Privacy Policy

Last updated: 14 June 2026

The short version: Proxyma processes your documents entirely on your own infrastructure — your files, search queries, and conversations never leave your machine or server. When you buy a license, an automated system generates your key and emails it to you; we do not store your name, email address, or payment data. The only personal data we ever handle directly is support email you choose to send us.

1. Who We Are

Proxyma is developed and maintained by:

Le Sy Hau
Individual software developer
Vietnam
Email: [email protected]

We are an individual person, not a registered company. We are the data controller for the limited personal data described in this policy.

2. The Privacy-First Design of Proxyma

Proxyma is built to index and search your documents locally on your own infrastructure. All document processing, vector embedding, keyword indexing, and AI conversations happen on your own machine or server. None of this data is transmitted to or stored on any server we operate — this is a core design principle, not an optional setting.

Because of this design, our direct data handling footprint is minimal. The sections below describe the limited cases where personal data flows.

3. What Data We Collect and Why

3.1 Purchase and licensing

All purchases are processed by Lemon Squeezy (Lemon Squeezy LLC), who acts as the Merchant of Record. When your purchase completes, Lemon Squeezy triggers an automated function that generates your license key and delivers it to your email address. This function processes order data only in transit to create the key; no personal data is stored on any server we operate. Your name, email address, billing details, and payment information remain under Lemon Squeezy's control at all times. Their privacy practices are described at lemonsqueezy.com/privacy.

3.2 License validation

Proxyma validates your license key locally using a public cryptographic key bundled with the software. No personal data is transmitted to any server during this process.

For the Business tier using an on-premises license server: that server is operated by your organization and is subject to your organization's own privacy policy, not this one.

3.3 Optional telemetry (opt-in only)

Proxyma can optionally collect anonymized error reports and usage statistics to help improve the product. This feature is strictly opt-in and is disabled by default. You can enable or disable it at any time in Preferences → Privacy.

Telemetry data does not include: document content, file names or paths, search queries, or conversation content.

Legal basis under GDPR: consent (Article 6(1)(a)). You may withdraw consent at any time by disabling telemetry in Preferences.

3.4 This website (proxyma.ai)

The proxyma.ai website does not use analytics or advertising cookies. The only browser storage used is a single localStorage entry to remember your theme preference. No IP addresses or browsing data are logged by us beyond what Cloudflare retains as the CDN and DNS provider for this website.

Cloudflare acts as a data processor for the website. Their privacy practices are described at cloudflare.com/privacypolicy.

3.5 Support and email contact

If you contact us at [email protected], your email address and message content are processed to respond to your inquiry and are not shared with third parties.

Legal basis under GDPR: legitimate interest (Article 6(1)(f)).

4. Data Retention

Data	How long we keep it
Order data from Lemon Squeezy webhook (name, email, order reference)	Not retained — processed in transit only to generate the license key; not stored
Telemetry records (if you opted in)	12 months, then deleted or permanently anonymized
Support email correspondence	3 years after the last contact

5. Data Sharing

We do not sell or rent your personal data to anyone. Data flows only through the following parties:

Lemon Squeezy (Lemon Squeezy LLC) — Merchant of Record and sole data controller for all purchase and billing data. We do not retain a copy of this data.
Cloudflare, Inc. — CDN, DNS, and DDoS protection for the proxyma.ai website.

6. International Data Transfers

We are based in Vietnam. Because we do not store purchase data, the only personal data we directly handle is support email correspondence when you choose to write to us. Lemon Squeezy, as the sole data controller for all purchase data, handles international data transfers under their own applicable transfer mechanisms.

7. Your Rights

Rights under GDPR (EEA users)

Access — request a copy of the personal data we hold about you
Rectification — request correction of inaccurate data
Erasure — request deletion of your personal data
Restriction — request that we limit how we use your data
Portability — receive your data in a structured, machine-readable format
Objection — object to processing based on legitimate interest
Withdraw consent — for telemetry, disable it at any time in Preferences

We will respond to any rights request within 30 days.

8. Security

We implement appropriate measures to protect the personal data we directly handle (primarily support email correspondence). Because Proxyma processes your documents locally on your own device or server, the security of your document content depends entirely on your own infrastructure security.

9. Children

Proxyma is not directed at individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently received data relating to a child, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. For material changes, we will post a notice on proxyma.ai.

11. Contact

Questions about this Privacy Policy: [email protected]