Privacy Policy

We collect the following categories of personal data:

We collect data in the following ways:

• Directly from you — when you register, make a purchase, submit a customisation request, or contact support.
• Automatically — through cookies and server logs when you use the platform.
• From third parties — from Google or Microsoft when you use OAuth login, and from Stripe when you complete a payment.

We process your personal data on the following legal bases:

• Contract performance — to deliver the services you have purchased.
• Legitimate interests — to improve the platform, prevent fraud, and ensure security.
• Legal obligation — to comply with financial record-keeping requirements.
• Consent — for marketing communications, where you have opted in.

Your data is used to:

• Authenticate your identity and manage your account
• Process payments and deliver purchased documents
• Provide AskAX advisory responses and Expert Connect sessions
• Send transactional emails (purchase receipts, booking confirmations)
• Improve platform functionality and user experience
• Detect and prevent fraudulent or abusive activity

We do not sell your personal data to third parties. We do not use your data for automated decision-making that produces legal or similarly significant effects.

We share your data only with the following categories of recipients:

• Stripe — for payment processing. Stripe's privacy policy applies to data shared with them.
• Cloud infrastructure providers — for hosting and data storage (servers located in Singapore / Asia-Pacific region).
• Analytics providers — for aggregated, anonymised usage analytics.
• Legal authorities — where required by law or to protect our legal rights.

AXIOM uses a single session cookie to keep you logged in. This cookie is strictly necessary for the platform to function and does not track you across other websites. We do not use advertising or third-party tracking cookies.

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your data, subject to legal retention requirements.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdrawal of consent — withdraw consent for marketing communications at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

We implement industry-standard security measures including TLS encryption in transit, encrypted storage at rest, access controls, and regular security reviews. However, no system is completely secure and we cannot guarantee absolute security.

Your data is primarily stored and processed in the Asia-Pacific region. Where data is transferred outside this region, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date. Continued use of the platform after changes constitutes acceptance of the updated policy.

For privacy-related enquiries or to exercise your rights, contact our Data Protection Officer at [email protected].