Privacy, explained without the filler.

This Privacy Policy explains how AXO, the Agent Accessibility Optimization service, collects, uses, stores, and shares information when you use the AXO website, dashboard, APIs, reports, public share links, and related features.

It covers information you provide directly, information collected automatically through your use of the service, and information received from third parties that support authentication, billing, hosting, processing, and security.

The exact information we collect depends on how you use AXO, but it generally falls into the following categories:

• Account and profile information, such as your name, email address, avatar, authentication identifiers, and any profile details made available through your sign-in provider.
• Project and run data, such as website URLs, prompts, task settings, selected providers, generated reports, score history, and share-link activity.
• Billing and transaction metadata, such as Stripe customer IDs, subscription status, invoice state, and limited payment-method metadata. AXO does not store full payment card numbers on its own servers.
• Usage, device, and log information, such as IP address, browser type, request timing, pages viewed, timestamps, and operational telemetry used to maintain the service.
• Communications and feedback you send to AXO, including support requests and product feedback.

AXO uses collected information to operate, maintain, and improve the service.

• Authenticate users and keep accounts secure.
• Run audits, generate reports, and return outputs based on the configuration you choose.
• Manage subscriptions, credits, billing workflows, and payment support.
• Monitor performance, detect abuse, debug failures, and protect the service and its users.
• Improve product quality, evaluate feature usage, and develop new functionality.
• Comply with legal obligations and enforce applicable terms and policies.

When you run AXO, the service may process submitted URLs, prompts, extracted public webpage content, and related metadata through third-party infrastructure providers that support the product. Based on the configuration of a run, this can include Supabase, Stripe, Hyperbrowser, and model providers such as OpenAI, Anthropic, and Google.

Because AXO is designed to evaluate websites using AI systems, you should only submit information and content that you are authorized to provide. Do not submit confidential information or sensitive personal data unless you have assessed the risks of that processing and have the right to permit it.

AXO uses cookies, session storage, and similar technologies that are reasonably necessary to enable sign-in, preserve sessions, remember security state, and support core product functionality.

Operational logs and similar technical signals may also be used to understand service health, detect misuse, and troubleshoot issues. AXO does not use the service to deliver third-party targeted advertising.

AXO does not sell personal information in the ordinary course of business. AXO may disclose information in the following circumstances:

• To vendors and subprocessors that help provide hosting, authentication, billing, infrastructure, security, and AI processing.
• At your direction, including when you create a public share link for a report.
• If required to comply with law, regulation, legal process, or a valid government request.
• To protect the rights, safety, and security of AXO, users, and the public, including investigating fraud or abuse.
• In connection with a merger, acquisition, financing, reorganization, or sale of some or all business assets.
• In aggregated or de-identified form that does not reasonably identify you.

AXO retains information for as long as reasonably necessary to provide the service, maintain account history, satisfy billing and legal obligations, resolve disputes, and enforce agreements.

Public share links remain accessible to anyone with the link until they are revoked or the associated data is deleted. Backup copies and security logs may persist for a limited period after deletion where required for resilience, compliance, or fraud prevention.

Depending on your location and applicable law, you may have rights to access, correct, delete, or export certain personal information.

• You can update project data and revoke share links from within the service where those controls are available.
• You can manage paid subscriptions through Stripe-hosted billing flows made available by AXO.
• You can stop using the service at any time and may request deletion of your account information, subject to legal, billing, security, and operational retention requirements.
• You may opt out of non-essential communications by using the unsubscribe or account controls provided with those messages.

AXO uses reasonable administrative, technical, and organizational measures intended to protect information, but no method of transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your own account credentials and any shared report links you create.

AXO and its service providers may process information in jurisdictions outside your home country. Where applicable, AXO relies on appropriate contractual, operational, or statutory mechanisms for those transfers.

AXO is not directed to children under 13, and AXO does not knowingly collect personal information from children under 13 through the service.

AXO may update this Privacy Policy from time to time. If changes are material, AXO may provide additional notice through the service or by other reasonable means. The updated version becomes effective when it is posted with a revised last-updated date.

Questions about this Privacy Policy should be sent through the contact method made available in the AXO service or related billing communications.