Privacy Policy
Privacy and data protection for AxiCore Cloud.
1. Who we are
AxiCore Cloud is a business cloud service provided by Axihedron. For privacy questions or requests, contact contact@axihedron.com.
2. Our roles
Axihedron acts as controller for account, billing, security, support and service-administration data. For personal data entered by a customer into its workspace, the customer normally acts as controller and Axihedron acts as processor on the customer’s documented instructions.
3. Data we collect
We may process account identity details, business email, company information, role, language, authentication and security events, subscription and licence information, invoices and payment status, support messages, technical logs and limited payment-method information returned by Stripe. We do not need to store full card numbers.
4. Customer workspace data
Customers decide what information is entered into their workspace, why it is processed, who can access it and how long it should be retained. Customers remain responsible for ensuring that their collection and use of personal data is lawful and that required notices, permissions or legal bases are in place.
5. Why we use personal data
We use personal data to create and administer accounts, authenticate users, provide subscriptions and applications, process billing and renewals, provide support, protect the platform, investigate errors or abuse, comply with legal and accounting obligations, and establish or defend legal claims.
6. Legal bases
Where required by applicable law, processing may rely on performance of a contract, legitimate interests such as security and fraud prevention, compliance with a legal obligation, or consent where consent is specifically required.
7. Payments and Stripe
Card and recurring subscription payments may be processed by Stripe. Stripe receives payment information directly through its infrastructure. AxiCore may receive payment status, customer and subscription identifiers, card brand, last four digits and expiry information needed to administer the subscription.
8. Service providers
Axihedron may use service providers for hosting, email, payments, security, monitoring and support. Where they process personal data on our behalf, appropriate data-protection obligations are applied where required by law.
9. International transfers
AxiCore Cloud may rely on infrastructure or service providers located in more than one country. Where applicable law requires safeguards for international transfers, a legally recognised transfer mechanism or other permitted safeguard will be used.
10. Retention
Personal data is retained only for as long as reasonably necessary for account administration, contractual records, security, tax and accounting requirements, regulatory obligations and legal claims. Workspace data is retained according to the service lifecycle, customer instructions and applicable law. Backup copies may remain temporarily until overwritten through normal backup cycles.
11. Security
Axihedron uses technical and organisational measures designed to protect information against unauthorised access, alteration, loss or disclosure. Customers remain responsible for their users, devices, passwords, permissions and endpoint security. No online service can guarantee absolute security.
12. Backups and exports
Platform backups and disaster-recovery copies are operational safeguards. They do not replace the customer’s own independent backup, archival or regulatory-retention obligations. Customers should regularly export and independently retain critical business, accounting, contractual and regulatory records.
13. Cookies and local storage
The AxiCore website and application may use strictly necessary cookies, session storage or similar technologies for login, security, language preferences and essential functionality. If non-essential analytics or marketing technologies are introduced, any notice or consent required by law will be provided.
14. AI-assisted features
If a customer chooses to use an AI-assisted feature, the data needed for that feature may be processed to produce the requested result. Customers should avoid providing unnecessary sensitive data and remain responsible for deciding whether an AI feature is appropriate for their data and intended use.
15. Your rights
Depending on applicable law and Axihedron’s role, individuals may have rights of access, correction, deletion, restriction, portability, objection or withdrawal of consent. Requests about data stored inside a customer workspace should normally be directed first to that customer. Requests concerning data controlled by Axihedron can be sent to contact@axihedron.com.
16. Complaints
Where UK data-protection law applies, individuals may have the right to complain to the UK Information Commissioner’s Office or another competent supervisory authority. We encourage you to contact Axihedron first so we can investigate the issue.
17. Children
AxiCore Cloud is intended for business and professional use and is not directed to children.
18. Changes
We may update this Privacy Policy when the service, legal requirements or processing activities change. The current version and effective date will be published on this page.
19. Related documents
AxiCore Cloud Terms of Service and Data Processing Annex are available at axicore.cloud/contract/en.html.