Privacy Policy

1. Introduction

Oxyn ("we," "us," or "our") operates an AI agent marketplace platform that connects businesses ("Clients") with certified AI automation providers ("Operators"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our website, platform, and services (collectively, the "Services").

By accessing or using our Services, you agree to this Privacy Policy. If you do not agree, please do not use our Services.

2. Information We Collect

2.1 Account Information

When you create an account or apply as an Operator, we collect:

• Full name and contact information (email address, phone number)
• Business name, website, and industry sector
• Professional credentials and experience (for Operator applications)
• Account credentials (encrypted passwords, authentication tokens)

2.2 Assessment and Intake Data

When Clients complete an intake assessment, we collect:

• Business workflow descriptions and automation goals
• Current tools, systems, and process information
• Preferred automation scope and budget considerations
• Industry-specific requirements and compliance needs

2.3 AI Agent Data

When AI agents are deployed and operated through our platform, we collect:

• Agent configuration parameters and deployment settings
• Execution telemetry: event counts, duration metrics, error rates, and token usage
• Heartbeat and uptime monitoring data
• Agent version history and update records

Important:Oxyn does not access, store, or process the content of data that AI agents handle on behalf of Clients. Agent payloads, client customer data, and business-specific information processed by agents remain between the Client and their Operator. Our telemetry captures operational metadata only (e.g., "an execution occurred and took 500ms"), not the substance of what was processed.

2.4 Communications Data

We store messages exchanged through our in-platform messaging system between Clients, Operators, and administrators, including message content, timestamps, and read receipts.

2.5 Usage and Technical Data

We automatically collect:

• Browser type, operating system, and device information
• IP address and approximate geographic location
• Pages visited, features used, and interaction patterns
• Cookies and similar tracking technologies (see Section 7)

3. How We Use Your Information

We use collected information to:

• Provide Services: Create and manage accounts, match Clients with Operators, deploy and monitor AI agents, and facilitate communications.
• Improve the Platform: Analyze usage patterns, diagnose technical issues, optimize performance, and develop new features.
• Ensure Security: Detect and prevent fraud, unauthorized access, and other malicious activity. Monitor platform integrity and enforce our Terms of Service.
• Communicate: Send transactional notifications (agent status updates, task assignments, message alerts), service announcements, and, with your consent, marketing communications.
• Billing and Payments: Process transactions, calculate commissions, and maintain financial records.
• Legal Compliance: Comply with applicable laws, regulations, legal processes, or governmental requests.

4. Information Sharing and Disclosure

4.1 Between Platform Participants

When a Client is matched with an Operator, we share relevant business information (business name, contact name, sector, assessment responses) with the assigned Operator to enable service delivery. Operators' brand information is visible to their Clients through the portal.

4.2 Service Providers

We share information with third-party service providers that help us operate the platform, including:

• Cloud infrastructure providers (hosting, database, and storage)
• Authentication and identity services
• Payment processors
• Analytics and monitoring tools

These providers are contractually obligated to use your information only to provide services to us and are bound by confidentiality obligations.

4.3 Legal Requirements

We may disclose information when required by law, subpoena, court order, or other legal process, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

4.5 No Sale of Personal Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

5. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Row-level security policies that ensure users can only access data they are authorized to see
• Secure authentication with hashed passwords and session management
• Regular security assessments and monitoring
• Access controls limiting employee access to personal information on a need-to-know basis

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to promptly notifying affected users in the event of a data breach.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide Services. After account termination, we retain information for a reasonable period to comply with legal obligations, resolve disputes, and enforce agreements. Telemetry data may be retained in anonymized or aggregated form for analytical purposes.

You may request deletion of your account and associated data by contacting us at the address below. Certain information may be retained as required by law.

7. Cookies and Tracking

We use cookies and similar technologies to:

• Essential cookies: Maintain your authenticated session and remember your preferences.
• Analytics cookies: Understand how users interact with our platform to improve the experience.

We do not use advertising cookies or third-party tracking pixels. You can control cookie preferences through your browser settings, though disabling essential cookies may impact platform functionality.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing of your information for certain purposes.
• Withdrawal of Consent: Where processing is based on consent, withdraw that consent at any time.

To exercise these rights, contact us at oxynhq@gmail.com. We will respond within 30 days.

9. International Data Transfers

Our Services are hosted in the United States. If you access our Services from outside the United States, your information may be transferred to and processed in the United States or other jurisdictions where our service providers operate. We take appropriate safeguards to ensure your information receives adequate protection in accordance with this Privacy Policy.

10. Children's Privacy

Our Services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the effective date. Continued use of our Services after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: