Privacy Policy

At Axiomixs ("we", "us", "our"), we architect and engineer modern digital systems, enterprise applications, and bespoke workflow automations for forward-thinking businesses. We consider data protection, digital privacy, and operational transparency to be foundational pillars of every system we design and maintain.

This Privacy Policy governs the collection, processing, storage, and transfer of personal information and corporate data obtained through axiomixs.com, our client onboarding portals, service order intake workflows, and related digital communications. By accessing our website, submitting an inquiry, or engaging our engineering services, you acknowledge that you have read, understood, and agree to the practices outlined herein.

Axiomixs operates as a Data Controller with respect to personal information collected directly from website visitors, prospective clients, and job applicants. Where we process client system data during bespoke software implementation or system integration, Axiomixs acts strictly as a Data Processor pursuant to executed Master Service Agreements and Data Processing Agreements (DPAs).

We adhere strictly to the principle of data minimization, collecting only information necessary to deliver high-quality digital services, coordinate technical discovery consultations, fulfill contractual milestones, and safeguard platform security.

• Identification & Contact Information: Full name, business email address, company or organization name, role or job title, telephone number, and physical billing address submitted via inquiry forms or service order checkouts.
• Technical Project Specifications: Architectural requirements, business process workflows, current technology stack descriptions, repository access requests, and scope documents provided during discovery inquiries or consultations.
• Automated Technical & Device Telemetry: IP address, browser type and version, operating system, device characteristics, language preferences, page request timestamps, and anonymized diagnostic logs utilized to maintain website stability and security.
• Direct Communications: Transcripts of correspondence, email inquiries, consultation notes, and support inquiries exchanged with our engineering and operations team.

In compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and applicable international data governance statutes, Axiomixs processes your personal data strictly on established lawful bases:

• Contractual Performance: Processing necessary to initiate discovery meetings, confirm quotations, execute project Statements of Work (SOW), develop bespoke deliverables, and issue invoices.
• Legitimate Business Interests: Processing required to protect platform security, prevent distributed denial-of-service (DDoS) attacks, detect fraud, monitor system uptime, and improve our engineering capabilities.
• Legal & Regulatory Compliance: Processing required to fulfill statutory tax recordkeeping, financial audit standards, corporate reporting, and lawful requests from governmental or judicial bodies.
• Explicit Consent: Where you voluntarily opt in to receive technical insights, product announcements, or optional communications. Consent may be revoked at any time.

The information we collect is utilized exclusively for genuine operational, engineering, and administrative purposes, including:

• Service Delivery & System Architecture: Reviewing technical briefs, architecting custom web applications, configuring CRM pipelines, building automation workflows, and executing client milestones.
• Discovery & Commercial Coordination: Scheduling introductory discovery sessions, discussing technical feasibility, presenting scope agreements, and coordinating project deliverables.
• Infrastructure Reliability & Security: Analyzing server logs to prevent unauthorized access, mitigate brute-force attempts, debug technical runtime exceptions, and safeguard client-facing services.
• Administrative Communications: Sending critical project updates, invoice documentation, operational notifications, and security advisories.

Axiomixs maintains a strict and unwavering commitment: we do not sell, rent, monetize, or trade your personal information or project briefs with third-party marketers, advertisers, or data brokers under any circumstances.

We engage only reputable, enterprise-grade cloud providers and technical infrastructure partners to support our operations. All subprocessors are vetted for compliance with global security and privacy standards (including SOC 2 and ISO 27001) and operate under strict Data Processing Agreements:

• Cloud Infrastructure & Edge Hosting: Vercel Inc. and Amazon Web Services (AWS) for secure application hosting, edge delivery, and routing.
• Encrypted Database Services: MongoDB Atlas for secure, encrypted-at-rest database storage and operational data management.
• Transactional Communications: Resend and Brevo for reliable dispatch of order notifications, intake confirmations, and administrative communications.
• Statutory Disclosures: We may disclose personal information solely if required by applicable law, enforceable court subpoena, or governmental regulation to protect the legal rights and safety of Axiomixs and our clients.

Axiomixs operates as a distributed technology engineering hub serving clients internationally. To facilitate seamless development and global delivery, your information may be transferred to, stored, and processed in jurisdictions outside of your country of residence, including the United States and the European Economic Area (EEA).

When international data transfers occur, we implement robust cross-border safeguards recognized under international law, including standard contractual clauses (SCCs) approved by the European Commission, mandatory TLS 1.3 encryption in transit, and AES-256 encryption at rest.

Personal data is retained only for the duration required to achieve the explicit business purposes for which it was gathered, or as mandated by statutory financial and commercial obligations:

• Contracted Client Projects: Project briefs, correspondence, and technical specifications are retained for the duration of the engagement plus statutory audit periods (typically 5 to 7 years) to maintain warranty and financial records.
• Uncommitted Inquiries: Contact submissions and exploratory project briefs that do not progress to an active contract are securely archived and expunged after 24 months.
• Technical Access & System Logs: Server request logs and security telemetry are automatically rotated and permanently purged within 90 days.

We enforce multi-layered defense-in-depth security architectures to shield personal data against accidental loss, unauthorized access, destruction, or disclosure. Key technical measures include:

• Cryptographic Protection: All data in transit is encrypted using modern TLS 1.3 protocols with HSTS enforcement; data at rest across databases and persistent storage is encrypted using industry-standard AES-256.
• Least-Privilege Access Controls: Access to production systems, client briefs, and database records is strictly restricted to authorized engineering personnel requiring access to perform their designated duties.
• Multi-Factor Authentication (MFA): Mandatory hardware-token or authenticator-app MFA enforced across all internal administrative, cloud, and deployment environments.
• Vulnerability Monitoring & Patching: Continuous automated dependency audits, periodic code reviews, and rapid deployment of security patches across all services.

Depending on your jurisdiction (including the European Union, United Kingdom, Canada, and California), you possess specific enforceable statutory rights regarding your personal information:

• Right of Access & Transparency: You have the right to request a complete copy of the personal information Axiomixs holds concerning you, including purposes of processing and recipient categories.
• Right to Rectification: You have the right to require immediate correction of inaccurate or incomplete personal records.
• Right to Erasure ("Right to Be Forgotten"): You may request permanent deletion of your personal data when it is no longer necessary for the original purposes or when processing lacks a lawful basis.
• Right to Restrict or Object to Processing: You have the right to restrict our processing of your data under specific statutory conditions or object to processing based on legitimate business interests.
• Right to Data Portability: You may request personal information provided to us in a structured, commonly used, machine-readable format for transfer to another service provider.
• Non-Discrimination Guarantee: Axiomixs will never deny services, charge divergent prices, or deliver disparate quality of service should you choose to exercise any statutory privacy rights.

The services and web properties of Axiomixs are directed exclusively to business professionals, enterprise organizations, and adult individuals aged 18 and older. We do not knowingly solicit or collect personal data from minors under the age of 16. If we become aware that personal information of a minor has been inadvertently gathered, we will take immediate measures to delete such data from our records.

If you wish to exercise your data protection rights, submit a Data Subject Access Request (DSAR), or have questions regarding this Privacy Policy and our security practices, our dedicated privacy team is available to assist you.

We review and respond to all formal privacy and data requests within thirty (30) calendar days of receipt. Please direct your correspondence to our dual corporate contact channels: