Privacy Policy

1. What Information We Collect

We collect: your name, email address, and password (hashed) when you register. WhatsApp provider credentials (encrypted in our database). Pool activity data including match history, conversation summaries, and health scores. Usage data such as login times and feature interactions.

2. How We Use Your Information

We use your information to: match your numbers with pool partners, generate AI conversations, calculate health scores, manage your subscription, and communicate account-related updates. We do not use your data for advertising.

3. Pool Partner Privacy

You will never know who your pool partner is. Partner identity is never revealed to any participant. Poolaxy pairs accounts anonymously. Conversation summaries stored in the system use persona names, not real identities.

4. Credential Security

Your WhatsApp provider credentials are stored encrypted in our database. They are used exclusively for sending pool warm-up messages through your own provider account. We never use your credentials for any other purpose. We never store your WhatsApp account password.

5. Data Sharing

We do not sell your data. We do not share your personal information with third parties except: payment processors (Stripe and Paystack) for subscription management, and as required by law.

6. Data Retention

Your account data is retained while your account is active. Pool conversation summaries are retained for pool integrity even after you leave the pool, but contain only persona names and topic summaries, not personal information. When you delete your account, your personal data is anonymized.

7. Cookies and Sessions

Poolaxy uses session cookies only for authentication. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

Poolaxy processes data in accordance with the General Data Protection Regulation (GDPR). Our lawful basis for processing is consent, provided through the onboarding gate when you first use the service.

Your rights:

Right to access: Request a copy of your data by emailing hello@poolaxy.com.
Right to erasure: Delete your account from the Settings page. Personal data will be anonymized.
Right to portability: Request a data export by emailing hello@poolaxy.com.
Right to rectification: Update your profile in Settings at any time.

In the event of a data breach, Poolaxy will notify affected users within 72 hours of confirmation. For our full Data Processing Agreement, see DPA. For DPA requests, contact hello@poolaxy.com.

Data controller: Jordan Digitals, hello@poolaxy.com.

9. Your Rights

You may access, correct, or delete your personal data at any time. To access or export your data, email hello@poolaxy.com. To delete your account, use the Settings page.

10. Contact

Privacy questions: hello@poolaxy.com