Privacy Policy

PraxisAI is an assessment product: during a session, monitoring is the point. We collect detailed telemetry about how you work with an AI agent, we use it to produce a report for you and for the organization that invited you, and we are explicit below about exactly what that includes. Outside of sessions, we collect the minimum needed to run accounts and billing. We do not sell personal data.

Account data.

Name, email address, and a password hash (or your Google account identifiers if you sign in with Google). Role information such as candidate or recruiter.

Assessment session data (recorded with your consent when you start a session).

• Every prompt you send to the AI agent and every response it returns, including tool calls;
• code you write, edit, or accept, and the final patch you submit;
• test commands you run and their results;
• token usage, estimated cost, and model identifiers;
• timing of all of the above, plus window focus, visibility, and paste events (size and time, not clipboard contents beyond what you paste into the session);
• the graded outcome against hidden test suites and the derived scores.

Waitlist data.

If you request access we store the email address you submit plus anything else you choose to tell us (name, company, role, how many engineers you hire, which AI tools you use today, how you heard about us, and any notes), along with the referring page, campaign parameters in the URL, your browser user-agent and language. We use it only to prioritise and send invites, and you can ask us to delete it at any time.

Operational data.

Logs necessary to run and secure the Service, such as IP addresses and error traces.

• To operate your sessions and produce your assessment report;
• to share that report with the organization that invited you (this is the purpose of an invited assessment; practice reports are yours alone);
• to detect integrity violations, with evidence reviewed by humans;
• to compute anonymized, aggregated statistics such as scoring norms and percentiles;
• to run accounts, billing, and support.

We do not use your session content to advertise to you, and we do not sell personal data.

Prompts you send during a session are forwarded through our gateway to third-party model providers (for example OpenRouter and the model vendors behind it) to generate the agent's responses. These providers receive the conversation content needed to respond and are bound by their own terms; we configure paid API usage, which under the providers' standard terms is not used to train their models. Other subprocessors include our hosting and storage providers, and Google if you use Google sign-in.

Invited assessment reports, including the session replay and integrity flags, are shared with the inviting organization. We otherwise share personal data only with the subprocessors above, when required by law, or in a merger or acquisition with notice.

Account data is kept while your account is active. Assessment session data and reports are retained for 24 months by default, or until the inviting organization deletes them, or until you exercise deletion rights where they apply. Aggregated, anonymized statistics may be retained indefinitely.

Depending on your jurisdiction (including under GDPR and CCPA), you may have the right to access, correct, export, restrict, or delete your personal data, and to object to certain processing. Note that for invited assessments the inviting organization is the controller of the assessment report; deletion requests for those reports are forwarded to them. Contact privacy@praxisai.dev to exercise rights; we respond within 30 days.

Sessions run in isolated, disposable containers. AI provider credentials are held server-side only and are never exposed to candidate environments, browsers, or reports. Passwords are stored as salted hashes. Access to assessment data is role-restricted, and administrative changes to provider credentials are audit-logged.

We use strictly necessary cookies for sign-in sessions and security. We do not use third-party advertising cookies. Your theme preference is stored locally in your browser.

The Service is not directed at children under 16. We will announce material changes to this policy on the Service before they take effect. Questions: privacy@praxisai.dev.