# Privacy Policy

How Axumind collects, processes, and protects information across agency workspaces, client portals, and checkout integrations.

## Information we collect

This Privacy Policy explains how Axumind collects, uses, and safeguards information when you access or use the Axumind agency operating platform.

We collect personal information such as your name, email address, billing address, and business information when you create an account, purchase a plan, or configure workspace settings.

We also collect technical usage data, browser details, IP addresses, log records, and feature engagement metrics to operate and optimize the system.

If you use Axumind to deliver services to your clients, you may store client names, contact details, messages, project briefs, and deliverable files within your workspace. You retain data ownership and responsibility for that client data.

### Categories of data collected

- Account credentials and workspace identity records
- Billing records and transaction status details
- IP address, device type, operating system, and log activity
- Client organization profiles and project files stored in your workspace

## How we use your information

We process your data to maintain, secure, and deliver Axumind workspace functionality, process billing, support customer accounts, and prevent unauthorized platform misuse.

We may use your contact details to deliver security notices, transactional receipts, product updates, and customer support responses.

Data is retained for as long as your workspace account remains active. Upon cancellation, limited records may be retained as required to satisfy accounting, fraud prevention, and regulatory obligations.

### Primary business purposes

- Delivering agency workspace and client portal capabilities
- Processing subscriptions, invoices, and service transactions
- Monitoring platform reliability, error rates, and security
- Fulfilling statutory legal and tax compliance mandates

## Payment security & processing

Axumind integrates with certified third-party payment gateways to handle subscriptions and checkout transactions.

Axumind does not store sensitive credit card numbers or banking secrets on our servers. All payment handling is governed by the security policies of the designated processor.

### Payment processing safeguards

- PCI-DSS compliant payment processing through verified gateways
- Encrypted tokenization of recurring billing mandates
- Support for both card rails and decentralized crypto checkouts

## Data sharing & third-party disclosure

We never sell, rent, or trade your personal information to data brokers or advertising third parties.

Information is shared strictly with core infrastructure sub-processors (e.g., cloud hosting, email delivery, transactional database services) required to operate Axumind.

We may disclose records if legally mandated by valid court orders, subpoenas, or statutory authorities.

### Authorized third-party categories

- Cloud hosting and database infrastructure providers
- Transactional email and customer notification systems
- Payment processing and fraud screening services
- Judicial authorities when compelled by binding law

## Security & data protection

We implement industry-standard administrative, physical, and technical controls to protect data against unauthorized access, loss, or alteration.

All client-server communications use HTTPS/TLS 1.3 encryption. Passwords and sensitive API credentials are stored using salted cryptographic hashing.

While we maintain strict protective measures, no internet transmission is 100% infallible, and we encourage users to enforce strong workspace passwords.

## Your privacy rights & choices

Depending on your jurisdiction (including GDPR in Europe and state consumer privacy laws in the United States), you have specific rights regarding your personal information.

You may request access to, correction of, or deletion of your personal account data at any time.

Axumind is not directed toward individuals under the age of 18, and we do not knowingly solicit personal data from minors.

### Recognized rights

- Right to access and export personal data records
- Right to rectify inaccurate or outdated workspace details
- Right to request account deletion and data erasure
- Right to restrict or object to discretionary processing

## Cookies & browser technologies

We use essential session cookies to maintain your login status, remember preferences, and safeguard CSRF form submissions.

You can configure browser settings to decline or clear cookies, though essential platform features (such as staying signed in) will be degraded.

## Affiliate program data

If you participate in our affiliate program or register via an affiliate link, attribution cookies correlate signups to reward referring partners.

Affiliate attribution records are strictly utilized for partner accounting and commission tracking.

## Updates to this policy

We may update this Privacy Policy periodically to reflect technological adjustments or legal compliance obligations.

When meaningful changes occur, we update the timestamp above and provide prominent notice within active workspaces.

## Contact & data inquiries

If you have questions regarding this Privacy Policy or wish to exercise your data subject rights, please contact our privacy compliance team via our Contact page.

## About Axumind

Axumind is client operations software for digital agencies, combining service catalogs, client portals, project delivery, communication, and billing.
