Your privacy, in plain terms.

Who we are

Zoxron LLC is the data controller for this site - a technology company registered in Wyoming, USA. We decide how and why your personal data is handled here, and we keep that footprint small.

Zoxron LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA. Registered in Wyoming under filing ID 2026-002044041.

What we collect, and where it lives

Here is the whole picture. Most of it never leaves infrastructure we run ourselves - we self-host our Odoo suite on our own server.

If you create an account on our Zoxron MCP portal (zoxron.com/connect), we collect your email address and a password, which we store only as a secure hash - never in plain text. We use these to provide the Zoxron MCP service to you; the legal basis is performing our contract with you, or taking the steps you ask for before entering one. To confirm the address is really yours, sign-up uses a double opt-in: we email you a confirmation link built on a signed, time-limited token that is valid for 24 hours. The portal also issues a personal, scoped access token so your own AI agent can call the MCP on your behalf - treat it like a password and keep it secret. During sign-up you may optionally opt in to receive Zoxron MCP updates by email; that adds you to a separate mailing list you can leave at any time using the unsubscribe link in every message.

Google Analytics and all marketing run only if you opt in - see Cookies & consent below; a cookieless, anonymous view (Umami) runs without cookies. No advertising cookies unless you accept Marketing, and we never sell your data.

How we use it, and our legal bases

We use your data only for the purpose you gave it for: to deliver the newsletter, reply to your enquiries, run the live chat and events, and keep the site secure.

Our legal bases: your consent for the newsletter (withdraw it anytime by unsubscribing); your consent or our steps to respond when you register for an event; and our legitimate interest in replying to enquiries and protecting the site from abuse.

For Zoxron MCP accounts, the legal basis is the performance of our contract to provide the service (or taking steps at your request before we enter into it); the optional MCP-updates emails run on your consent, which you can withdraw at any time by unsubscribing.

Who it’s shared with

Essentially, our own infrastructure. Your data sits in our self-hosted Odoo on our own server. The main outside processor is Cloudflare, which fronts the site as our CDN and security layer. With your consent we also use Google Analytics (Google) for analytics and Apollo for business-visitor identification (marketing). We do not sell or rent personal data. These consent-based tools are described under Cookies & consent.

How long we keep it

We keep personal data only as long as we need it for the purpose it was collected for - or until you unsubscribe or ask us to delete it, whichever comes first.

If you hold a Zoxron MCP account, we keep your account data - your email and the hashed password - for as long as the account exists, plus a reasonable period afterwards, and then delete it. Unconfirmed sign-up links expire after 24 hours.

Your rights

You can ask us to access, correct, or delete your data, object to how we use it, or unsubscribe from the newsletter at any time. One email is enough and we’ll take it from there.

Where your data is handled

Our infrastructure is operated by us, and Cloudflare serves the site from its global network. If you need specifics about where a particular piece of data is stored, just ask and we’ll tell you.

Cookies & consent

When you first visit, a cookie banner lets you choose what runs. There are four categories: Necessary (always on - security, session, saving your choice, and cookieless anonymous stats via our self-hosted Umami), Functional (live chat, embedded content, saved preferences), Analytics (Google Analytics 4) and Marketing (business-visitor identification and advertising). Everything except Necessary stays off until you opt in - and before you choose, Google Consent Mode v2 keeps analytics and advertising storage denied, so no tags load.

Our self-hosted Umami runs on every page: it is cookieless, anonymous and aggregated, sets no identifiers and does not track you across other sites. With your Analytics consent we also load Google Analytics 4, which sets Google’s analytics cookies (_ga and _ga_*, up to about two years) to measure how the site is used; before you consent, Google Consent Mode v2 stops it from storing anything. With your Marketing consent we load Apollo, a business-visitor identification tool that helps us see which companies visit; if we later add advertising pixels (for example Google, LinkedIn, Meta, X or TikTok), they will load only with your Marketing consent too. Your choice is stored in a first-party cookie, zx_consent (about 180 days), shared across zoxron.com, academy.zoxron.com and our /connect portal, so you only decide once.

You can change or withdraw your consent at any time, and withdrawing is as easy as giving it: use the “Cookie settings” link in the footer of any page to reopen the banner and update or revoke your choice.

A few small functional items let the site remember your choices, with no tracking and no analytics. On the main site we keep your language and light/dark theme in your browser’s local storage (zoxlang and zoxtheme), and mirror the theme in a small first-party cookie (zx_theme) so the page renders in the right theme the moment it loads. On our Zoxron MCP portal (zoxron.com/connect) a first-party cookie, zx_lang, remembers your chosen language. None of these are used for analytics or advertising, and your consent choice itself lives in the zx_consent cookie described above.

Changes & contact

We may update this policy as the site evolves; the date at the top always reflects the latest version. Questions about your privacy? We’re one message away.