Privacy, in plain language

waxTable is an AI document workspace operated by Buzzi AI, the company behind the service and the merchant of record for your subscription. When we say “we” or “us,” we mean Buzzi AI.

This policy applies to the waxTable marketing website, the authenticated app where Waxe drafts and renders your documents, and the emails and notifications we send. Two different roles are at play, and the distinction matters:

• Data you put in

  For the personal data inside the documents you create, you are the controller and waxTable is your processor. The Data Processing Addendum sets those terms.

• Data about your account

  For your own account and billing data, Buzzi AI is the controller. This policy explains how we handle that.

We keep the list short and purpose-driven. We collect the data you give us, the data the product needs to function, and the operational signals that keep it reliable.

• Account data

  Your email, name, password (hashed), language, and time zone.

• Workspace content

  The documents you generate, plus templates, contacts, and your branding profile.

• Operational telemetry

  Request logs, generation traces, and audit events — used to run and secure the service.

• Billing data

  Razorpay subscription IDs, invoice records, and tax identifiers. We never see full card numbers.

• Technical & usage data

  IP address, device and browser type, and which pages and features you use.

• Communication preferences

  The notifications and product updates you've chosen to receive.

• Directly from you — when you create an account, draft documents, or contact us.
• Automatically — technical and usage data gathered as you interact with the product.
• From our payment processor (Razorpay) and aggregated, anonymised analytics providers.

We process personal data only for clear, limited purposes:

• To provide the service — generate, render, edit, send, and store your documents.
• To secure accounts, prevent abuse, and keep the product reliable.
• To send the notifications and product updates you've opted into.
• To meet our legal, tax, and compliance obligations.

Our legal bases are performance of our contract with you, our legitimate interests in running and improving the service (where your rights don't override them), your consent for optional communications, and compliance with the law.

We hold data only as long as we need it to run the service and meet our legal obligations. Audit-log retention scales with your plan; everything else is removed on a published schedule once it's no longer needed.

Wherever you are, you have meaningful control over your personal data. You can exercise most of these directly from your account settings; for anything else, email us.

• Access — get a copy of the personal data we hold about you.
• Correction — fix anything inaccurate or incomplete.
• Portability — export your workspace data in a usable format.
• Erasure — delete your account and the data tied to it.
• Object or restrict — push back on processing based on legitimate interests.
• Withdraw consent — opt out of optional communications at any time.

We respond to verified requests within 30 days. There's no fee for a reasonable request; we'll only ever decline or charge for ones that are clearly excessive or repetitive, and we'll explain why.

We use a small, vetted set of sub-processors to deliver waxTable — cloud infrastructure, AI model providers, and email delivery. Each is bound by data-protection terms at least as protective as our own.

We give at least 30 days' notice of any material change to that list so you have time to object. We don't share your data with advertisers, and we don't sell it. The current list and full processor terms live in the Data Processing Addendum.

waxTable runs on globally distributed infrastructure. Where personal data crosses a border, we rely on Standard Contractual Clauses and equivalent safeguards.

Your data is encrypted in transit (TLS 1.2+) and at rest (AES-256), and every workspace is isolated at the database layer. The full picture is on our Security page.

We set only the cookies the product needs to work — no advertising cookies, no cross-site tracking. The complete register is on the Cookies page.

waxTable is a business tool and isn't directed at children. We don't knowingly collect personal data from anyone under 16; if you believe a child has provided us data, email us and we'll remove it.

If we change this policy, we'll update the date at the top and, for material changes, give notice before they take effect. Continuing to use waxTable after a change means you accept the updated policy.