Privacy Policy

This policy explains what information Prax collects when you use our website and services, how we use it, who we share it with, and the choices you have. It is written to be clear about a core principle of our product: your operational data stays in your environment.

1. Who we are

Prax is the platform operated by Web3Firewall, Inc. ("Prax," "we," "us," or "our"), a company registered in the United States. We build OraBrain, a private, on-premises AI platform for security, risk, and compliance decisioning, and Web3Firewall, its governance and monitoring layer. For any privacy question, contact us using the details in the Contact us section.

2. Scope of this policy

This policy applies to information we process when you:

• Visit our website and marketing pages.
• Contact us, request a briefing, demo, or resource, or sign up for communications.
• Authenticate to our applications, including through third-party sign-in such as Google.

It does not change the contractual terms that govern any OraBrain deployment in your environment, which are set out in your agreement with us.

3. Information we collect

Information you provide

• Contact details you submit through our forms, such as your name, work email, company, role, and any message you include.
• Account information if you register for or are provisioned access to our applications.

Information collected automatically

• Usage and device data such as IP address, browser type, pages viewed, and referring pages, collected through standard web logs and analytics to keep the site secure and understand how it is used.
• Cookies and similar technologies used for essential site functionality and, where applicable, analytics. You can control cookies through your browser settings.

4. Product data and OraBrain

This website policy therefore concerns the limited information described above, not the operational data processed within an OraBrain deployment, which you control.

5. How we use information

We use the information we collect to:

• Respond to your requests and provide the materials or briefings you ask for.
• Provide, secure, and improve our website and applications.
• Authenticate users and maintain the security of accounts.
• Communicate with you about our products, where you have asked us to or where permitted by law.
• Comply with legal obligations and enforce our agreements.

We do not sell your personal information.

6. Google user data and OAuth

If you choose to sign in using Google, we use Google OAuth to authenticate you. In that process we may receive basic profile information from your Google account, such as your name, email address, and profile identifier, solely to create and secure your session and account.

• We request only the minimum scopes needed to sign you in.
• We use Google user data only to provide and secure authentication and the features you access.
• We do not sell Google user data, and we do not use it for advertising.
• We do not share Google user data with third parties except as needed to provide the service, comply with law, or with your consent.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can review or revoke access at any time in your Google Account permissions.

7. How we share information

We share information only as needed to run our business:

• Service providers that host our website, process form submissions, send email, or provide analytics, under contracts that require them to protect your information. This includes our website form provider and infrastructure partners.
• Legal and safety disclosures where required by law, regulation, or valid legal process, or to protect our rights, users, and the public.
• Business transfers in connection with a merger, acquisition, or sale of assets, subject to this policy.

8. Data retention

We keep personal information only as long as needed for the purposes described in this policy, to comply with our legal obligations, resolve disputes, and enforce our agreements. When it is no longer needed, we delete or de-identify it.

9. Security

We use administrative, technical, and physical safeguards designed to protect information, including access controls, encryption in transit, and logging. Our platform is built around recognized security frameworks. No method of transmission or storage is completely secure, but we work to protect your information and to limit what we collect in the first place.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, contact us using the details below. We will respond as required by applicable law, and you may have the right to lodge a complaint with your local data protection authority.

11. International transfers

We are based in the United States and may process information there and in other countries. Where required, we use appropriate safeguards for international transfers of personal information.

12. Children

Our website and services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children.

13. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above, and for material changes we will provide additional notice where appropriate.

14. Contact us

For any question about this policy or your personal information, contact us: