Last updated: 12 September 2026
This Privacy Policy explains how Axioragroup ("Axioragroup", "we", "us", or "our") collects, uses, discloses, and protects personal data in connection with our website and the Axioragroup web-based business management platform (the "Platform"), which provides CRM, project management, HR administration, and financial record-keeping functionality to small businesses, freelancers, consultants, agencies, and other service-based businesses.
This Policy applies to visitors to our website, prospective and existing Customers who purchase or use the Platform, and, to a more limited extent, individuals whose personal data a Customer enters into the Platform, such as the Customer's own clients, contacts, or employees.
Axioragroup acts in two different capacities depending on the personal data involved. In relation to data we collect directly, such as account and billing information about our Customers, we act as a data controller. In relation to Customer Data entered by a Customer into the Platform about its own contacts, employees, or clients, the Customer is generally the data controller, and Axioragroup acts as a data processor, processing that information only on the Customer's instructions in order to provide the Platform.
This Policy should be read together with our Cookie Policy, which explains in more detail how we use cookies and similar technologies, and our Terms and Conditions, which govern the overall use of the Platform.
When you register for an account or make a purchase, we collect information such as your name, email address, business name, and billing details. Payment card information is collected and processed directly by Stripe, our payment processor, and is not stored on Axioragroup's own servers.
We collect information you provide when you contact us for support, respond to a survey, request a refund, or otherwise communicate with us, which may include your name, contact details, and the content of your communication.
As a Customer uses the Platform's CRM, project management, HR administration, and financial record-keeping features, it may enter personal data relating to its own contacts, leads, clients, employees, or other individuals. This Customer Data is entered and controlled by the Customer, and Axioragroup processes it as a data processor, as described in Section 1.3.
We automatically collect certain technical information when you visit our website or use the Platform, including your IP address, browser type, device information, pages visited, and approximate location derived from your IP address, typically through the cookies and similar technologies described in our Cookie Policy.
We may receive limited information from third parties, such as confirmation of a successful payment from Stripe, or information from analytics providers about how our website is used, in each case in accordance with the relevant third party's own privacy practices.
We use account, billing, and technical information to create and manage your account, process purchases, provide access to the Platform in accordance with the package purchased, and maintain the security and performance of our systems.
We use the information you provide when contacting us to respond to your questions, resolve technical issues, and process requests such as refund requests under our Refund and Cancellation Policy.
We use aggregated technical and usage information to understand how our website and Platform are used, identify technical issues, and inform decisions about new features or improvements.
We use your contact information to send you service-related communications, such as confirmations of purchase, updates to our policies, or important notices about your account, and, where you have consented, marketing communications about new features or offers, which you may opt out of at any time.
We use account and technical information to help detect, investigate, and prevent fraudulent transactions, unauthorised access, and other activity that could harm Axioragroup, our Customers, or third parties.
We may use and disclose information where necessary to comply with applicable law, respond to lawful requests from public authorities, or establish, exercise, or defend legal claims.
Where we process Customer Data as a data processor, we do so only to the extent necessary to provide the Platform's CRM, project management, HR administration, and financial record-keeping functionality, in accordance with the Customer's instructions and applicable data processing terms.
We process account, billing, and related information because it is necessary to perform our contract with you, namely providing access to the Platform in accordance with these Terms and the package you purchased.
We process certain technical, usage, and communication information based on our legitimate interests in operating, securing, and improving our website and Platform, and in communicating with Customers about their account, provided these interests are not overridden by your own rights and interests.
Where required, such as for certain non-essential cookies or marketing communications, we rely on your consent, which you may withdraw at any time as described in our Cookie Policy or through marketing opt-out mechanisms.
We may process certain information where necessary to comply with a legal obligation to which we are subject, such as tax or accounting record-keeping requirements relating to our own business.
We share information with third-party service providers who help us operate our business and the Platform, including Stripe for payment processing, hosting providers for infrastructure, and analytics providers where used, each of which is authorised to use the information only as necessary to provide their services to us.
Payment card details you provide at checkout are collected and processed directly by Stripe. Stripe's use of your information is governed by Stripe's own privacy policy, and Axioragroup does not store full payment card numbers on its own systems.
We may disclose information where we believe in good faith that doing so is necessary to comply with applicable law or legal process, protect the rights, property, or safety of Axioragroup, our Customers, or others, or investigate and prevent fraud or security issues.
If Axioragroup is involved in a merger, acquisition, reorganisation, or sale of assets, information we hold may be transferred as part of that transaction, subject to appropriate confidentiality protections and, where required by law, notice to affected individuals.
We do not sell personal data to third parties for their own independent marketing purposes.
Customer Data entered into the Platform by one Customer is not shared with, or made accessible to, other unrelated Customers. Access is limited to the Customer's own authorised users and, where necessary for support or technical purposes, authorised Axioragroup personnel.
We retain account and billing information for as long as your account remains active, and for a reasonable period afterwards to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements.
Customer Data entered into the Platform is generally retained for as long as the Customer's account remains active. Following termination, expiry, or a refund resulting in loss of access, we may retain Customer Data for a limited period in accordance with our data retention practices, after which it may be deleted, as also described in our Refund and Cancellation Policy.
We retain records of support requests and other communications for a reasonable period to help us respond to any follow-up questions and to maintain an accurate history of interactions with Customers.
Technical and usage data collected through cookies and similar technologies is retained in accordance with the retention periods described in our Cookie Policy.
We implement reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, or destruction, appropriate to the nature and sensitivity of the information involved.
Access to Customer Data within the Platform is restricted to the Customer's own authorised users and to Axioragroup personnel who need access to provide support or maintain the Platform, subject to appropriate confidentiality obligations.
While we take data security seriously, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee the absolute security of information transmitted to or stored within the Platform.
You play an important role in keeping your account secure, including choosing a strong password, keeping your login credentials confidential, and notifying us promptly of any suspected unauthorised access, as also described in our Terms and Conditions.
Because Axioragroup and our service providers, such as Stripe and any hosting or analytics providers, may operate in different countries, personal data may be transferred to, stored in, and processed in countries other than the one in which you or your business are located.
Where personal data is transferred internationally, we aim to ensure that appropriate safeguards are in place, such as standard contractual clauses or equivalent mechanisms recognised under applicable data protection law, to protect the data in a manner consistent with this Policy.
Depending on the data protection law applicable to you, you may have rights in relation to your personal data, including the right to access, correct, delete, or restrict the processing of your personal data, the right to object to certain processing, the right to data portability, and the right to withdraw consent where processing is based on consent.
You can exercise these rights by contacting us using the details in Section 13. We will respond to your request within the timeframe required by applicable law, and may need to verify your identity before processing certain requests.
If your personal data has been entered into the Platform by a business you interact with, such as a business using Axioragroup to manage its own customers or employees, that business is generally the data controller responsible for responding to your request. We encourage you to contact that business directly, and we will support the business, as data processor, in responding to your request in accordance with Section 1.3.
If you believe your personal data has been processed in a way that does not comply with applicable data protection law, you have the right to lodge a complaint with a supervisory authority in your country or region, in addition to any right to contact us directly.
We will not discriminate against you for exercising any of your data protection rights, and doing so will not affect the level of service you receive from us, other than to the extent a specific request, such as deletion of certain data, necessarily affects our ability to provide a related feature or service.
Our website and Platform are intended for business use by adults and are not directed at children. We do not knowingly collect personal data from individuals we know to be children under the age defined by applicable law in their jurisdiction.
If we become aware that we have inadvertently collected personal data from a child without appropriate consent, we will take reasonable steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us using the details in Section 13.
We use cookies and similar technologies on our website and within the Platform, as described in detail in our separate Cookie Policy, which explains the categories of cookies we use, how you can manage your preferences, and how this relates to your personal data.
Where our Cookie Policy provides more specific detail about a particular use of cookies, that Policy governs the specific point in question, while this Privacy Policy provides the broader framework for how we handle personal data generally.
Our website or the Platform may contain links to third-party websites or services not operated by Axioragroup. This Policy does not apply to those third-party websites or services, and we encourage you to review their own privacy policies before providing any personal data to them.
Where the Platform integrates with third-party services, such as Stripe for payment processing, the relevant third party's own privacy policy governs its own handling of your information, in addition to this Policy governing Axioragroup's own use of that information.
If you have questions about this Privacy Policy, wish to exercise any of your data protection rights, or have concerns about how your personal data is handled, please contact us at joshichhatraraj55@gmail.com or via our contact page. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).
We aim to respond to privacy-related enquiries and requests within a reasonable period, and in any event within any timeframe required by applicable law.
We may update this Privacy Policy from time to time to reflect changes in our practices, the Platform's features, or applicable law. We encourage you to review this Policy periodically to stay informed about how we handle personal data.
Where changes to this Policy are material, we will take reasonable steps to notify you, such as posting a notice on our website or, where appropriate, sending an email to the address associated with your account, before the changes take effect.
Your continued use of our website or the Platform after an updated Privacy Policy takes effect constitutes your acknowledgement of the updated Policy, to the extent permitted by applicable law.
Where a Customer uses the Platform's HR administration features, it may enter personal data relating to its own employees, such as basic identifying information, leave records, onboarding documents, and other employment-related details. This information is Customer Data, controlled by the Customer, and Axioragroup processes it as a data processor for the sole purpose of providing the relevant HR administration functionality.
The Customer, as data controller for this information, is responsible for ensuring it has a lawful basis to collect and process its employees' personal data, for providing appropriate privacy notices to its own employees, and for complying with applicable employment and data protection law. Axioragroup does not independently verify the lawfulness of HR data entered by a Customer.
Axioragroup does not use HR-related Customer Data for its own independent purposes, such as marketing to a Customer's employees, and accesses such data only as necessary to provide and support the Platform or as instructed by the Customer.
Where a Customer uses the Platform's invoicing, income, and expense-tracking features, it may enter financial information relating to its own business, clients, and transactions. As with HR data, this is Customer Data controlled by the Customer, with Axioragroup acting as a data processor providing the underlying record-keeping functionality.
Axioragroup does not directly collect or store full payment card details submitted by a Customer's own clients through any invoicing links or payment-related features, to the extent such functionality is offered; any such payment processing is handled by Stripe or another identified third-party payment processor in accordance with its own privacy and security practices.
As described in our Terms and Conditions, Axioragroup does not hold or transmit funds on behalf of Customers or third parties, and financial information entered into the Platform is used solely to support the Customer's own administrative record-keeping, not to provide banking, payment, or investment services.
The Platform may use limited automated features, such as flagging overdue invoices or upcoming deadlines based on data entered by the Customer, to support the administrative functionality described elsewhere in this Policy. These features are designed to help organise information already provided by the Customer, rather than to make significant decisions about individuals without human involvement.
We do not use automated decision-making, including profiling, to make decisions that produce legal or similarly significant effects concerning individuals, such as decisions about employment, credit, or eligibility for services, based on personal data processed through the Platform.
To the extent a Customer's use of the Platform involves Axioragroup processing personal data on the Customer's behalf as a data processor, the parties' respective obligations may be further described in a separate data processing agreement, incorporated into or supplementing these Terms, where applicable law requires such an agreement or where the Customer requests one.
Axioragroup may engage sub-processors, such as hosting providers, to assist in providing the Platform. Any sub-processor engaged to process Customer Data will be subject to data protection obligations materially similar to those undertaken by Axioragroup, consistent with applicable law.
Where reasonably necessary, Axioragroup will provide Customers, as data controllers, with reasonable assistance to help them comply with their own obligations under applicable data protection law in relation to Customer Data processed through the Platform, such as responding to data subject requests as described in Section 9.3.
Axioragroup does not access Customer Data for its own independent purposes. Access by Axioragroup personnel is limited to what is necessary to provide support, maintain the security and functionality of the Platform, or comply with a Customer's own instructions or applicable law.
Yes, subject to applicable data protection law, you can request access to the personal data we hold about you directly, such as your account and billing information, by contacting us as described in Section 13. Where your personal data appears within a business's Customer Data as one of their contacts or employees, you should generally direct your request to that business, as explained in Section 9.3.
If you close your account, or your access ends following a refund, we retain certain information for a limited period in accordance with Section 6 and our Refund and Cancellation Policy, after which it will generally be deleted, subject to any legal obligation to retain specific records for longer.
We do not use Customer Data entered into the Platform to train general-purpose or third-party artificial intelligence models for purposes unrelated to providing and improving the Platform for our Customers, except where we clearly describe such a use separately and, where required, obtain appropriate consent or provide an opt-out.
You can opt out of marketing emails at any time using the unsubscribe link included in those emails, or by contacting us directly as described in Section 13. Opting out of marketing communications will not affect essential service communications relating to your account.
If you are located in the European Economic Area or the United Kingdom, the rights described in Section 9 are generally provided under the GDPR and the UK GDPR respectively, including the right to access, rectify, erase, restrict, or port your personal data, and the right to object to processing based on legitimate interests.
If you are located in a US state with its own comprehensive privacy law, you may have additional or differently framed rights, such as the right to know what personal information is collected about you, the right to delete personal information, and the right to opt out of certain sharing of personal information, which we will honour to the extent those laws apply to our processing activities.
Where you are located in a jurisdiction with its own data protection framework not specifically addressed above, we aim to apply the principles described in this Policy in a manner consistent with applicable local law, and will honour additional rights required by that law upon request.
The general rights described in Section 9 are intended to reflect common protections found across many data protection frameworks. Where a specific regional law grants you additional or more detailed rights than described generally in this Policy, those additional rights will still apply to you, and you may raise them directly with us using the contact details in Section 13.
We aim to collect only the personal data reasonably necessary to provide our website, the Platform, and related services, and to fulfil the purposes described in this Policy, rather than collecting additional data without a clear purpose.
We use personal data for the purposes described in this Policy at the time it was collected, or for purposes that are reasonably compatible with those original purposes, and will seek your consent or provide notice where we intend to use personal data for a materially different purpose, to the extent required by applicable law.
We periodically review the personal data we hold, including Customer Data retained after an account has become inactive, in order to delete or anonymise information that is no longer needed for the purposes described in this Policy or required to be retained by law.
In summary, Axioragroup collects the personal data reasonably necessary to provide and improve the Platform, acts as a data controller for information we collect directly about our Customers and website visitors, and acts as a data processor for the Customer Data that Customers enter about their own contacts, clients, and employees while using the Platform's CRM, project management, HR administration, and financial record-keeping features.
You have meaningful choices and rights over your personal data, including the ability to manage cookies, opt out of marketing, and exercise access, correction, deletion, and other rights recognised under applicable data protection law, as described throughout this Policy.
We encourage you to revisit this Privacy Policy periodically, particularly after any notice of material changes, so that you remain informed about how Axioragroup handles personal data in connection with our website and the Platform.
The Platform's CRM, project management, HR administration, and financial record-keeping features are designed around ordinary business administration information, such as contact details, project tasks, employment records, and financial transactions. The Platform is not designed to require the entry of special categories of personal data, such as health information, racial or ethnic origin, or religious beliefs.
If a Customer chooses to enter special category or otherwise sensitive personal data into free-text fields within the Platform, for example within HR notes, that Customer, as data controller, is responsible for ensuring it has an appropriate lawful basis and any additional safeguards required by applicable law for processing that category of data.
Where such information is entered despite not being specifically required by the Platform's design, Axioragroup processes it in the same secure manner as other Customer Data, as a data processor acting on the Customer's instructions, but does not independently review, categorise, or apply special handling to free-text content beyond our standard security measures.
In providing the Platform, we engage service providers that fall into a small number of general categories: payment processing (Stripe), cloud hosting and infrastructure, and, where used, website analytics and customer support tooling. Each is engaged only to the extent necessary to operate the Platform and our business.
Before engaging a new service provider that will process personal data on our behalf, we assess whether that provider offers an appropriate level of data protection and security, and put in place contractual terms requiring the provider to protect personal data consistently with this Policy and applicable law.
We may change our service providers or sub-processors from time to time, for example to improve reliability or functionality. Where such a change is material to how Customer Data is processed, we will take reasonable steps to inform affected Customers in advance where required by applicable law or any separate data processing agreement in place.