Privacy Policy

1. Who we are

Trexiio is an AI-powered website builder that lets business owners create, translate, and publish websites at trexiio.com and on custom domains. The data controller for the platform is Trexiio Inc. You can reach us at privacy@trexiio.com.

2. Data we collect

Account data: email address, password hash, preferred language, profile name, and authentication provider (email or Google).

Website content you create: business name, descriptions, menus, products, services, images, logos, contact details, social links, and any page content you author or generate with the AI builder.

Visitor and booking data on your published sites: names, email addresses, phone numbers, delivery addresses, order items, booking times, lead form submissions, and quote requests.

Payment data: when you subscribe to a paid plan or accept payments, billing details and transaction metadata are processed by our payment provider (Stripe). Trexiio does not store full card numbers.

Technical data: IP address, browser type, device information, language settings, and pages visited, used for security, fraud prevention, and analytics.

Cookies and local storage: session tokens, cart contents, language preference, and pixel identifiers when you enable marketing pixels on your site.

3. How we use your data

To operate the platform: authenticate you, store your sites, render your dashboards, deliver bookings, orders, and leads to you.

To provide AI features: send the content you submit to AI providers (Google Gemini, OpenAI) to generate websites, translations, SEO recommendations, and metadata. Prompts are sent over encrypted channels and are not used to train third-party models.

To translate published sites on demand when visitors switch language.

To process subscription payments and customer orders through Stripe.

To send transactional emails (account confirmation, password reset, order notifications, booking confirmations).

To prevent abuse, secure the service, and comply with legal obligations.

4. Legal basis (GDPR)

We process personal data under the following lawful bases: performance of a contract (operating your account and sites), legitimate interest (security, fraud prevention, product improvement), consent (marketing pixels, optional cookies), and legal obligation (tax, accounting, lawful requests).

5. Sharing and sub-processors

We share data only with sub-processors required to deliver the service: Supabase (database, authentication, file storage), Cloudflare (hosting, CDN, edge runtime), Stripe (payments and subscriptions), Google Cloud / OpenAI (AI inference for the builder and SEO center), and email delivery providers.

We do not sell your personal data or your visitors' personal data.

6. International transfers

Data may be processed in the United States and the European Union. Where required, transfers are protected by Standard Contractual Clauses or equivalent safeguards.

7. Retention

Account and website data are kept while your account is active. If you delete your account, data is removed within 30 days, except where retention is required by law (e.g. invoicing, tax records up to 7–10 years depending on jurisdiction).

8. Your rights

Under GDPR and similar laws you may request access, rectification, deletion, restriction, portability, and object to processing. You may also withdraw consent at any time and lodge a complaint with your local data protection authority. To exercise these rights, contact privacy@trexiio.com.

9. Security

We use industry-standard encryption in transit (TLS) and at rest. Passwords are stored as salted hashes. Access to production data is limited to authorized personnel and protected by multi-factor authentication.

10. Children

Trexiio is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will delete it.

11. Changes

We may update this policy to reflect changes in the service or applicable law. Material changes will be notified by email or in-app.

12. Contact

Questions about this policy: privacy@trexiio.com. Postal address: Trexiio Inc., legal department, as listed on the Legal Notice page.