LEGAL

Privacy Policy

Last updated: March 2026

Praxio is operated by Nedax d.o.o., Sarajevo, Bosnia and Herzegovina ("we", "us", "our"). This Privacy Policy explains how we collect, use, and protect your personal data when you use praxio.pro ("the Service").

1. Data We Collect

Account data: Name, email address, and password hash when you create an account.

Assessment data: Your answers to the Consultant Readiness Assessment and the resulting scores. If you provide your email on the result page, we store it alongside your assessment.

Usage data: Practice sessions, quiz answers, XP earned, levels achieved, streak data, community posts, votes, and comments. This data powers your profile and the platform's features.

Payment data: Praxio is free during early access, so we currently collect no payment details. If paid plans are introduced, payment processing is handled by our gateway Monri; we do not store your credit card numbers and only receive a customer reference and subscription status.

Technical data: IP address, browser type, device type, and basic analytics data to improve the Service.

2. How We Use Your Data

  • To provide and operate the Service - your profile, progress tracking, content delivery, and community features.
  • To calculate your Consultant DNA scores based on your practice activity.
  • To send you transactional emails (assessment results, account notifications).
  • To improve the Service through anonymized, aggregated usage analytics.
  • To respond to your inquiries when you contact us.

3. What We Don't Do

  • We do not sell your personal data to third parties.
  • We do not use your data for advertising or ad targeting.
  • We do not share your individual quiz answers, scores, or progress with anyone - including your employer or team admin - unless you are on a Team plan where your administrator has visibility into team progress as described in the Team tier features.
  • We do not send marketing emails unless you explicitly opt in.

4. Marketing & Your Consent

We only send marketing or product-update emails (e.g. new features, seasonal promotions, case studies) if you explicitly opt in by ticking a clearly-labelled, non-pre-filled checkbox at signup or in your account settings. Transactional messages - security alerts and account actions - are sent regardless of marketing consent because they are required for the operation of your account.

You can withdraw marketing consent at any time by (a) clicking the "Unsubscribe" link at the bottom of any marketing email, (b) toggling the setting in Settings → Notifications, or (c) emailing us at delija.fariss@gmail.com. Withdrawing consent does not affect the lawfulness of any processing we carried out before you withdrew it, and it does not stop transactional email.

5. Sharing Your Data

We share data only with:

  • Monri - payment processing (used only if paid plans are introduced; they would receive your payment details, not us).
  • Supabase - database and authentication infrastructure (data processed in EU/US regions).
  • Vercel - frontend hosting and CDN.
  • Resend - transactional email delivery.

We do not share data with any other third parties unless required by law.

6. Your Shareable Profile

Your Consultant DNA profile can be shared via a unique URL. This is opt-in - you choose to share the link. The shareable profile displays your level, DNA radar chart, badges, and quiz accuracy. It does not display your email, real name (unless you set a display name), or any private data.

7. Team Plan Data Visibility

If you are a member of a Team plan, your team administrator can see: your level, Consultant DNA scores, quiz accuracy per module, learning path completion, and activity streak. They cannot see your individual quiz answers, flashcard responses, or community posts unless those posts are public.

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, we delete your personal data within 30 days. Anonymized, aggregated data (e.g., "X% of users scored above 7 on Configuration") may be retained indefinitely.

9. Your Rights

You have the right to:

  • Access your data - view and export it from your account settings.
  • Correct your data - edit your profile information at any time.
  • Delete your data - request full account deletion via settings or by emailing us.
  • Object to processing - contact us to opt out of specific data uses.

10. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies. Analytics, if implemented, use privacy-friendly, cookieless alternatives.

11. Security

We use industry-standard security measures: encrypted connections (HTTPS), password hashing, row-level security on database access, and regular security reviews.

12. Children

Praxio is not intended for use by anyone under the age of 16. We do not knowingly collect data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification.

14. Contact

For privacy-related questions or data requests, contact us at delija.fariss@gmail.com or Nedax d.o.o., Sarajevo, Bosnia and Herzegovina.