Pax8 Privacy and AI Notice
Last updated: October 2026
Learn more about our commitment to privacy & AI protection
We know that you care about your personal information and how it is used, and we want you to trust that Pax8 uses your personal information carefully. This Privacy Notice will help you understand what personal information we collect, why we collect it, and what we do with it.
As you read our Privacy Notice, please keep in mind that it applies to all Pax8 companies as defined below. We take your privacy seriously and we are fully committed to protecting your personal information at all times. We will only process your personal information in accordance with the privacy legislation in the region you are located, this includes any replacement legislation coming into effect from time to time.
We have tried to keep this Notice as simple as possible, but if you’re not familiar with terms, then please read about these key terms first.
You have the right to object to certain uses of your personal information, including the use of your personal information for direct marketing. See what your rights are, and how you can exercise them below.
Pax8, Inc. and its affiliated entities (Pax8, we, us, our, or the Company) are responsible for the processing of Personal Information described in this Privacy Notice, meaning the processing where we decide why and how Personal Information is used.
Where we process Personal Information on behalf of a partner or customer, including information submitted to or accessed through our AI-enabled services, we do so under the applicable agreement and that organization’s instructions. The relevant organization’s privacy notice explains the processing for which it is responsible. You may contact that organization about your information or contact us if you are unsure who is responsible.
Our site may, from time to time, contain links to and from the websites of third parties, our partner networks, advertisers, and affiliates, please note that these websites have their own privacy notices and that we do not accept any responsibility or liability for these notices. Please check these notices before you submit any Personal Information to these websites.
This Privacy Notice applies to the processing of Personal Information by Pax8 in connection with any:
- Partner services: provision of any products and services by Pax8 to you;
- Supplier services: provision of products and services to Pax8 by suppliers or services;
- Visitor services: the provision by Pax8 of facilities, including conference rooms, local area networking (for instance, Wi-Fi), and other relevant facilities and services to visitors to any Pax8 offices;
- Recruitment activities: provision of the Personal Information of a candidate or individual (whether by such candidate or individual or by a third party, such as a recruitment agency) for a position at pax8 other than through Pax8’s usual recruitment process;
- Use of our website: the processing of Personal Information by Pax8 in connection with the processing of Personal Information on the Pax8 website www.pax8.com, including any Personal Information that website visitors may provide through the use of the Website when they sign up to receive newsletters, blog posts, register for events, use of the chatbot, or use our contact forms (Website);
- Use of our electronic platforms: the processing of Personal Information by Pax8 in connection with the provision of services via our marketplace portal, Pax8 platform, and/or other electronic portals and platforms which we offer or which we have agreed with you to use.
Personal Information we collect
Depending on how you interact with us or use our services, we may collect Personal Information directly from you, from your organization, from connected systems or other sources, or generate information when providing the services. The categories may include the following:
| Situations | Categories of Personal Information |
| If you express an interest in obtaining additional information about our services; request customer support; use our “Contact Us” or similar features; register to use our websites or to receive communications; sign up for an event, webinar, or Academy; participate in promotional activities; use our products and services; download certain content; are employed by a customer, or are a customer of an existing Pax8 customer and/or partner of our products and services where your information has been shared with us | Contact information, such as your name, job title, company name, address, phone number, email address, username and password, and other information you have voluntarily chosen to share. |
| If you sign up as a partner | Your contact information, payment and billing information, and professional information (including your job title, email address, phone number, and address). |
| If you attend an event | Your contact information, job title, company name, business email, telephone number, location, dietary preferences, emergency contact information. |
| Apply for a job | We may collect certain identifiers and professional or employment-related information from your job applications on our Careers page. To learn more about the type of information Pax8 collects in connection with job applications, please see the Pax8 Applicant Privacy Notice. |
| If you interact with our websites or emails | Information about your device and your usage of our websites or emails (such as Internet Protocol (IP) addresses or other identifiers), which may qualify as Personal Information (please see Section 3 below) using cookies, web beacons, or similar technologies. |
| If you use and interact with our products and services | Information about your device and your usage of our services through log files and other technologies, some of which may qualify as Personal Information (including Usage Data) (please see Section 3 below). |
| If you use AI-enabled services or connect applications to those services | Account and connection information; instructions, prompts, conversations and files; information retrieved from connected systems or other sources; generated outputs and personal inferences; saved context, preferences and memory; and related usage, billing, technical and operational information. This may include Personal Information about people other than the user. |
| If you communicate with us via a phone call | Information such as your name, voice, and any other Personal Information that you voluntarily share. |
| If you visit our offices | Name, email address, phone number, company name, time and date of arrival, image or video (CCTV footage). |
| If you voluntarily submit certain information to us, such as filling out a survey, responding to a questionnaire, or participating in other forms of research | Information you have provided as part of that request, which may include Personal Information and special categories of Personal Information, to the extent you voluntarily choose to provide it. |
| If you are a supplier or service provider to Pax8 (or work for a supplier or service provider) | Contact information, payment, and billing information. |
Personal Information You Provide
We collect Personal Information that you, or your organization on your behalf, provide to us directly. Depending on how you interact with us, this may include the following categories:
- Contact Information: details that identify you and allow us to contact you, such as your name, job title, company name, postal address, telephone number and email address (Contact Information).
- Account Information: information connected to an account you hold on our websites or platforms, or to your sign-up as a partner, such as your username, password, organization and partner profile (Account Information).
- Payment and Billing Information: information we need to invoice you, take payments or verify financial details you give us, such as billing contacts and addresses, financial information and records of your transactions with us (Payment and Billing Information).
- Event Information: information you give us when you register for or attend an event, webinar, training session, certification or Academy course, such as attendance details, location, dietary preferences and emergency contact information (Event Information).
- Communication Information: the content of, and details about, your communications with us, for example by email, support ticket, our chatbot or telephone, including a recording of your voice where a call is recorded (Communication Information).
- AI Service Content: the instructions, prompts, conversations and files you submit to our AI-enabled services, the outputs they generate, and any saved context, preferences and memory. AI Service Content may include Personal Information about other people, such as colleagues, customers or contacts (AI Service Content).
- Survey and Research Information: information you choose to give us when you complete a survey or questionnaire or take part in other research, which may include special categories of Personal Information to the extent you voluntarily provide them (Survey and Research Information).
- Visitor Information: when you visit our offices, your name, email address, telephone number, company name, the date and time of your arrival and images or video captured by CCTV (Visitor Information).
- Supplier Information: if you are, or work for, a supplier or service provider to Pax8, your contact details and the payment and billing information we need to manage that relationship (Supplier Information).
If you apply for a job with us, we collect certain identifiers and professional or employment-related information from your application through our Careers page. To learn more, please see the Pax8 Applicant Privacy Notice.
If you provide us, our service providers, or our affiliates with any Personal Information relating to other individuals, you represent that you have the authority to do so, and where required, have obtained the necessary consent, and acknowledge that it may be used in accordance with this Privacy Notice. If you believe that your Personal Information has been provided to us improperly, or want to exercise your rights relating to your Personal Information, please contact us using the information in Section 12 below.
Personal Information We Receive from Your Use of Our Services
When you visit, use or interact with our websites, platforms, emails or AI-enabled services, we automatically receive the following:
- Log Data: technical information that your browser or device sends when you access our websites and services, such as your IP address (or proxy server information), your browser type and settings, the date and time of your requests and how you interact with our websites and services (Log Data).
- Usage Data: information about how you use our products and services, such as your user ID, organization ID and user type, the features, products and product versions you use, the pages and files you view, the searches and other actions you take, the date and time stamps associated with your use and how often you visit (Usage Data). Usage Data may identify you or be linked to your account.
- Device Information: information about the device you use to access our websites and services, such as the device type, operating system and version, device and application identifiers, advertising identifier (Ad ID), internet service provider or mobile carrier, system configuration and any plug-ins or integrations (Device Information).
- Location Information: your general location, which we derive from your IP address. We use it to help keep accounts and services secure, for example by detecting unusual sign-in activity, and to present content in a suitable language and for your region (Location Information).
- Connected Systems Information: where you or your organization connect accounts or applications to our AI-enabled services, the information those services retrieve from the connected systems. This may include information about colleagues, customers, contacts and other individuals held in communications, documents or business records, as well as information generated or inferred when the service processes that material (Connected Systems Information).
- Cookies and Similar Technologies: we and authorized third parties use cookies, web beacons, pixels and similar technologies to collect some of the information described above. The section “What device and usage data do we process?” explains how we use these technologies and how you can manage your preferences, and our current Cookie List is available at https://www.pax8.com/en-us/terms/cookie-list/.
Where Log Data, Usage Data, Device Information or Location Information is Personal Information under applicable law, or is combined with Personal Information, we treat it as Personal Information under this Privacy Notice.
Personal Information we receive from other sources
We also collect information about you from other sources including partners from whom we collect or purchase Personal Information or who provide us with publicly available information which may contain Personal Information. We may combine this information with Personal Information provided by you.
Advertising: The Personal Information we collect from other sources for the purposes of tailored advertising includes identifiers, professional or employment-related information, education information, commercial information, visual information, internet activity information, and inferences about preferences and behaviors. We, collect this from third-party providers of business contact information, including mailing addresses, job titles, email addresses, phone numbers, intent data (or user behavior data), IP addresses, social media profiles, LinkedIn URLs, and custom profiles for purposes of targeted advertising, delivering relevant email content, event promotion, and profiling, determining eligibility and verifying contact information. This helps us update, expand, and analyze our records, identify new customers, and create more tailored advertising to provide services that may be of interest to you.
Additional sources: In addition to the aforementioned, we collect Personal Information from the following sources:
- Another individual at your organization who may provide us with your information, which may include Personal Information and special categories of Personal Information, to the extent you consent to providing it and sharing it, to obtain services and assess our goals related to encouraging diversity within our vendors;
- Information Collected from Other Sources. We also receive Personal Information from other sources, such as public databases, fraud prevention agencies, credit reference agencies, lenders, joint marketing partners, and social media platforms, and combine that with the information we collect about you. To the extent we combine such third-party-sourced information with the Personal Information we collect directly from you, we will treat the combined information as Personal Information We take reasonable steps to keep Personal Information we process accurate and up to date. Independent third parties are responsible for their own privacy practices.
We use artificial intelligence (AI) and automated technologies to support our products, services and business operations. These technologies may help us retrieve and analyze information, generate content, provide support and recommendations, personalize interactions, protect our services and automate tasks and workflows. We also use AI internally, including to support recruitment, security monitoring and other business processes. Some services include AI assistants or agents that carry out tasks on behalf of a person or organization. They may respond to requests, operate on a schedule or when an event occurs, and continue working when a user is not actively using the service. Where you interact directly with an AI agent, we will make this clear to you. Where AI is used, we are committed to transparency, fairness and accountability.
Connected systems and automated actions
Depending on the service and how it is configured, AI agents may access information from connected accounts and applications and perform actions in those systems. This may include retrieving information, creating or updating records, and preparing or sending communications.
The available functionality, permissions and approval controls depend on the service and release. The applicable service information explains the access involved, available controls and relevant limitations.
Information, context and memory
AI-enabled services may process information submitted by users, retrieved from connected systems or generated while completing a task. This can include Personal Information about users and other individuals.
Some services retain conversation history, preferences, contextual information or memory to support continuity and personalization. Retaining this information for use in subsequent tasks is different from using it to train or fine-tune an AI model.
Our purposes and responsibilities
We process Personal Information to deliver and administer the services, maintain relevant context, provide support, manage usage and charges, investigate errors and misuse, and protect the services.
Where we use Personal Information for our own purposes, the applicable purposes and legal bases are described in the section “Purposes for which we process Personal Information and the legal basis on which we rely”. Where we process Personal Information on behalf of a partner or customer, we do so under that organization’s documented instructions and the applicable agreement, including the data processing agreement and relevant product terms.
Service improvement and model training
Where permitted under the applicable Pax8 Terms, for our own analytics and improvement of AI-enabled services, we use only information that has been aggregated so that it does not identify, and cannot reasonably be used to identify, any individual. Processing Personal Information to create that information remains subject to applicable law and, where we process information on behalf of a partner or customer, the application agreement and documented instructions. Any separate processing for model training or fine-tuning requires the necessary contractual authorization and lawful basis and will be explained in the applicable privacy information before it begins.
Organizations using our services
Where an organization makes an AI-enabled service available to you, it may determine how the service is configured and used. Access to conversation content and usage information depends on the service. The applicable service information explains what users, administrators and partners can access.
The organization is responsible for explaining its own processing of Personal Information, including any workplace use, and meeting the legal requirements that apply to that processing.
AI and technology providers
We use external providers to support our AI-enabled services, including providers of AI models, hosting, identity management, information retrieval and integrations. Information submitted to or retrieved by a service may be transmitted to the providers involved in delivering it.
Information about the relevant providers and processing arrangements is available through the applicable service documentation and, where we process information on a customer’s behalf, the relevant subprocessor information.
Where information is sent to a third-party application or recipient as part of a configured task, that recipient’s own privacy information may also apply.
Information about our sub-processors for services provided on a customer’s behalf is available in the Pax8 Trust Centre at trust.pax8.com.
Accuracy and safeguards
AI-generated information may be incomplete or inaccurate. Please review outputs and actions as appropriate before relying on them.
We assess privacy and security risks and apply safeguards appropriate to the processing and our responsibilities. The safeguards and controls available for a particular service are explained in its service information.
We apply data minimization measures appropriate to the purpose and assess proposed further uses of Personal Information for lawfulness and compatibility.
Automated decisions and human review
Where we make decisions based solely on automated processing that produce legal or similarly significant effects on an individual, we do so only where permitted by applicable law and provide the required information and safeguards. These may include opportunities to make representations, obtain meaningful human intervention and contest the decision.
Where an organization uses our services to make or support decisions, it is responsible for meeting the requirements applicable to its use. This does not limit Pax8’s own legal responsibilities.
Sensitive information
Please do not submit or connect special-category, criminal-offence or other regulated or highly sensitive information unless the relevant service expressly supports that use and the necessary arrangements are in place.
Such information may nevertheless be present in connected communications or records. Its processing remains subject to the additional requirements of applicable law.
Retention and international processing
Different retention arrangements apply to submitted content, generated outputs, saved context and memory, and usage, billing and operational records. These arrangements are explained in the retention section below and the applicable service information.
Disconnecting an account or stopping an agent does not necessarily delete information already retained.
AI-enabled services may involve processing in the United States or other countries. Please see “International transfers of Personal Information” and the applicable service information for details.
We use common information-gathering tools, such as tools for collecting data, cookies, web beacons, pixels, and similar technologies to collect information that may contain Personal Data as you navigate our websites, our services, or interact with emails we have sent to you.
Device and Usage Data
We gather certain device information when individual users visit our websites. This information may include identifiers, commercial information, and internet activity information such as IP address (or proxy server information), device and application information, identification numbers and features, location, browser type, plug-ins, integrations, Internet service provider, mobile carrier, the pages and files viewed, searches, referring website, app or ad, operating system, system configuration information, advertising and language preferences, date and time stamps associated with your usage, and frequency of visits to the websites. This information is used for the purposes set out in Section 4 of this Privacy Notice below.
In addition, we gather certain information as part of your use of our products and services (Usage Data). This information may include (i) identifiers, such as user ID, organization ID, username, email address, and user type; (ii) commercial information; and (iii) internet activity information such as IP address (or proxy server), mobile device number, device and application identification numbers, location, language, browser type, Internet service provider or mobile carrier, user interactions such as the pages and files viewed, website and webpage interactions including searches and other actions you take, operating system type and version, system configuration information, date and time stamps associated with your usage and details of which of our products and product versions you are using. This information is used for the purposes set out in detail in Section 4 of this Privacy Notice below. In addition, we may use aggregated Usage Data for other internal business purposes, such as to identify additional customer opportunities and to ensure that we are meeting the demands of our customers and their users. Usage Data may identify an individual user or be associated with their account. We use it for the purposes described in this Privacy Notice and, where relevant, under the applicable customer or partner agreement.
Cookies, web beacons and other tracking technologies on our website and in email communications
We use technologies such as web beacons, pixels, and tags alone or in conjunction with cookies, to gather information about the use of our websites and how people interact with our emails.
When you visit our websites, we, or an authorized third party, may place a cookie on your device that collects information, including Personal Information, about your online activities over time and across different sites. Cookies allow us to track use, infer browsing preferences, and improve and customize your browsing experience.
We use both session-based and persistent cookies on our websites. Session-based cookies exist only during a single session and disappear from your device when you close your browser or turn off the device. Persistent cookies remain on your device after you close your browser or turn your device off. To change your cookie settings and preferences for one of our websites, click the Cookie Preferences link in the footer of the page. You can also control the use of cookies on your device, but choosing to disable cookies on your device may limit your ability to use some features on our websites and services.
We also use web beacons and pixels on our websites. For example, we may place a pixel in a marketing email that notifies us when you click on a link in the email. We use these technologies to operate and improve our websites and marketing emails. – please see more details in the “Advertising Cookies” row in the table below. For instructions on how to unsubscribe from our marketing emails, please see Section 9 below.
The following describes how we use different categories of cookies and similar technologies and your options for managing the data collection settings of these technologies:
Type of Cookies | Description | Managing Settings |
Strictly Necessary cookies | Strictly necessary cookies are necessary for basic website functionality. Some examples include session cookies needed to transmit the website, authentication cookies, and security cookies. If you have chosen to identify yourself to us, we may place on your browser a cookie that allows us to uniquely identify you when you are logged into the websites and to process your online transactions and requests. | Because strictly necessary cookies are essential to operate the websites, there is no option to opt out of these cookies. |
Performance cookies | These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance. | We need your prior consent to use performance cookies. To change your cookie settings and preferences, including those for functional cookies, click the Cookie Preferences link in the footer of the page. To learn how to control performance cookies via your browser settings, click here. |
Functional Cookies | Functional cookies enhance functions, performance, and services on the website. Some examples include cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual. Functional cookies may also be used to improve how our websites function and to help us provide you with more relevant communications, including marketing communications. These cookies collect information about how our websites are used, including which pages are viewed most often. We may use our technology or third-party technology to track and analyze usage information to provide enhanced interactions and more relevant communications and to track the performance of our advertisements. | We need your prior consent to use functional cookies. To change your cookie settings and preferences, including those for functional cookies, click the Cookie Preferences link in the footer of the page. To learn how to control functional cookies via your browser settings, click here. |
Targeting or Advertising Cookies | Advertising cookies track activity across websites to understand a viewer’s interests and to direct marketing to them. We sometimes use cookies delivered by us or by third parties to show you ads for our products that we think may interest you on devices you use and to track the performance of our advertisements. For example, these cookies collect information such as which browser you use when visiting our websites. Pax8 also contracts with third-party advertising networks that collect IP addresses and other information from web beacons on our websites, from emails, and on third-party websites. Advertising networks follow your online activities over time and across different websites or other online services by collecting certain data through automated means, including through the use of cookies. These technologies may recognize you across the different devices you use. When we work with third-party advertising networks, we require them to restrict their data processing to only what is necessary to provide us with the advertising services we request. | We need your prior consent to use targeting and advertising cookies. To change your cookie settings and preferences, including those for targeting and advertising cookies, click the Cookie Preferences link in the footer of the page. |
Our current cookie list can be found here.
Advertising, Analytics Services and Online Tracking
Pax8 may have an occasion to collect personal information from you through your use of web forms, attendance at conferences, or from tracking cookies. This data may be used by Pax8 or shared with third parties, including to send you emails and/or newsletters that you have consented to receive, to seek further consent to contact you or to perform analysis that we may use to improve our website or services. We will not sell personal data to third parties; however, we may provide your information to third parties in conjunction with the sale of all or part of our business. Additionally, we may provide an aggregate of your data, in an anonymized fashion, to our third-party partners to improve the services they perform.
Pax8 may transfer personal data internally, or to our contracted vendors or consultants who may be located in other countries. Before we do so, we take steps to ensure that your data will be given adequate protection as required by relevant data protection laws and Pax8’s internal policies.
The Personal Information we process, and the legal basis we rely on, depend on how you interact with us and which services you use. The table below sets out the purposes for which we process Personal Information, with examples, the categories of Personal Information involved (using the labels defined in the section “What Personal Information do we collect?”) and the legal bases we rely on. Where we rely on your consent, you can withdraw it at any time; this does not affect the lawfulness of processing carried out before you withdrew it. We process special categories of Personal Information only where legally permissible.
| Purpose (with examples) | Categories of Personal Information | Legal basis |
Providing and administering our websites, platforms and services For example:
|
| Performance of a contract, where the processing is needed to provide the services you or your organization have requested, to enter into a Pax8 Partner Agreement or to manage a product or service you buy from a Service Provider. Legitimate interests, such as providing online content about our services and managing customer and user accounts effectively. |
Providing and securing AI-enabled services For example:
|
| Performance of a contract, where the processing is needed to provide the AI-enabled services you or your organization use. Legitimate interests, such as providing our services reliably and keeping them secure. |
Personalizing your experience For example:
|
| Performance of a contract, where personalization forms part of the service you use, such as saved preferences or memory. Legitimate interests, such as offering best-in-class services to our partners and customers. |
Billing, payments and usage metering For example:
|
| Performance of a contract, where the processing is needed to complete a transaction, invoice you or take payment. Legitimate interests, such as accurate billing, recovering debts and managing the cost and integrity of our services. |
Communicating with you and marketing For example:
|
| Performance of a contract, where we fulfil your requests and support tickets. Legitimate interests, such as communicating with you, conducting direct marketing and advertising our products and services. Consent, where required by applicable law, such as for certain electronic marketing or personalized advertising. Please see Section 3 to learn how you can control personalized advertising, and Section 9.3 to learn how you can control marketing. |
Events, webinars, training, certifications, contests and promotions For example:
|
| Performance of a contract, where the processing is needed to provide the event, webinar, training or program you have registered for. Consent, where we ask for it, including your explicit consent where required. Legitimate interests, such as providing webinars, promotions and training. |
Recording phone calls For example:
|
| Consent, where required by applicable law. Legitimate interests, such as maintaining the high quality of our phone calls with users. |
Improving and developing our services, analytics and research For example:
|
| Legitimate interests, such as providing a relevant and well-functioning website, developing services that perform in line with customer expectations, improving our service levels and product offerings and expanding our business. If special categories of Personal Information are processed, where the Personal Information is manifestly made public by the data subject. |
Security, fraud prevention and protection of people and premises For example:
|
| Legitimate interests, such as promoting the safety and security of our websites, our services and Pax8 generally, protecting our offices, employees, visitors, events and confidential information against unauthorized access, and protecting our rights and the rights of others. Legal obligation, where applicable law requires us to take security or fraud-prevention measures. |
Legal, regulatory and financial obligations For example:
| Any of the categories described in “What Personal Information do we collect?”, as relevant to the obligation, request or claim | Legal obligation, where we must process Personal Information to comply with applicable laws. Legitimate interests, such as meeting our obligations associated with the reporting of our finances, protecting against misuse or abuse of our websites or services, protecting personal property or safety, pursuing remedies available to us and limiting our damages, complying with judicial proceedings, court orders or legal processes, responding to lawful requests, and for auditing purposes. |
These legal bases apply to the processing described in this Privacy Notice. Where we process Personal Information on behalf of a partner or customer, the applicable agreement and that organization’s instructions govern the processing, including its legal basis.
If we need to collect and process Personal Information by law, or under a contract we have entered into with you, and you fail to provide the required Personal Information when requested, we may not be able to perform our contract with you.
We may share your Personal Information as follows:
- Service providers
- Pax8 Affiliates
- Event Sponsors
- Partners, vendors and customers
- Promotion Sponsors
- Authorized third-party service providers who provide IT and administration services to us to help us to provide our services, including the provider of our CRM system and other software solutions used by us in the provision of our services
- Other third-party data processors for analytics and communication purposes, to help us provide our services
- Providers of AI models, hosting, identity management, information retrieval and integrations that support our services (see the Pax8 Trust Centre for subprocessor information).
- Partners and organizations that administer your use of the services, to the extent described in the applicable service information.
- Applications and recipients to which information is sent when carrying out a configured task or request.
- Third-party networks and websites
- Marketing and advertising service providers
- Professional advisors including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services
- Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets; or where we may seek to acquire other businesses or merge with them
- Public authorities.
Your Personal Information may be collected, transferred to, and stored by us in the United States and by our affiliates and third parties disclosed in Section 5, above, that are based in other countries.
Your Personal Information may be processed in countries that do not provide the same level of protection as your country. International processing may include information handled by AI model providers and other providers supporting our services. Processing locations depend on the service and providers involved.
Where required, we rely on applicable adequacy decisions or appropriate safeguards, including EU Standard Contractual Clauses and the UK International Data Transfer Agreement or UK Addendum. You can contact us using the details below for information about the safeguards applicable to your Personal Information or to request a copy.
Our websites and services are not directed at children. We do not knowingly collect Personal Information from children under the age of 13. We do not knowingly collect Personal Information for children between 13-18 unless we have obtained consent from a parent or guardian or such collection is subject to a separate agreement with us or the visit by a child is unsolicited or incidental. If you believe we have mistakenly or unintentionally collected Personal Information of a minor without appropriate consent please contact us by using the information in Section 12 below and we will take steps to delete their Personal Information from our systems.
We may retain your Personal Information for a period of time consistent with the original purpose of collection (see Section 4 above) or as long as required to fulfill our legal obligations. We determine the appropriate retention period for Personal Information based on the amount, nature, and sensitivity of the Personal Information being processed, the potential risk of harm from unauthorized use or disclosure of the Personal Information, whether we can achieve the purposes of the processing through other means, and on the basis of applicable legal requirements (such as applicable statutes of limitation).
For AI-enabled services, we determine retention separately for content and conversation history, outputs, saved context and memory, and operational, security and billing records. Retention depends on the purpose, applicable service arrangements and legal requirements.
The applicable service information explains the relevant periods or criteria and the arrangements for deletion or return. Stopping a service or disconnecting an account does not automatically remove all retained information.
At the end of the applicable retention period, we delete or anonymize Personal Information unless continued retention is required or permitted by law. Where information remains temporarily in backups, it is protected from further use and removed under the applicable backup-retention arrangements. For more information on data retention periods, please contact us by using the information in Section 12 below.
Your rights
You may have certain rights relating to your Personal Information, subject to local data protection laws. Depending on the applicable laws these rights may include the right to:
- Access your Personal Information held by us
- Know more about how we process your Personal Information
- Rectify inaccurate Personal Information and, taking into account the purpose of processing the Personal Information, ensure it is complete
- Erase or delete your Personal Information
- Restrict our processing of your Personal Information
- Transfer your Personal Information to another controller, to the extent possible
- Object to any processing of your Personal Information
- Opt out of certain disclosures of your Personal Information to third parties
- Opt out of the sharing of your Personal Information for delivering advertisements on non-Pax8 websites, applications, and services;
- If you’re under the age of 16, or such other applicable age of consent for privacy purposes in relevant individual jurisdictions, opt into certain disclosures of your Personal Information to third parties; Receive meaningful information about how AI tools processed your Personal Information, and exercise rights relating to automated decisions available under applicable law, including human intervention and the ability to contest a decision; Withdraw your consent at any time (to the extent we base processing on consent), without affecting the lawfulness of the processing based on such consent before its withdrawal;
- Not be discriminated against for exercising your rights as described above.
Where applicable, these rights extend to Personal Information contained in retained conversations, memory and personal inferences.
Where we process your Personal Information for direct marketing purposes or share it with third parties for their direct marketing purposes, you can exercise your right to object at any time to such processing without having to provide any specific reason for such objection.
How to exercise your rights
To exercise your rights, please contact us by using the information in Section 12 below. Your Personal Information may be processed in responding to these rights. We try to respond to all legitimate requests within one month unless otherwise required by law, and will contact you if we need additional information from you to honor your request or verify your identity. Occasionally it may take us longer than a month, taking into account the complexity and number of requests we receive. Where we process your Personal Information on behalf of a partner or customer, we will, where appropriate, direct your request to them and assist them in responding.
Some registered users may update their user settings, profiles, organization settings, and event registrations by logging into their accounts and editing their settings or profiles.
To update your billing information, discontinue your account, or request return or deletion of your Personal Information and other information associated with your account, please contact us by using the information in Section 12 below.
Your preferences for email marketing communications
If we process your Personal Data to send you marketing communications, you may manage your receipt of marketing and non-transactional communications from Pax8 by clicking on the “unsubscribe” link located at the bottom of Pax8 marketing emails, or by unsubscribing here.
Please note that opting out of marketing communications does not opt you out of receiving important business communications related to your current relationship with us, such as communications about your subscriptions or event registrations, service announcements, or security information.
Your preferences for telemarketing communications
If you want your phone number to be added to our internal Do-Not-Call telemarketing register, please contact us by using the information in Section 12 below. Please include your first name, last name, company, and the phone number you wish to add to our Do-Not-Call register.
Alternatively, you can always let us know during a telemarketing call that you do not want to be called again for marketing purposes.
We take appropriate precautions including organizational, technical, and physical measures to help safeguard against accidental or unlawful destruction, loss, alteration, and unauthorized disclosure of, or access to, the Personal Information we process or use.
While we follow generally accepted standards to protect Personal Information, no method of storage or transmission is 100% secure. You are solely responsible for protecting your password, limiting access to your devices, and signing out of websites after your sessions. If you have any questions about the security of our websites, please contact us by using the information in Section 12 below.
We will update this Privacy Notice when our practices, technologies or legal requirements change and revise its effective date accordingly. Where required, we will bring material changes to your attention before the relevant new processing begins and obtain consent where necessary. We encourage you to review this Notice periodically.
Pax8 has appointed a Data Protection Officer and an EU representative. To exercise your rights regarding your Personal information or if you have any questions regarding this Privacy Notice or our privacy practices please fill out this form, email us at privacy@pax8.com, contact us via our website, call us at 1-855-884-PAX8 (7298), or write to us at:
Attn: Data Protection Officer
Pax8, Two the Distillery
2 Avon Street
Bristol BS2 0GR, UK
Privacy@pax8.com
Attn: EU Representative
Pax8 Deutschland GmbH
Schumannstraße 27
60325 Frankfurt am Main
Germany
Privacy@pax8.com
When you contact us, please indicate in which country and/or state you reside.
We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If, however, you believe that we have not been able to assist with your complaint or concern, and you are located in the European Economic Area or the United Kingdom, you have the right to lodge a complaint with the competent supervisory authority. If you work or reside in a country that is a member of the European Union or that is in the EEA, you may find the contact details for your appropriate data protection authority on the following website.
The California Consumer Privacy Act (as amended by the California Privacy Rights Act) requires businesses to disclose whether they sell or share Personal Information. As a business covered by the CCPA, we do not sell Personal Information. We may share Personal Data (in the form of identifiers and internet activity information) with third-party advertisers for purposes of targeting advertisements on non-Pax8 websites, applications, and services. In addition, we may allow third parties to collect Personal Information from our sites or services if those third parties are authorized service providers who have agreed to our contractual limitations as to their retention, use, and disclosure of such Personal Information, or if you use Pax8 sites or services to interact with third parties or direct us to disclose your Personal Information to third parties.
California law requires that we detail the categories of Personal Information that we disclose for certain business purposes, such as to service providers that assist us with securing our services or marketing our products, and to such other entities as described in Section 5 of this Privacy Notice. We disclose the following categories of Personal Data for our business purposes:
- Identifiers;
- Commercial information;
- Internet activity information;
- Financial information;
- Professional and employment-related information;
- Education information;
- Geolocation data;
- Audio and visual data;
- In limited circumstances where allowed by law, information that may be protected characteristics under California or United States law; and
- Inferences drawn from any of the above information categories.
California law grants state residents certain rights, including the rights to know and access specific types of Personal Information, to learn how we process Personal Information, to request deletion of Personal Information, to request correction of Personal Information, to opt-out of sharing your Personal Information for third party advertising purposes, and not to be denied goods or services for exercising these rights.
If you are a California resident under the age of 18 and have registered with us, you may ask us to remove content or information that you have posted to our website(s). Please note that your request does not ensure complete or comprehensive removal of the content or information, because, for example, some of your content may have been reposted by another user.
For information on how to exercise your rights, please refer to Section 9 of this Privacy Notice. If you are an authorized agent wishing to exercise rights on behalf of a California resident, please contact us using the information in the “Contacting Us” section above and provide us with a copy of the consumer’s written authorization designating you as their agent.
If you would like to opt out of shares using your cookie identifiers, turn on a Global Privacy Control in your web browser or browser extension. Please see the California Privacy Protection Agency’s website at https://oag.ca.gov/privacy/ccpa for more information on valid Global Privacy Controls. If you would like to opt out of shares using other identifiers (like email addresses), please refer to Section 3 of this Privacy Notice.
We may need to verify your identity and place of residence before completing your rights request.
Last update – October 2026