Privacy Policy

Last updated: March 2026

1. Who We Are

BAX is developed and operated by iSlayMetrics. If you have questions about this Privacy Policy, contact us at privacy@baxindex.com.

2. What BAX Collects

BAX is designed to collect as little data as possible. The extension runs primarily in your browser with no server-side data storage for most operations.

• Extension usage: BAX runs locally in your Chrome browser. Audit results, BAX scores, and LLM response data are stored in Chrome's local storage on your device and are not transmitted to BAX servers.
• API key: If you provide an Anthropic API key, it is stored locally using Chrome's secure storage API. It is never sent to BAX servers.
• Account data: If you purchase a paid plan, we collect your email address to create and manage your account and send you transactional emails (receipt, activation link, etc.).
• Payment data: Payments are processed by Stripe. BAX does not store credit card details. We receive a Stripe customer ID and subscription status from Stripe.

3. What BAX Does Not Collect

• We do not store the URLs or brand names you audit.
• We do not store LLM responses or AI-generated content from your audits.
• We do not sell, rent, or share your data with third parties for marketing purposes.
• We do not use your audit data to train AI models.
• We do not use advertising cookies or third-party tracking pixels.

4. Cookies and Local Storage

The BAX Chrome extension uses Chrome's local storage API to persist audit results between sessions. The baxindex.com website uses strictly necessary cookies for session management (login state) only. No advertising cookies are used.

5. Third-Party Services

BAX uses the following third-party services:

• Stripe — payment processing. Stripe's privacy policy applies to payment data.
• Anthropic Claude API — AI analysis of LLM audit results. Queries sent to the Anthropic API are subject to Anthropic's privacy policy.
• Resend — transactional email delivery (magic links, receipts).
• Cloudflare — website hosting and CDN. Cloudflare may log IP addresses for security purposes.

6. Your Rights (GDPR)

If you are located in the European Economic Area, you have rights including: access to your personal data, correction of inaccurate data, deletion of your data, and the right to object to processing. To exercise these rights, email privacy@baxindex.com.

7. Data Retention

Account data (email, subscription status) is retained for as long as your account is active. If you close your account, your data is deleted within 30 days. Audit data stored in your browser's local storage is controlled entirely by you — you can clear it at any time via Chrome's extension settings.

8. Children's Privacy

BAX is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us immediately at privacy@baxindex.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or by posting a notice on baxindex.com. Continued use of BAX after changes constitutes acceptance of the updated policy.

10. Contact

For privacy questions: privacy@baxindex.com
For general enquiries: hello@baxindex.com