Privacy Policy

1. Introduction & Scope

At Aximo Labs ("we", "us", or "our"), safeguarding the integrity, confidentiality, and security of our clients' data is our highest operational priority. This Privacy Policy details the types of information we collect when you visit our website (aximolabs.com), utilize our workflow automation consulting services, or integrate our custom AI systems.

2. Data We Collect

We strictly gather data required to engineer and maintain enterprise automation architectures:

• Direct Inquiry Data: Your name, company email, organization name, project requirements, and communication history submitted via our discovery forms.
• Integration & API Credentials: Environment variables, OAuth access tokens, and webhook secrets supplied specifically for connecting third-party platforms (e.g., n8n, OpenAI/ChatGPT, Shopify, Slack, Google Workspace). All credentials are kept in encrypted credential managers (such as HashiCorp Vault or AWS KMS).
• System Analytics: Non-identifiable telemetry, page interaction metrics, device types, and browser user-agents to enhance platform performance.

3. AI Processing & Zero Data Training Guarantee

We implement strict data hygiene protocols when deploying custom Large Language Models (LLMs) and autonomous agents:

• Zero Training Retention: Client proprietary data, customer chats, and database records passed through OpenAI API or Anthropic endpoints are processed under zero-data-retention enterprise tier agreements. Your business data is never used to train public foundational models.
• Isolated Environments: All custom workflow instances (n8n, Docker containers, webhooks) run on isolated private cloud or self-hosted virtual private clouds (VPCs).

4. Third-Party Service Integrations

Our automations connect with reputable software-as-a-service platforms upon explicit client authorization. We encourage reviewing the privacy standards of these verified platforms:

• OpenAI / ChatGPT: Enterprise API data compliance and encryption in transit.
• n8n: Self-hosted or SOC-2 compliant n8n cloud instances.
• Shopify & E-Commerce APIs: Scoped, read/write rate-limited access tokens for inventory and order management.
• Google Workspace & Slack: OAuth 2.0 granular scopes restricted exclusively to configured workflow triggers.

5. Data Retention & Deletion Rights

We retain client configuration documents only for the lifespan of active support contracts. You maintain full rights under GDPR, CCPA, and international data standards to:

• Request a full export of all records and architectural documentation.
• Request permanent cryptographic deletion of all stored API keys, staging databases, and contact records.
• Revoke access authorizations at any time through your respective platform identity consoles.

6. Contact Our Data Protection Officer

If you have questions regarding this Privacy Policy, our encryption protocols, or compliance standards, please contact our security team: