Last updated: March 2026
1. Who We Are
BAX is developed and operated by iSlayMetrics. If you have questions about this Privacy Policy, contact us at [email protected].
2. What BAX Collects
BAX is designed to collect as little data as possible.
- Audit data: Audit results, BAX scores, and LLM response data are stored within your BAX workspace and tied to your account. They are not shared with third parties.
- API key: If you provide an Anthropic API key, it is stored encrypted and used only to run your audits.
- Account data: If you purchase a paid plan, we collect your email address to create and manage your account and send you transactional emails (receipt, activation link, etc.).
- Payment data: Payments are processed by Stripe. BAX does not store credit card details. We receive a Stripe customer ID and subscription status from Stripe.
3. What BAX Does Not Collect
- We do not store the URLs or brand names you audit.
- We do not store LLM responses or AI-generated content from your audits.
- We do not sell, rent, or share your data with third parties for marketing purposes.
- We do not use your audit data to train AI models.
- We do not use advertising cookies or third-party tracking pixels.
4. Cookies and Local Storage
The baxindex.com website uses strictly necessary cookies for session management (login state) only. No advertising cookies are used.
5. Third-Party Services
BAX uses the following third-party services:
- Stripe — payment processing. Stripe's privacy policy applies to payment data.
- Anthropic Claude API — AI analysis of LLM audit results. Queries sent to the Anthropic API are subject to Anthropic's privacy policy.
- Resend — transactional email delivery (magic links, receipts).
- Cloudflare — website hosting and CDN. Cloudflare may log IP addresses for security purposes.
6. Your Rights (GDPR)
If you are located in the European Economic Area, you have rights including: access to your personal data, correction of inaccurate data, deletion of your data, and the right to object to processing. To exercise these rights, email [email protected].
7. Data Retention
Account data (email, subscription status) is retained for as long as your account is active. If you close your account, your data is deleted within 30 days. Audit data stored within your BAX workspace is controlled by you and can be deleted on request.
8. Children's Privacy
BAX is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us immediately at [email protected].
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or by posting a notice on baxindex.com. Continued use of BAX after changes constitutes acceptance of the updated policy.
10. Contact
For privacy questions: [email protected]
For general enquiries: [email protected]