Privacy Policy, AXXEM AI

Public summary, written to be consistent with AXXEM AI's internal Data Protection & Privacy Policy.

AXXEM AI Solutions LLC ("AXXEM AI," "we," "us") runs a real, formally-led data-protection program. This policy explains what we collect through this website and our services, why, where it is stored, how we protect it, and the choices you have.

Who we are

Data controller: AXXEM AI Solutions LLC, Toledo, Ohio, USA. Our privacy program is led by our Data Protection Officer, Emmanuel "Emm" Gonzalez. For any privacy question or to exercise your rights, contact support@axxem.ai.

Controller or processor? For information collected through this website and our marketing, AXXEM AI is the data controller. When we handle a client's data to deliver a paid engagement, we act as a processor under a separate data-processing agreement with that client.

What we collect

Information you give us: name, email, company, and anything you submit through a contact form, an AI Readiness or AI Fluency assessment, or a booked call.
Assessment responses: the answers you provide to a Snapshot or AI Opportunity Blueprint, used to produce and explain your result.
Payment & scheduling: if you buy a paid product, our payment provider (Stripe) processes your payment — we never see or store your full card details; if you book a call, we collect your name, email, and chosen time through our scheduling provider (Calendly).
Usage data: limited, privacy-respecting analytics (pages visited, device/browser type) and your country (to confirm eligibility for our paid products) to run and improve the site. We minimize what we collect.

Why we use it (purposes & legal basis)

To respond to your enquiry and deliver what you requested (performance of a contract, or your request).
To produce and explain your assessment result (your consent).
To improve our content and services, and for limited security and analytics (legitimate interest, balanced against your rights). We do not sell your personal data.

Where it is stored and how we protect it

We store data only on vetted platforms, under access control, encrypted in transit and at rest, including Google Workspace, Microsoft 365, and our company-controlled GitHub organization, plus approved application, database, and hosting services where a project requires them. Our safeguards include:

Multi-factor authentication (MFA) enforced across company accounts.
No credentials or secrets in code: secrets are held in a dedicated manager, with automated secret scanning.
Least-privilege access, limited to AXXEM AI's founders and any approved subcontractor under a signed data-protection (subcontractor) agreement.
Client data held in private repositories and locations only.

How AI is used

AI is core to what we do, and we're transparent about it. In our assessments, your scores and result tier are calculated directly from your answers — not by AI. For the paid AI Fluency report, the written analysis is generated by AI working within AXXEM AI's expert-built, research-backed framework: it draws only on guidance our team authored and fact-checked, is given none of your free-text (our assessments have no free-text fields), and cannot add advice or statistics of its own. That analysis is produced automatically and is not individually reviewed before delivery. When we use third-party AI services (for example, Anthropic or OpenAI), we minimize and, where practical, anonymize the data in prompts and use them under terms where your content is not used to train their models. We never sell your data or feed it to AI for unrelated purposes.

Availability of our paid products

Our paid AI Fluency products are currently offered only to residents of the United States and Canada. We detect your country to confirm eligibility.

Subprocessors

We maintain a subprocessor register of the third parties that store or process data on our behalf: cloud storage and hosting (Google Workspace, Microsoft 365, GitHub, Supabase, Replit), AI/LLM APIs (Anthropic, OpenAI, OpenRouter), email (Resend), payments (Stripe), scheduling (Calendly), and automation, communications, and CRM tools. For each, we work to hold a Data Processing Agreement (DPA), a current security report (e.g. SOC 2 or ISO 27001), and a no-training or retention confirmation where relevant. A current list is available on request.

Children's data

Some of our products (for example, education tools) may involve children's data. Where they do, we handle it in line with applicable children's-privacy law (including COPPA) and apply additional safeguards, including a current written information-security program.

Retention

We keep personal data only as long as needed for the purpose collected, then delete or anonymize it. Assessment responses are retained for the period needed to deliver and discuss your result.

Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data; object to or restrict certain processing; request a portable copy of the data you gave us; and withdraw consent at any time. To make a request, email support@axxem.ai. You may also lodge a complaint with your local data-protection authority.

Data breaches

We maintain a documented incident-response and breach-notification plan. In the event of a personal-data breach, we will act promptly to contain it and will notify affected parties and authorities as required by law.

International processing

Some of our providers process data in the United States and elsewhere. Where required, we rely on appropriate safeguards for cross-border transfers.

Cookies

We use only the cookies needed to run the site and, where applicable, privacy-respecting analytics. You can control cookies through your browser settings.

Changes

We may update this policy; the "last updated" date above reflects the latest version, and it is kept consistent with our internal Data Protection & Privacy Policy. Material changes will be highlighted on this page.

Contact

Privacy questions or requests: support@axxem.ai · Data Protection Officer, AXXEM AI Solutions LLC, Toledo, Ohio, USA.