Privacy Policy

Last updated: September 2026

1. Identity of the Data Controller

The data controller for the purposes of the General Data Protection Regulation (GDPR) and applicable Spanish data protection law is:

Name: Jesús Arias Romero
NIF: 46605472C
Address: Cambrils, Tarragona, Spain
Email: contact@txoozix.com
Website: https://txoozix.com
Trading as: Txoozix (a KodaiDev product)

2. What Data We Collect

We collect the following categories of personal data:

Account and contact data

Full name and email address provided when you sign up or contact us
Company name (optional)
Password (stored as a bcrypt hash, never in plain text)

Keyword and query data

Keywords and queries you upload via CSV or enter manually in the dashboard
Domain names of your monitored properties

Usage data

Pages visited on txoozix.com, time spent, browser type, operating system, and IP address (used for security and analytics)
Actions taken within the Txoozix dashboard (features used, queries configured, reports generated)

Payment data

Payments are processed by Stripe, Inc. We do not store card numbers. Stripe provides us with anonymised transaction identifiers and billing information (plan type, amount, currency, invoice date).

Communication data

Content of emails you send to contact@txoozix.com or messages submitted via the contact form

3. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR Article 6:

Contract performance (Art. 6.1.b): To provide the Txoozix service as described in our Terms of Service, including account management, GEO Score calculation, reporting, and billing.
Legitimate interest (Art. 6.1.f): To improve and secure the service, prevent fraud, and send service-related communications.
Consent (Art. 6.1.a): For analytics and marketing cookies, where you have given explicit consent via our cookie banner.
Legal obligation (Art. 6.1.c): To comply with applicable tax, accounting, and regulatory requirements.

4. How We Use Your Data

To create and manage your Txoozix account
To calculate your GEO Score and generate visibility reports
To process payments via Stripe
To process your uploaded keywords and generate AI-optimised queries
To send transactional emails (account confirmations, invoices, password resets)
To provide customer support
To improve the service through anonymised usage analytics (with consent)
To detect and prevent fraud and abuse

5. Data Retention

Account data: Retained for the duration of your account plus 12 months after account closure, then deleted.
GEO Score history: Retained according to your plan (3, 12, or 24 months) and deleted after account closure.
Payment records: Retained for 7 years as required by Spanish tax law.
Contact form messages: Retained for 2 years from the date of receipt, then deleted.
Analytics data: Retained for 14 months in Google Analytics (if consent given), then automatically deleted.

6. Data Sharing and Third Parties

We do not sell your personal data. We share data only with the following trusted processors, under data processing agreements:

Stripe, Inc.: payment processing. Privacy Policy: stripe.com/privacy
Google LLC: Analytics (if consent given). Privacy Policy: policies.google.com/privacy
Hosting provider: EU-based servers. All data is stored within the European Economic Area.

We may disclose data if required by law, court order, or to protect the rights and safety of Txoozix users.

7. International Data Transfers

All personal data is stored on servers located within the European Union. When data is transferred to Stripe or Google (which operate internationally), such transfers are protected by Standard Contractual Clauses (SCCs) as approved by the European Commission under GDPR Chapter V.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

TLS/HTTPS encryption for all data in transit
Encryption of sensitive data at rest
Access controls limiting data access to authorised personnel only
Regular security reviews
Bcrypt hashing for all passwords

9. Your Rights Under GDPR

As a data subject, you have the following rights:

Right of access (Art. 15): You can request a copy of the personal data we hold about you.
Right to rectification (Art. 16): You can ask us to correct inaccurate or incomplete data.
Right to erasure (Art. 17): You can request deletion of your personal data, subject to legal retention obligations.
Right to restriction (Art. 18): You can ask us to restrict processing in certain circumstances.
Right to data portability (Art. 20): You can request your data in a structured, machine-readable format.
Right to object (Art. 21): You can object to processing based on legitimate interest.
Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time without affecting lawfulness of prior processing.

To exercise any of these rights, use our contact form. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish data protection authority: Agencia Española de Protección de Datos (AEPD) at www.aepd.es.

10. Cookies

We use cookies and similar technologies. For full details, see our Cookie Policy. You can manage your preferences at any time via the cookie settings link in the footer.

11. Children's Privacy

Txoozix is not directed at children under 16 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or by a prominent notice on the website at least 14 days before taking effect. The "Last updated" date at the top of this page reflects the most recent revision.

13. Contact

For any privacy-related questions or to exercise your rights, use our contact form.