Our role
For personal data processed on behalf of customer workspaces, Woxox generally acts as a processor and customers act as controllers. For marketing-site leads and account admin data we collect directly, Woxox acts as a controller.
Lawful bases
We process data to perform contracts, pursue legitimate interests (security, product improvement), comply with law, and—where required—on the basis of consent.
Your rights
Where GDPR applies, individuals may have rights to:
- Access and receive a copy of personal data
- Rectification and erasure
- Restriction or objection to certain processing
- Data portability
- Withdraw consent where processing is consent-based
International transfers
If data is transferred outside the EEA/UK, we use appropriate safeguards such as standard contractual clauses where required.
Subprocessors & security
We use vetted infrastructure and service providers under written agreements. Security controls include encryption in transit, access controls, and audit logging in the product.
Requests
Email privacy@woxox.com or use Contact. Workspace admins can also manage end-user data within their tenant according to their policies.