like other email you send us. |
| You contact us, book a call, or buy | Your name, email, business name and what you wrote to us. Stripe handles your card and we do not receive the card number. | Answering you, doing the work you paid for, issuing tax invoices. |
| An Instagram account is connected to the Praxen app | The account's ID, username and account type. An access token that Instagram gives us so the app can act for that account. The images, videos, captions and times of the posts the account owner approved. | Publishing those posts at the time the owner chose, and replying to comments. Nothing else. |
| Someone comments on a post | We read each comment to check it for a keyword the account owner set up. A comment with no keyword is not stored. For one that matches: the comment ID, a link to the post, the first 300 characters of the text, the commenter's @username, the keyword and the time. | Sending the private reply that goes with that keyword. |
| The app replies | A log of the reply: the comment ID, whether it went, the error if it failed, and when. If the account owner has turned it on, a short public reply under the comment. A contact record in the owner's list: the @username with a placeholder email address, the comment text and the post link. Our team also gets a Telegram alert with the @username, the keyword and the first 100 characters of the comment. | Making sure nobody gets the same reply twice, and letting the account owner follow up with the person who asked. |
The app sends private replies to comments. It does not read your direct-message inbox, and if someone answers a private reply the app does not read the answer. It stays in the account's own Instagram inbox.
What we do not do
- We do not sell personal information, and we do not rent it out.
- We do not use Instagram data for ad targeting or profiling, and we do not use it for anything other than the account it came from.
- We do not pass it to anyone except the providers listed below, who handle it so the service can run.
Where it is kept
Our website runs on a Hetzner server. The Instagram app's data sits in a web-hosting account run by a separate Australian company that two of Praxen's three founders own. The Instagram access token is kept in protected server files and in our database, outside the public web folder, with backups.
We also use Cloudflare to store the media files we publish and to carry traffic to our websites, Stripe for payments, Telegram for internal alerts, and email providers to send and receive mail. Contact records, including the ones created from Instagram comments, can be passed to an AI assistant (Anthropic's Claude) that helps our team write follow-up messages. Questions typed into the website assistant are sent to Anthropic in the United States, which writes the answer. The assistant's records, requests to email you if you don't finish checking out, and Spare Day Leak Finder report requests and step counts are kept in that same web-hosting account, outside the public web folder. Some of these providers store data outside Australia.
How long we keep it
The Instagram data does not delete itself. The token, the comment and reply logs and the contacts saved from comments stay until you ask us to delete them, because the reply log is what stops a double reply. When you ask, we delete by hand within 30 days of your request. The data deletion page has the steps.
Some things do delete themselves. The website assistant's records, including questions it could not answer, are deleted after 90 days. A request to email you if you don't finish checking out is deleted 90 days after we act on it, and your address goes straight away if we will not be emailing you; if you unsubscribe, we keep only your address on a do-not-email list, so you are never emailed again. Spare Day Leak Finder report requests are deleted after up to 13 months, and its step counts after 400 days; if you ask the Leak Finder to stop emailing you, we keep a one-way hash of your address on a do-not-email list so you are never emailed again. Visit records (the first row of the table) are deleted after 400 days.
Invoices and payment records are the exception. Australian company law makes us keep them for 7 years, so they stay until then.
Your options
- Cut our access at any time: in Instagram, open Settings, then Apps and websites, and remove Praxen. That ends our access to your account. It does not delete what we already stored; for that, email us.
- Stop checkout emails: use the unsubscribe link in the email, or email support@praxen.studio.
- Stop Spare Day Leak Finder emails: reply "unsubscribe" to any of them, or email support@praxen.studio.
- Ask what we hold about you, ask us to correct it, or ask us to delete it: email support@praxen.studio.
- If you are not happy with how we handled it, tell us first. If that does not settle it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Instagram, Meta and children
We use data from Instagram only for the posting and reply features above, and we follow Meta's Platform Terms when we do. Praxen is not affiliated with, endorsed by or sponsored by Meta or Instagram. Our services are for businesses and are not aimed at anyone under 13.
If this page changes
We change the date at the top and, for anything that affects people with a connected account, we email them before the change takes effect.