1. Who this applies to
This policy covers data we collect from visitors to axluma.com and from individuals who contact us through the site. Engagement-specific data handling for active clients is governed by the data processing agreement signed at project kickoff.
2. What we collect from site visitors
When you fill out a contact form: your name, email, company name, the budget range you select, and the message you send.
Basic operational logs: IP address, browser, the pages you visit, the timestamps. These help us debug and keep the site stable.
3. What we collect when you become a client
Whatever the engagement requires. Typically: contracts, project communications, billing details (handled by Stripe), and the data needed to train the AI employee we’re building for you. The full scope is documented in the engagement-level DPA we sign together.
4. How we use it
To respond to your inquiries, scope projects, deliver work, send invoices, and reply when you write to support. That’s the entire list.
We do not sell your data, share it with advertisers, send it to lead-buying networks, or use it to train any AI model.
5. Where it lives
Contact form submissions are stored in our internal CRM, encrypted at rest. Billing details are processed by Stripe and never stored on our servers. Project materials live in encrypted, access-controlled storage agreed with the client.
6. Cookies and tracking
We do not use third-party analytics, ad networks, or behavioral trackers. The site uses one functional cookie to remember your preferences. That’s it.
7. Your rights
You can:
- Request a copy of all data we hold about you by writing to privacy@axluma.com. We’ll respond within 30 days.
- Ask us to delete your data, which we’ll do within 30 days, except where we’re required by law to retain billing records.
- Correct or update any of your information by writing to us.
If you’re in the EU, UK, or California, you have additional statutory rights under GDPR / UK GDPR / CCPA. Write to us and we’ll help.
8. Data retention
Contact form submissions: kept for 24 months unless an engagement begins. Engagement records: kept for the life of the engagement plus seven years for tax and audit. Billing: kept for seven years.
9. Children
The site and our services are not directed at children under 16. We don’t knowingly collect data from anyone under 16.
10. Changes
We’ll post material changes to this page at least 14 days before they take effect.
11. Contact
Privacy questions or data requests: privacy@axluma.com. General contact: hello@axluma.com.
This is a working draft. Review with your own counsel before relying on it for compliance with GDPR, CCPA, or sector-specific regulations like HIPAA.