Privacy Policy

This Privacy Policy explains how RoxWhy collects, uses, stores, and shares information for its AI learning workspace.

Information We Collect

We may collect:

• Account information, such as name, email address, authentication identifiers, and profile details.
• Learning content, such as prompts, messages, uploaded documents, notes, knowledge bases, RoxBot instructions, generated study material, and saved workspace context.
• Usage and metering information, such as AI-token usage, plan limits, feature activity, technical logs, and error events.
• Billing information, such as plan, subscription status, payment provider references, invoices, receipts, and top-up records. Stripe handles full payment card details.
• Support information, such as category, subject, message, account context, email address, and support history.
• Device and cookie information, such as browser, IP address, session cookies, security cookies, and analytics or diagnostics where configured.

Parents, Guardians, and Students

RoxWhy is designed for study support involving parents, guardians, and students. If a parent or guardian creates or manages an account for a student, we may process information that the parent, guardian, or student provides while using the account, contacting support, uploading learning material, or using AI learning features.

Students should use RoxWhy with parent, guardian, school, or account-owner permission where that permission is required. Parents and guardians can contact support for account, deletion, access, or data questions.

How We Use Information

We use information to:

• Provide RoxWhy tutoring, writing, knowledge-base, upload, and RoxBot features.
• Process AI-powered AI workflows and retrieve relevant source context.
• Manage accounts, sign-in, security, support, subscriptions, and AI-token credits.
• Detect abuse, debug issues, monitor reliability, and improve the product.
• Send service messages, support replies, receipts, and important account notices.
• Comply with legal, tax, accounting, and security obligations.

AI Providers and RoxWhy Processing

RoxWhy may send prompts, messages, retrieved source excerpts, uploaded document text, and related workspace context to AI-powered services and AI providers when needed to generate responses or perform learning workflows.

Do not upload content you are not permitted to process with an AI service. For sensitive documents, remove unnecessary personal information before uploading where practical.

Billing Providers

Stripe or another configured payment provider processes payment details for subscriptions and purchases. RoxWhy stores provider references and billing state needed to manage your account, credits, receipts, cancellations, and support.

Email and Support Providers

RoxWhy may use Resend or another configured email provider to send account, support, and service emails. Support messages may be stored in RoxWhy's admin inbox.

Cookies

RoxWhy uses essential cookies for sign-in, sessions, security, and preferences. Analytics, diagnostics, or chat cookies are only used where configured. See the Cookie Policy.

Retention

We keep information for as long as needed to provide RoxWhy, maintain account and billing records, meet legal obligations, resolve disputes, prevent abuse, and improve reliability. You may request deletion by contacting support, subject to legal, billing, security, or backup retention requirements.

Security

We use reasonable technical and organisational measures to protect information. No system is perfectly secure, and you are responsible for keeping your sign-in method safe.

Your Choices

You may request access, correction, deletion, or support with account data by emailing support@roxwhy.com. We may need to verify your identity before completing account-specific requests.

Contact

For privacy questions, account deletion, or data requests, contact support@roxwhy.com.