Privacy Policy – Woowox
Last updated: 11 February 2026
1. Introduction
This Privacy Policy explains how Woowox collects, uses, and protects information when you use and related services. By using Woowox, you agree to the practices described in this Privacy Policy. If you do not agree, you should not use the service.
2. Information we collect
We may collect the following categories of information:
- Account information: Email address, password hash, and related account metadata when you register or log in.
- Usage data: Logs about how you use Woowox, such as pages visited, features used, approximate timestamps, error reports, and basic technical information from your browser or client (for example, IP address, browser type, and device information).
- AI input and configuration data: Text prompts, tool selections, agent configurations, and other User Content you submit through Woowox that may be sent to AI models or MCP servers to generate Outputs.
- API keys and integration settings: If you choose to connect external services, we may store encrypted API keys or tokens and configuration data in our systems or in your browser storage, depending on the implementation.
We do not intentionally collect sensitive personal information (such as government IDs, health data, or payment card details) through Woowox, and you should not include such data in prompts or content you submit.
3. How we use information
We use the information we collect for the following purposes:
- Provide and operate Woowox: Authenticate you, maintain sessions, and deliver the core functionality of the site and tools.
- Process prompts and generate Outputs: Send your inputs and configuration data to AI models or external MCP servers to return results you requested.
- Security and abuse prevention: Protect accounts, detect suspicious activity, enforce rate limits, and defend against misuse or attacks.
- Improve and debug the service: Analyze aggregated or pseudonymized usage to understand performance, reliability, and user flows so we can improve Woowox.
- Legal compliance: Comply with applicable laws, respond to lawful requests, and enforce our Terms of Service.
We do not sell your personal data.
4. Cookies and local storage
Woowox may use cookies, session storage, or local storage to support login, remember preferences, and maintain session state.
These storage mechanisms may contain identifiers such as session tokens or flags indicating that you are logged in.
Where possible, we use security measures such as:
- Restricting cookie attributes (for example, Secure/HttpOnly) for server-side cookies.
- Avoiding storage of sensitive secrets directly in readable client‑side storage.
- Using short‑lived session identifiers and validation on the server side.
You can configure your browser to block or delete cookies and local storage, but this may affect the functionality of Woowox.
5. Sharing of information
We may share information in the following limited circumstances:
- Third‑party AI and tool providers: When you use AI agents or tools that rely on external APIs or MCP servers, your prompts, configuration data, and possibly account-related metadata may be sent to those services to fulfill your requests.
- Service providers: We may use infrastructure providers, hosting companies, logging or analytics tools, and other vendors that process data on our behalf under appropriate security and confidentiality obligations.
- Legal and safety: We may disclose information when we believe it is reasonably necessary to comply with applicable law, legal process, or governmental requests, or to protect the rights, property, or safety of Woowox, our users, or others.
We do not sell or rent your personal data to third parties for their own marketing purposes.
6. Data retention
We retain personal data only for as long as necessary to:
- Provide Woowox and the features you use.
- Maintain security logs and records consistent with our security and legal obligations.
- Comply with applicable laws and resolve disputes.
Prompt logs, configuration data, or Outputs may be stored for a limited period to support debugging, security monitoring, and service improvement, after which they may be deleted or anonymized.
You can request deletion of your account as described below, although some data may be retained as required by law or legitimate business needs (for example, security logs).
7. Data security
We use reasonable technical and organizational measures to protect personal data, including:
- Limiting access to production systems and user data to authorized personnel.
- Using secure communication (for example, HTTPS) to protect data in transit.
- Implementing session management, cookie flags, rate‑limiting, and other safeguards against common web attacks.
However, no system can be guaranteed completely secure, and you use Woowox at your own risk.
8. International data transfers
Depending on the location of our infrastructure and third‑party providers, your information may be processed in countries that may have different data protection laws than your own. We take steps to ensure that such transfers comply with applicable data protection laws, for example by using appropriate contractual safeguards where required.
9. Your rights
Your rights may depend on your jurisdiction, but they may include the right to:
- Access personal data we hold about you.
- Request correction of inaccurate personal data.
- Request deletion of certain personal data (“right to be forgotten”).
- Object to or restrict certain types of processing.
- Request a copy of your data in a portable format, where technically feasible.
To exercise your rights, you can contact us using the details below. We may ask you to verify your identity before responding to your request.
10. Children’s privacy
Woowox is not directed to children and is intended for use by adults who can form a binding contract in their jurisdiction.
We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us so we can take appropriate action.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
When we make changes, we will update the “Last updated” date at the top, and we may provide additional notice where required by law.
Your continued use of Woowox after changes take effect means you accept the updated Privacy Policy.
12. Contact
If you have questions or requests concerning privacy or this Policy, you can contact us at: