Change note: from 2026-10-21, the former Privacy Policy, Privacy Policy (Mainland China edition), and China Mainland Supplemental Disclosure are merged into this single Privacy Policy. For users outside Mainland China, the service operator is Praxis Global Limited (知行環球有限公司, Hong Kong); for users in Mainland China, the service operator and personal information handler is Nanjing Deep Practice Artificial Intelligence Technology Co., Ltd. (南京深度实践人工智能科技有限公司).
This Privacy Policy explains how we collect and use personal information (including personal data) when we operate Praxis AI Cloud, account services, model routing, agent runtime, document processing, registry, billing, support, and related developer services.
1. Operating entities and scope
For users outside Mainland China: the service operator is Praxis Global Limited (知行環球有限公司, Hong Kong). Nanjing Deep Practice Artificial Intelligence Technology Co., Ltd. may provide underlying technology, software development, IP licensing, deployment support, maintenance, and technical support.
For users in Mainland China: the service operator and personal information handler is Nanjing Deep Practice Artificial Intelligence Technology Co., Ltd. (南京深度实践人工智能科技有限公司).
"We" in this policy means the operating entity that provides the service to you under the rule above. Sections that name no region apply to both groups of users; sections marked "for users in Mainland China" or "for users outside Mainland China" apply only to that group. The supplemental disclosure for users in Mainland China is in Section 15.
2. Information we collect
We collect account information, contact details, authentication records, billing and transaction records, service configuration, API keys and metadata, model routing metadata, usage records, support communications, diagnostic logs, security events, and content that users submit to the service. User-submitted prompts, files, messages, tool inputs, API requests, generated outputs, and workspace materials are treated as user content.
We may also receive limited information from identity providers, payment processors, model providers, infrastructure providers, and other subprocessors when needed to operate the service.
3. How we use information
We use personal information and user content to provide the service, authenticate users, operate accounts and tenants, route model requests, process documents and tool executions, secure the platform, prevent abuse, meter usage, bill customers, provide support, debug reliability problems, comply with law, and improve service quality.
We do not treat user original content as platform-owned property. User original content remains the user's or customer's content; for users in Mainland China, your original content remains yours. We receive only the processing rights needed to provide, secure, bill, support, improve, and comply with the service. Platform-created operational logs, routing and performance metrics, safety signals, diagnostic records, aggregate analytics, and independently generated service-improvement outputs may be controlled by us.
4. AI and model-provider processing
Some features send prompts, files, messages, or derived context to model providers or tool providers selected by the platform, the customer, or the user's configuration. We use these providers to return model outputs, run agent workflows, process files, and deliver requested features.
Model training or fine-tuning use is not assumed by default. If a feature, plan, provider setting, or customer agreement allows training or fine-tuning on customer content, that use must be disclosed separately or controlled through an explicit product setting or agreement.
5. Legal bases and regional rights (users outside Mainland China)
For users outside Mainland China: depending on the user's location and the service context, we process data because it is necessary to perform a contract, because we have a legitimate operational or security interest, because we must comply with law, or because the user has given consent. Where consent is required, users may withdraw it as allowed by law.
Users in applicable jurisdictions may request access, correction, deletion, portability, restriction, objection, or information about processing. California residents may have rights to know, delete, correct, limit certain sensitive personal information uses, opt out of sale or sharing where applicable, and avoid discrimination for exercising privacy rights. We do not sell personal information in the ordinary meaning of selling customer data for money.
Handling principles and rights for users in Mainland China are in Section 15.
6. Sharing and subprocessors
We share information with subprocessors only when needed to operate the service, including hosting, security, payment, communications, analytics, support, model inference, and infrastructure providers. We require subprocessors to process information for specified purposes and protect it with appropriate safeguards. For users outside Mainland China, the current subprocessor list is provided through the Praxis Trust Center.
We may disclose information if required by law, to protect rights and safety, to prevent fraud or abuse, in connection with a corporate transaction, or with the user's instruction or consent.
7. International transfers (users outside Mainland China)
For users outside Mainland China: the service may be operated from multiple jurisdictions. Where data is transferred internationally, we use contractual, technical, organizational, or legal safeguards appropriate to the transfer and the customer relationship.
Data storage and cross-border processing for users in Mainland China are covered in Section 15.
8. Retention and deletion
We retain information for as long as needed to provide the service, meet security and legal obligations, resolve disputes, enforce agreements, maintain audit records, and support billing and tax requirements. We delete or de-identify information when it is no longer needed, unless retention is required by law or legitimate operational needs.
9. Security
We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. No online service can guarantee absolute security, and users remain responsible for protecting credentials, API keys, devices, and access permissions.
10. Cookies and similar technologies
We and our providers use cookies, local storage, and similar technologies for authentication, security, preferences, and analytics. Users can manage these through browser settings. Some are necessary for the service to function.
11. Children's privacy
The service is not directed to children. For users in Mainland China, we do not knowingly collect the personal information of children under the age of 14; for users outside Mainland China, we do not knowingly collect the personal information of children under the applicable minimum age (for example, 16). If we learn that we have collected such information, we delete it.
12. Automated decision-making
Where we use automated decision-making or AI that produces a material effect, we explain its purpose. To the extent permitted by law, users may request human review of, or object to, such decisions.
13. Changes to this Privacy Policy
We may update this Privacy Policy. For material changes, we will provide notice by reasonable means, and we will indicate the effective date at the top of the policy.
14. Security incident
If a security incident affecting a user's personal information occurs, we will notify affected users and regulators as required by law.
15. Supplemental disclosure for users in Mainland China
This section incorporates the former China Mainland Supplemental Disclosure. It applies only to users in Mainland China and supplements this Privacy Policy and the Terms of Service.
(1) Entity role. For Praxis AI Cloud and related services provided to users in Mainland China, Nanjing Deep Practice Artificial Intelligence Technology Co., Ltd. is the service operator and the personal information handler.
(2) Handling principles. We handle personal information under the principles of lawfulness, legitimacy, necessity, good faith, transparency, purpose limitation, and data minimization. We handle personal information to create and manage accounts, provide AI cloud and developer services, process files and model requests, protect platform security, prevent abuse, bill customers, provide support, and comply with legal obligations.
(3) Sensitive personal information. Where we handle sensitive personal information, we limit it to what is necessary for the relevant feature or compliance purpose and apply stricter protection; where required by law, we obtain your separate consent for such handling. Product interfaces or enterprise agreements may provide additional notices where separate consent or separate disclosure is required.
(4) Data storage and cross-border processing. Because the service uses global infrastructure and providers, to provide the service your personal information may be accessed, stored, or processed outside Mainland China, for example through overseas infrastructure, model providers, or technical affiliates. Cross-border processing may involve hosting providers, model providers, payment providers, support systems, and security systems. Where cross-border processing occurs, we take the notices, contractual safeguards, technical and organizational measures, and other lawful mechanisms required by applicable law; where the law requires it, we separately obtain your consent for the cross-border provision of your personal information.
(5) Your rights. To the extent required by applicable law, you may request to access, copy, correct, supplement, or delete your personal information, ask for an explanation of our handling rules, withdraw consent-based processing, or close your account. We may need to verify your identity and may, where the law allows, refuse or limit a request, for example for security, fraud prevention, legal compliance, or to protect the rights of others.
(6) Data ownership and user content. Your original content remains yours; the processing rights we receive over user content and the platform-created data we control are set out in Section 3.
16. Contact
Privacy questions and personal-information rights requests (including Mainland China personal-information rights requests) may be sent to contact@deepractice.ai. Legal notices may be sent to contact@deepractice.ai.