Privacy Policy
Tavixa is a product of CodersBucket Ltd. We collect the details you give us to run your account and your AI agents. Payments are handled by Paddle, our Merchant of Record. We share data only with the services that run Tavixa, or when the law requires it, and we never sell it. You can ask to see, correct or delete your data at any time.
This policy covers the tavixa.app website & chat.tavixa.app
Who is responsible for your data
Tavixa is a product of CodersBucket Ltd. (“CodersBucket”, “we”, “us”), 3rd Floor, House-405, Road-6, Baridhara DOHS, Dhaka-1206, Bangladesh. Privacy contact: info@tavixa.app.
- Your Tavixa account, our website and our own marketing. We decide how this data is used, so we are the controller.
- Chats and leads from visitors to a customer’s website. The business that installed the Tavixa widget decides what its agent collects and why. We process that data on the business’s behalf. If you chatted with an agent on another website, contact that business first; we will help them answer you.
What we collect
| Group | What | Where it comes from |
|---|---|---|
| Account | Name, company, email, password (stored hashed), sign-in method (email or Google) | You |
| Workspace | Company name, website, business address, team members you invite | You |
| Knowledge | Text, files, PDFs and website pages you add to train your agents | You |
| Visitor chats and leads | Messages visitors send, and the name, email and request details they submit | Visitors to a customer’s website |
| Billing | Plan, subscription status, invoices. Card details are entered on Paddle’s checkout; we don’t receive or store them | Paddle |
| Usage and device | Pages visited, features used, browser, device type, IP address, error logs | Your browser and our servers |
| Support | Messages you send through our contact form or email | You |
Why we use your data and our legal basis
| Purpose | Legal basis |
|---|---|
| Create and run your account, agents and widget | Performance of our contract with you |
| Generate AI answers from your knowledge | Performance of our contract with you |
| Billing, invoices and tax records (through Paddle) | Contract, and legal obligation |
| Service emails: sign-in, billing, security and usage notices | Performance of our contract with you |
| Security, fraud prevention, fixing faults and improving Tavixa | Our legitimate interests |
| Website analytics cookies and marketing emails | Your consent, which you can withdraw at any time |
| Answering lawful requests from authorities | Legal obligation |
Who receives your data
We don’t sell your personal data. We share it only as follows.
| Who | Why |
|---|---|
| Paddle.com (Merchant of Record) | Processing orders, payments, taxes, invoices and refunds |
| Google (Gemini) | Generating agent answers, embeddings and text extraction from files |
| Sign-in, if you choose “Continue with Google” | |
| Our hosting and database provider | Running our servers and database |
| Our file storage provider | Storing knowledge files and widget assets |
| Our email provider | Sending sign-in, billing and service emails |
| Google Analytics and Microsoft Clarity | Website analytics, only with your consent |
| Professional advisers, such as lawyers and accountants | When we need their advice |
| A company that takes over Tavixa | If Tavixa is sold or merged, under this policy |
| Authorities and courts | When the law requires it, or to protect our rights, users or the public |
Our providers may use your data only to provide their service to us. Paddle, Google and Microsoft also follow their own privacy policies. To get the names of our hosting, storage and email providers, email info@tavixa.app.
Where your data is stored
Our servers and some providers above may store or handle data outside your country, including in the United States. Where the law requires it, we rely on safeguards such as standard contractual clauses or an adequacy decision for these transfers.
How long we keep data
| Data | How long |
|---|---|
| Your account and workspace | Until you delete it |
| Knowledge, chats and leads | Until you or your workspace admin delete them, or the workspace is deleted |
| Data after a workspace is deleted | Removed within 30 days, except backups |
| Backups | 90 days |
| Billing and invoice records | As long as tax and accounting law requires |
| Contact form messages | Up to 2 years |
Your rights
Depending on where you live, you can:
- access the data we hold about you and get a copy;
- correct it;
- delete it;
- restrict or object to how we use it;
- move it to another service (portability);
- withdraw consent for analytics cookies or marketing emails;
- complain to us first, then to the data protection authority in your country.
Email info@tavixa.app from your account email. We reply within one month, or tell you if we need longer. We may ask you to confirm who you are first.
Cookies
We use essential cookies to keep you signed in and secure. We use analytics cookies (Google Analytics and Microsoft Clarity) only if you allow them, and you can change that choice at any time. The chat widget on a customer’s website stores a small identifier in the visitor’s browser so a conversation can continue.
How we protect your data
We encrypt data on its way to and from Tavixa. Each workspace’s data is kept separate from every other workspace, and team members see only what their role allows. No system is completely safe, so we can’t guarantee data will never be lost or accessed without permission. If a breach affects your data, we will tell you and the authorities as the law requires.
Children
Tavixa is for businesses and people aged 18 and over. We don’t knowingly collect data about children.
Changes to this policy
When we change this policy, we update the date at the top. If a change matters, we will tell you by email or in the dashboard before it applies.
Contact
CodersBucket Ltd. (Tavixa) · 3rd Floor, House-405, Road-6, Baridhara DOHS, Dhaka-1206, Bangladesh · info@tavixa.app
See also: Terms of Service · Refund Policy