Privacy Policy
Last updated: May 19, 2026
Plain summary
Here's the short version. When you join the Baxie waitlist, we collect your email, company name, role, and California county, plus your IP address, browser user-agent, and the time you signed up. We use it for one thing: to email you about Baxie's launch and beta availability. We don't sell it, we don't share it with other companies for their marketing, and we don't run trackers on the site. You can ask us to show you the record we have, correct it, or delete it any time. The long version below covers the legal details California requires us to spell out.
1. Who this policy covers
This policy covers personal information collected through the Baxie marketing website at baxiehq.com when you join the waitlist or otherwise interact with the site.
It does not cover the Baxie app at app.baxiehq.com. The app has its own privacy policy and terms, which you will see if you become a paying customer or beta user.
The business responsible for the information described here is:
[Edwin to fill: legal entity name]
[Edwin to fill: registered business address]
Privacy contact: privacy@baxiehq.com (or [Edwin to fill: confirmed privacy inbox])
In this policy, "Baxie," "we," "us," and "our" refer to that entity. "You" means the person whose information we collect.
2. What information we collect
When you join the waitlist, you give us:
- Email address
- Company name
- Role (selected from a dropdown of GC office and field roles)
- California county
When you load the site or submit the form, our servers and our hosting provider automatically collect:
- IP address
- Browser user-agent string
- Timestamp of the page load or form submission
- Referring URL, if your browser sends one
We do not collect:
- Sensitive personal information as defined in California Civil Code § 1798.140(ae), such as Social Security numbers, driver's license numbers, government ID numbers, financial account numbers, precise geolocation, race, religion, union membership, contents of your mail or messages, genetic data, biometric data used for identification, health information, or information about your sex life or sexual orientation.
- Information from anyone we know to be under 18. Baxie is a business product for adult employees and owners of construction businesses.
We do not knowingly collect personal information from children under 16, and we do not sell or share the personal information of consumers under 16.
We do not use cookies for tracking or advertising. Next.js, the framework that runs the site, may set short-lived functional cookies for session and routing. We do not run Google Analytics, Meta Pixel, LinkedIn Insight Tag, or any third-party tracking or advertising pixel.
3. How we use your information
We use the information described above for these business purposes only:
- To email you about Baxie's launch, beta availability, and major product updates relevant to GCs on the waitlist.
- To confirm your waitlist signup by sending a confirmation email.
- To detect and prevent spam, abuse, and security incidents on the site.
- To debug the site and improve how the waitlist form works.
- To comply with legal obligations and respond to lawful requests.
That is the full list. We do not use waitlist information for cross-context behavioral advertising. We do not use it to train AI models. We do not profile you for any decision that produces a legal or similarly significant effect.
4. What we do not do
- We do not sell your personal information.
- We do not share your personal information with third parties for their own marketing or advertising.
- We do not use cross-site tracking pixels, advertising cookies, or session-replay tools on the marketing site.
- We do not use automated decision-making technology to make decisions about you that produce legal or similarly significant effects.
5. Third-party service providers
We use a small number of vendors to operate the waitlist. Each one acts as a "service provider" under California law, which means they may only use your information for the purposes we tell them to and may not sell, share, or use it for their own purposes.
| Vendor | What we use it for | Privacy policy |
|---|---|---|
| Supabase, Inc. | Stores waitlist records in a Postgres database hosted in the United States. | https://supabase.com/privacy |
| Resend (Resend.com, Inc.) | Sends the waitlist confirmation email and any future launch emails. | https://resend.com/legal/privacy-policy |
| Vercel, Inc. (if used) | Hosts the Baxie marketing site. Receives IP, user-agent, and request metadata as part of normal web hosting. [Edwin to confirm hosting provider] | https://vercel.com/legal/privacy-policy |
If we add or change vendors, we will update this list before they start processing your information.
6. Data retention
We keep your waitlist record until one of the following happens:
- You ask us to delete it. We will delete it within the timelines described in section 8.
- You unsubscribe from waitlist emails. We will keep a suppressed record (email address only) so we do not accidentally email you again, and we will delete the rest of your record within 90 days.
- The Baxie waitlist closes. We will keep your record for up to 24 months after waitlist close, so we can contact you about launch, and then delete it.
[Edwin: 24 months is an assumption, confirm before launch]
Server logs that contain IP address, user-agent, and request timestamps are kept for up to 90 days for security and debugging, then deleted or anonymized. [Edwin: 90 days is an assumption, confirm with hosting provider's actual log retention]
We follow the CCPA principle of data minimization: we will not keep your information longer than is reasonably necessary for the purposes described in section 3.
7. Your California privacy rights
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the following rights. The CCPA's B2B carve-out expired on January 1, 2023, so these rights apply even though you joined the waitlist in a business capacity.
Right to know. You can ask us to confirm whether we hold personal information about you and to provide the categories of information we collect, the sources, the business purposes, the categories of third parties we disclose it to, and the specific pieces of information we hold about you.
Right to delete. You can ask us to delete the personal information we collected from you. We will also direct our service providers to delete it.
Right to correct. You can ask us to correct inaccurate personal information we hold about you.
Right to opt out of sale or sharing. You can direct us to stop selling or sharing your personal information. We do not sell or share personal information, so there is nothing to opt out of, but the right exists if our practices ever change.
Right to limit use of sensitive personal information. You can direct us to limit our use of sensitive personal information to certain permitted purposes. We do not collect sensitive personal information through the waitlist, so there is nothing to limit, but the right exists if our practices ever change.
Right to opt out of automated decision-making and profiling. You can opt out of automated decision-making technology used to make decisions about you that produce legal or similarly significant effects. We do not use automated decision-making technology of that kind for waitlist signups.
Right to non-discrimination. We will not deny you services, charge you a different price, or provide a different level of quality because you exercised any of these rights.
You can have an authorized agent submit any of these requests on your behalf. We will ask the agent for written authorization signed by you and may ask you to verify your identity directly.
8. How to exercise your rights
Send any of the requests above to privacy@baxiehq.com with the subject line that matches what you want (for example, "Right to know" or "Delete my data"), or use the form at baxiehq.com/privacy/delete.
Include:
- The email address you used to join the waitlist.
- A short description of what you want us to do.
Identity verification. Before we act on a request to know, delete, or correct, we will verify that the request actually came from you. For a low-sensitivity request like the waitlist, we will usually match the email address on the request to the email address on file and may send a confirmation link to that address. If we cannot verify your identity, we may have to deny the request.
Response time. We will confirm we got your request within 10 business days. We will respond substantively within 45 calendar days. If we need more time, we will tell you within the first 45 days and may take up to another 45 days, for a total of 90 days.
No fee. We do not charge a fee to handle a request, except in the rare case that a request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse the request and tell you why.
Appeal. If we deny part or all of your request and you think we got it wrong, reply to our response and we will have a different person at Baxie review the decision.
9. Data security
We take reasonable measures to protect your information:
- Waitlist data is stored in Supabase, encrypted at rest and in transit.
- Database access is restricted to a server-side service role. The marketing site never exposes the database to the browser.
- Row-Level Security policies on the waitlist table enforce that only the server can read or write records.
- Site traffic is served over HTTPS.
- Hosting and storage are in the United States.
No system is perfectly secure. If we ever experience a data breach involving your information, we will notify you and the California Attorney General as required by California Civil Code § 1798.82.
10. Children's privacy
Baxie is a business product. We do not direct the marketing site to anyone under 18 and we do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted information to us, email privacy@baxiehq.com and we will delete it.
11. Changes to this policy
If we make material changes to this policy, we will update the "Last updated" date at the top and email people on the waitlist before the changes take effect. Non-material changes (clarifications, formatting, typos) will just appear in the updated version.
12. Contact
For any privacy question or request:
Email: privacy@baxiehq.com Mail: [Edwin to fill: legal entity name and registered business address]
You can also reach the California Privacy Protection Agency at cppa.ca.gov or the California Attorney General at oag.ca.gov/privacy/ccpa if you believe we are not complying with California law.