Privacy Policy
This policy explains what personal information XyneX collects when you visit https://xynex.sekai.center, subscribe to the One-Person AI Company Pack (the "Pack"), or email us; how we use, store and share it; and the rights you have. It works together with our Terms of Service at https://xynex.sekai.center/terms.
In short: our website has no accounts, cookies, analytics or trackers. We receive your order details from our payment processor, Waffo Pancake. We never see your card number, and we do not sell your personal information.
1. Who is responsible for your data
The data controller for the Service is:
- Name: Chenghan Ge, an individual (sole proprietor) doing business as XyneX, based in New York, USA
- Privacy email: byouka2024@gmail.com
- Mailing address: available on request: email byouka2024@gmail.com
- Data Protection Officer: not applicable
Our merchant of record, Waffo Pancake, runs the checkout and handles payment, tax and invoice records under its own privacy policy (see https://www.waffo.ai).
2. Information we collect
2.1 From Waffo Pancake when you subscribe
For each order, Waffo Pancake sends us the details we need to deliver the Pack and support you:
- your name and email address;
- your billing country and billing address, as you entered them at checkout;
- your order ID and subscription ID; and
- the product, amount, currency, payment and subscription status, and related dates (for example payment, renewal and cancellation dates).
We do not receive your card number or other full payment card details. Card data is processed by Waffo Pancake (see Section 5).
2.2 Information you send us
- Emails you send us, and anything you choose to include in them, such as support questions or refund and cancellation requests.
2.3 Information collected automatically
- Website request logs: when you load a page, our hosting provider Cloudflare (Cloudflare Pages) processes standard request logs, such as your IP address and browser user agent, to deliver the site and prevent abuse.
- Payment event log: when Waffo Pancake tells our site about a payment event (for example a new order, a renewal or a cancellation), our site receives it through a webhook and stores it in Cloudflare for 30 days, then deletes it automatically. These events contain order details like those in Section 2.1.
2.4 What we do not collect
- No accounts or passwords on our website.
- No cookies, analytics, advertising trackers, web fonts or third-party scripts on our website.
- No card numbers.
- Nothing you write in the templates or put into your AI tools. The Pack is a set of files you use in your own workspace with your own AI tools; we do not see that work.
3. How we use your information
| Purpose | Information used | Legal basis |
|---|---|---|
| Deliver the Pack: email your download link and new versions | Name, email, order and subscription details | Performance of our contract with you |
| Manage your subscription, cancellations and refunds | Order and subscription details, your emails | Performance of our contract with you |
| Answer your questions and requests | Your emails, order details | Contract; our legitimate interest in helping you |
| Send service emails (download links, new versions, receipts, cancellation confirmations, notice of important changes to our terms or this policy) | Email, order details | Contract; legitimate interests |
| Keep an accurate record of payment events so deliveries and cancellations happen correctly | Payment event log | Contract; legitimate interests |
| Deliver our website and prevent abuse | Website request logs | Our legitimate interest in running a reliable website |
| Meet legal obligations, such as answering lawful requests from authorities | Only what the obligation requires | Legal obligation |
| Marketing | We do not send marketing at present. If we start, only to people who opt in (see Section 9). | Your consent |
We do not make automated decisions about you, we do not build profiles of you, and we do not use your information to train AI models.
4. Cookies and tracking
Our website does not set any cookies and does not use analytics, advertising or tracking tools, web fonts or third-party scripts. Everything on the site is served from our own host, so there is nothing to accept or turn off.
| Type | Used on our website |
|---|---|
| Strictly necessary cookies | None. We have no logins or sessions. |
| Functional cookies | None |
| Analytics | None |
| Marketing or advertising | None |
The checkout and customer portal pages are run by Waffo Pancake on its own website and follow its own cookie and privacy practices.
5. Sharing and disclosure
We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under laws such as the California Consumer Privacy Act (CCPA). We share it only as follows.
5.1 Service providers
| Provider | What they do for us | Information involved |
|---|---|---|
| Waffo Pancake (waffo.ai) | Merchant of record and PCI-DSS payment processor: checkout, payments, tax, invoices, receipts and the customer portal. Card data is processed by Waffo Pancake and never stored by us. | Order, billing and payment details; your email for portal sign-in |
| Cloudflare (privacy policy) | Hosts our website (Cloudflare Pages), processes request logs, and stores our payment event log for 30 days | IP address and user agent; payment event data |
| Google, Gmail (privacy policy) | Our email service: sending download links and service emails, and receiving your messages | Your name, email address and the content of our emails |
Each provider handles this information under its own data processing terms and privacy policy.
5.2 Legal requirements
We disclose information when the law, a court order or a lawful request from an authority requires it.
5.3 Business transfer
If the XyneX business is sold or transferred, we will tell you in advance, and your information will stay protected under this policy.
5.4 With your consent
For any other purpose, we share information only with your explicit prior consent.
6. How we store and protect your data
We keep personal information in the services listed in Section 5 (Waffo Pancake, Cloudflare and Google), and we keep as little as we can:
- Our website is served over HTTPS, so data is encrypted in transit.
- We have no user accounts or passwords to look after, and no card data on our systems.
- Access to order records and our support inbox is limited to the seller, Chenghan Ge.
- The payment event log is deleted automatically after 30 days.
If a personal data breach affects your information, we will notify the affected people, and the relevant authorities where the law requires it, within 72 hours of becoming aware of it.
7. How long we keep it
| Information | How long | Then |
|---|---|---|
| Order and subscription records needed for delivery and support | While your subscription is active, plus 24 months after it ends | Deleted |
| Support emails | 24 months after your last message | Deleted |
| Payment event log (webhook) | 30 days | Deleted automatically |
| Website request logs | Processed by Cloudflare under its own retention practices; we do not keep separate copies | Deleted by Cloudflare |
| Tax and invoice records | Kept by Waffo Pancake as merchant of record, under its own policy (waffo.ai) | Handled by Waffo Pancake |
If you ask us to delete your information sooner, we will, unless we need to keep part of it to meet a legal obligation or to resolve an open matter such as a refund or a payment dispute.
8. Your rights
Wherever you live, you can use the rights below. To make a request, email byouka2024@gmail.com, ideally from your purchase email so we can confirm it is you. We may ask for a little more information to confirm your identity. We respond within 30 calendar days, and requests are free of charge.
| Right | What it means |
|---|---|
| To be informed | Know what data we collect and how we use it (this policy) |
| Access | Get a copy of the personal information we hold about you |
| Correction | Have inaccurate or incomplete information corrected |
| Deletion | Have your information deleted, subject to Section 7 |
| Restriction | Ask us to pause using your information in certain cases |
| Portability | Receive your information in a common machine-readable format |
| Objection | Object to our use of your information based on legitimate interests, or for marketing |
| Withdraw consent | Withdraw consent at any time where we rely on it, without affecting earlier use |
| Complain | Lodge a complaint with your local data protection authority |
For payment and tax records that Waffo Pancake holds as merchant of record, you can also contact Waffo Pancake directly; we will help pass your request on.
8.1 California and other US state privacy rights
If you live in California, or in another US state with a similar law, you have the right to know what personal information we collect, use and disclose; to have it deleted; to have it corrected; to opt out of its sale or sharing; and not to be treated differently for using these rights. We honor these requests for every customer, whether or not the law requires it in your case.
- Categories we collect: identifiers (name, email address, IP address); customer records (billing address); commercial information (order and subscription details); internet activity (website request logs).
- Sources: you (at checkout and in your emails), Waffo Pancake, and your browser when you visit our site.
- Purposes: as listed in Section 3.
- Disclosed for business purposes to: Waffo Pancake, Cloudflare and Google, as described in Section 5.
- Sale or sharing: we do not sell or share personal information, so there is nothing to opt out of.
- Sensitive personal information: we do not collect or use it.
- Authorized agents: someone you authorize in writing can make a request for you; we may confirm it with you directly.
9. Emails and marketing
We do not send marketing emails at present. We only send service emails: your download link, new versions of the Pack while you are subscribed, receipts, and cancellation confirmations. Order confirmations and receipts may come from Waffo Pancake. These emails are part of the service and are not marketing.
If we ever add marketing emails, we will send them only to people who opt in, and every message will include an unsubscribe link. Unsubscribing from marketing will not stop service emails.
10. International data transfers
We are based in the United States. Your information is processed in the United States and in other countries where Cloudflare, Google and Waffo Pancake operate. When information is transferred out of the EU, the UK or other regions with transfer rules, we rely on those providers' Standard Contractual Clauses and data processing terms as safeguards.
11. Children
The Service is intended only for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us information, please email us and we will delete it promptly.
12. Third-party sites and tools
Our site links to services we do not control, including the Waffo Pancake checkout and customer portal. You use the Pack with AI tools of your choice, such as Claude Code, Codex or Cursor; what you put into those tools is handled under their own terms and privacy policies, and we never see it. This policy covers only the information we collect and receive, so please review those services' policies too.
13. Changes to this policy
For material changes, we will email active subscribers at least 14 days before the change takes effect, and update the version and dates at the top of this page. Smaller changes, such as clearer wording, take effect when posted.
14. Contact us
- Privacy and support email: byouka2024@gmail.com
- Data controller: Chenghan Ge, doing business as XyneX, New York, USA
- Mailing address: available on request: email byouka2024@gmail.com
- Reply time: within 2 business days (Monday to Friday, US Eastern Time); full answers to rights requests within 30 calendar days
Last updated 30 October 2026 · Chenghan Ge, doing business as XyneX · https://xynex.sekai.center