Privacy Policy

How This Policy Is Structured

Axamy interacts with personal information in three distinct contexts, each with different practices:

1. Marketing site visitors and prospects, meaning people browsing axamy.com, signing up for our newsletter, or engaging with our marketing. Standard analytics and advertising practices apply, subject to your consent and opt-out rights.
2. Account holders and end users of the Service, meaning people with Axamy accounts using the product. Product analytics support service operation and improvement; we do not run third-party advertising trackers inside the authenticated product.
3. Customer Workspace Data, meaning content, team activity, integration data, and end-user information processed inside a customer's workspace. This data is never used for advertising, never sold, and never shared for marketing purposes. Additional protections apply for Education Institution customers (see "Education Customers" below).

Privacy Officer

Axamy has designated a Privacy Officer accountable for compliance with this Privacy Policy and applicable privacy laws, including PIPEDA, Quebec Law 25, and other Canadian provincial privacy laws.

The Privacy Officer is responsible for:

• Receiving and responding to privacy-related inquiries, access requests, correction requests, and deletion requests
• Overseeing breach response and notifications to affected individuals and regulators (including the Office of the Privacy Commissioner of Canada and, where applicable, the Commission d'accès à l'information du Québec)
• Reviewing privacy practices, subprocessor changes, and data processing arrangements
• Maintaining this Privacy Policy and ensuring it reflects current practices

The name of the designated Privacy Officer is available to enterprise customers upon request and is identified in our Data Processing Addendum (DPA). For privacy inquiries from any jurisdiction, including GDPR, CCPA/CPRA, PIPEDA, and Law 25 requests, contact privacy@axamy.com.

Collection of Your Personal Data

Personal Data

While using Axamy, we may ask you to provide us with certain personally identifiable information that can be used to facilitate access, contact you, or identify you, including:

• Email address
• First and last name
• Employer
• Billing and payment information (bank account, credit card, etc.)
• IP address (collected automatically)
• Comments and survey submissions
• Industry segment (self-identified)
• Content interests

When you link your Axamy account with a third-party provider (Google, Microsoft, or LinkedIn), we may collect, store, and periodically update basic information associated with that third-party account, such as email, name, and profile picture. We will never publish through your third-party account.

Please be aware that if you directly disclose personally identifiable information through public-facing channels (such as community forums or comments, where available), this information may be collected and used by others.

Usage Data

Usage Data is collected automatically when using the Service. Usage Data may include information such as your device's Internet Protocol address (IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.

When you access the Service through a mobile device, we may collect certain information automatically, including the type of mobile device, mobile device unique ID, IP address, mobile operating system, and the type of mobile internet browser you use.

Tracking Technologies and Cookies

We use cookies and similar tracking technologies (including beacons, tags, and scripts) to operate the Service, measure performance, and, on our marketing site, support advertising and remarketing.

A cookie is a small file placed on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. We also provide a cookie consent banner on our website that allows you to manage your preferences for non-essential cookies, including analytics and advertising cookies. You can reopen the banner at any time using the "Cookie Settings" link in the website footer.

We use the following categories of cookies and similar technologies:

• Strictly necessary cookies: Required for the Service to function (authentication, session management, security). These cannot be disabled.
• Performance and analytics cookies: Help us understand how visitors use our website and product so we can improve them.
• Advertising and marketing cookies (marketing site only): Support remarketing, conversion tracking, and measurement of our advertising campaigns. These do not run inside the authenticated Axamy product.

How We Obtain Your Consent

We collect consent through different mechanisms depending on the type of processing and the legal standard that applies. We design these mechanisms to be clear, granular, and reversible.

• Account creation and Service use. When you create an Axamy account, you agree to our Terms and Conditions and acknowledge this Privacy Policy. We process Personal Data necessary to deliver the Service on the basis of contract performance.
• Optional cookies (analytics and advertising). We obtain your consent through our cookie consent banner on axamy.com. You can accept all, reject all, or choose specific categories. You can change your preferences at any time by reopening the banner from the cookie settings link in the website footer.
• Marketing communications. When you subscribe to our newsletter or opt in to marketing emails (for example, when creating an account or completing a form), you give us express consent to send commercial communications. You can withdraw consent at any time using the unsubscribe link in any marketing email or by contacting privacy@axamy.com.
• Sensitive personal information. Where we process information considered sensitive under applicable law (for example, under Quebec Law 25 or the CCPA's "sensitive personal information" category), we obtain your express consent before doing so and limit our use to the specific purposes you have consented to.
• Connected third-party accounts (Google, Microsoft, LinkedIn). When you connect a third-party account, you authorize specific scopes of access through that provider's OAuth consent screen. You can revoke this access at any time within the Axamy application or directly through the third-party provider.

Withdrawing consent. You may withdraw consent for any processing that depends on it at any time, by:

• Adjusting your preferences in our cookie consent banner (for cookies)
• Unsubscribing from marketing emails (for marketing communications)
• Disconnecting integrations within the Axamy application (for third-party access)
• Updating your account settings (for in-product preferences)
• Contacting privacy@axamy.com (for any other consent-based processing)

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. Some processing, such as billing for services already rendered, security logging, and legal compliance, may continue under other legal bases even after consent is withdrawn.

For Quebec residents, we obtain consent in accordance with Article 14 of Law 25: consent is requested separately for each specific purpose, in clear and simple terms, and is documented.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

• To provide and maintain our Service, including monitoring usage of our Service.
• To manage your account: to manage your registration as a user of the Service.
• For the performance of a contract: the development, compliance, and undertaking of the contract for the products or services you have purchased.
• To contact you: by electronic communication regarding your use of the Service, or to provide customer support.
• To manage your requests: to attend to and manage your requests to us.
• To deliver marketing and advertising to website visitors and prospects on our marketing site and across third-party platforms (such as Google, LinkedIn, and Meta) to promote Axamy. This includes remarketing to people who have visited axamy.com. These practices do not apply to Customer Workspace Data, and we honor opt-outs and consent signals as described below.
• For business transfers: we may use your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, subject to the same privacy commitments outlined in this policy.
• For service improvement: for data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns, and evaluating and improving our Service.

What we do not do

• We do not sell any customer data, including but not limited to Customer Workspace Data, student data, end-user content, or any personal information processed inside a customer's workspace.
• We do not use Customer Workspace Data, Google user data, or data inside an Educational Institution's workspace for advertising or marketing.
• We do not use Google user data for any purpose other than providing and improving user-facing features of the Service, as required by the Google API Services User Data Policy.

Automated Processing and Decision Support

Axamy uses automated processing to support management workflows: surfacing tasks and decisions for review, recommending priorities, scheduling time, suggesting plan adjustments, and analyzing goal progress. We refer to this collectively as "automated decision support."

How automated processing works in Axamy

Automated decision support uses the following categories of personal information:

• Account profile data (name, email, role within the customer's workspace)
• Activity and usage data within the workspace (tasks, schedules, plans, goals, comments, integration data such as connected calendar and document content)
• Stated preferences and configurations set by the user or the customer's administrator

Axamy may use this information to generate recommendations, summaries, and decision queues, and to take actions configured by the user or the customer's administrator (such as standing rules, automations, or workflows that execute when defined conditions are met). Customer administrators retain control over which automated outputs require explicit user approval and which may run as standing rules within their own workspace.

The scope of automated processing within Axamy may expand over time as new capabilities are introduced. We will update this Privacy Policy and notify customers of material changes consistent with the "Changes to This Privacy Policy" section.

Your rights with respect to automated processing

Where Axamy's automated processing produces an output that has a significant effect on you (for example, an automated assignment, prioritization, or schedule that directly governs your work), you have the right to:

• Be informed that the output was produced through automated processing
• Request, in writing, the categories of personal information used and the principal factors that led to the output
• Request that the personal information used be corrected if it is inaccurate or incomplete
• Submit observations to a member of Axamy staff who can review the output and, where appropriate, escalate to the customer's administrators for reconsideration

To exercise any of these rights, contact privacy@axamy.com. We will respond within the timelines required by applicable law (including Law 25 for Quebec residents, GDPR Article 22 for EU/UK users, and CCPA/CPRA for California users).

Limits on automated processing

• Axamy does not use automated processing to make decisions that produce legal effects on individuals (such as employment, credit, insurance, or eligibility decisions) outside the scope of normal workplace management workflows configured by the customer.
• Axamy does not use customer workspace data, student data, or end-user content to train generalized machine learning or AI models.
• Customer administrators retain control over which automated capabilities are enabled in their workspace.

Data Retention

The Company retains your Personal Data only for as long as necessary for the purposes set out in this Privacy Policy. Specifically:

• Account data: Retained for the duration of your active subscription, plus 90 days following termination, after which it is deleted or returned at your request.
• Usage data: Retained for up to 24 months for analytics and service improvement, then aggregated or deleted.
• Billing records: Retained for 7 years to comply with U.S. tax and accounting obligations.
• Customer Workspace Data: Deleted within 30 days of account termination, or sooner upon written request.
• Backups: Residual data in encrypted backups is purged on a rolling 35-day cycle.
• Marketing-site analytics and advertising data: Retained per the default retention settings of each third-party platform (e.g., Google Analytics, LinkedIn, Meta), typically 14 to 26 months.

You may request earlier deletion at any time by contacting privacy@axamy.com.

Data Security

Axamy implements industry-standard administrative, technical, and physical safeguards to protect your data:

• Encryption in transit: TLS 1.2 or higher across all endpoints (AWS ECS, Route 53).
• Encryption at rest: AES-256 via AWS KMS for all stored customer data (AWS RDS).
• Access controls: Role-based access with least-privilege enforcement; production access is logged and audited.
• Authentication: HTTP-only, Secure, SameSite=Lax session cookies. Access tokens expire after 15 minutes; refresh tokens after 7 days.
• Infrastructure: Hosted on AWS in U.S. regions, with the option of regional hosting for enterprise customers (see Transfer of Your Personal Data below).

Compliance trajectory: Axamy is actively working toward SOC 2 Type 2 certification. Our integration infrastructure provider, Composio, is already SOC 2 Type 2 certified.

Breach Notification

In the event of a confirmed data breach affecting your personal information, Axamy will notify affected customers without undue delay and, where feasible, within 72 hours of becoming aware of the breach, in line with GDPR, PIPEDA, and applicable U.S. state law requirements. Notifications will include the nature of the breach, categories of data affected, likely consequences, and remediation steps taken. Records of breaches and our response are maintained in accordance with PIPEDA's Breach of Security Safeguards Regulations and Quebec Law 25.

Transfer of Your Personal Data

Axamy processes Personal Data at our operating offices and in other locations where our subprocessors operate. Personal Data may therefore be transferred to, and maintained on, infrastructure located outside your state, province, or country, including in the United States.

Safeguards we apply to cross-border transfers

For all international transfers of Personal Data, Axamy implements safeguards designed to ensure a level of protection comparable to the protection that applies in your jurisdiction. These safeguards include:

• Contractual safeguards. For transfers from the European Economic Area, the United Kingdom, and Switzerland, Axamy relies on Standard Contractual Clauses (SCCs) approved by the European Commission and the UK Information Commissioner's Office. For transfers from Canada, Axamy relies on contractual safeguards under PIPEDA's accountability principle, supported by encryption, role-based access controls, and the technical and organizational measures described in this policy.
• Technical safeguards. All Personal Data in transit is encrypted using TLS 1.2 or higher; all Personal Data at rest is encrypted using AES-256 via AWS KMS. Access is role-based and audit-logged.
• Subprocessor due diligence. We assess each subprocessor's privacy and security posture before onboarding and require subprocessors to publish privacy and security commitments equivalent to this Privacy Policy.

Transfers from Canada — comparable protection

Axamy is accountable under PIPEDA Principle 1 for personal information transferred outside Canada and ensures that comparable protection is maintained through contractual safeguards, encryption, and the technical and organizational measures described in this policy. By default, Canadian customer data is processed on AWS infrastructure located in the United States.

Transfers from Quebec — Privacy Impact Assessment

Before transferring personal information outside Quebec, Axamy conducts a Privacy Impact Assessment (PIA) as required by Article 17 of Quebec Law 25. The PIA evaluates the sensitivity of the information, the purpose of the transfer, the legal framework of the destination jurisdiction, and the safeguards applied. The PIA is documented and made available to the Commission d'accès à l'information du Québec or to enterprise customers on request.

US surveillance law disclosure

Axamy's primary infrastructure provider, Amazon Web Services, operates data centers in the United States. We acknowledge that US-based infrastructure is subject to US legal process, including the Clarifying Lawful Overseas Use of Data (CLOUD) Act and Section 702 of the Foreign Intelligence Surveillance Act (FISA). Axamy has not received any government request for customer data. We will publish a transparency report disclosing the volume and nature of any such requests, in line with applicable law and customer notice obligations.

For customers and prospective customers requiring data residency in Canada or the European Economic Area, Axamy will evaluate regional hosting requests on a case-by-case basis for enterprise plans. Contact privacy@axamy.com to discuss.

Subprocessors

Axamy uses the following subprocessors to deliver and support the Service. We require all subprocessors to maintain confidentiality, security, and data protection standards consistent with this policy.

Axamy remains accountable under applicable privacy law (including PIPEDA Principle 1, GDPR Article 28, and equivalent provisions) for personal information transferred to subprocessors. We require each subprocessor to maintain confidentiality, security, and data protection standards consistent with this Privacy Policy and our customer agreements. Where a subprocessor processes personal information on Axamy's behalf, Axamy remains the point of contact and the responsible party for any privacy incident, regulator request, or customer inquiry.

A current subprocessor list is available on request from privacy@axamy.com, and material changes will be communicated to enterprise customers in advance per our DPA.

Google API Services — User Data Policy

Axamy's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What Google data we access

When you connect a Google service (such as Google Calendar, Gmail, Google Drive, Google Docs, Google Sheets, or Google Meet) to Axamy, we request access only to the specific data necessary to provide the features you've enabled. We do not request access to Google data beyond what is required for our core functionality.

How we use Google user data

Data obtained from Google APIs is used solely to provide and improve the Axamy service as requested by you. We do not use Google user data for advertising, analytics unrelated to the service, or any secondary purpose. We do not sell or rent Google user data under any circumstances. We do not share Google user data with third parties except as required to operate the service (e.g., Composio, our SOC 2 Type 2-compliant integration infrastructure provider) or as required by law. Google user data is not used to train generalized machine learning or AI models.

Data protection mechanisms

• Encryption in transit: All data transmitted between Axamy and Google APIs is encrypted using TLS 1.2 or higher (via AWS ECS and Route 53).
• Encryption at rest: Google user data stored by Axamy is encrypted at rest using AES-256 (AWS RDS via AWS KMS). Composio also encrypts all tokens and credentials at rest and in transit.
• Token security: Authentication JWTs are stored in HTTP-only, Secure, SameSite=Lax cookies. Access tokens expire after 15 minutes; refresh tokens after 7 days. Google OAuth tokens for integrations are stored and managed entirely by Composio. Axamy never stores or has direct access to these tokens.
• Access controls: Session-scoped tokens and owner verification are enforced on all operations. Access to any Google user data is restricted on a least-privilege basis.
• Token revocation: Sessions are hard-deleted on logout. Integration connections are fully deleted from Composio upon disconnect.

Data retention and deletion

Axamy stores only minimal Google profile data (email, name, Google user ID) for authentication and account linking, retained while the account is active. All Google Workspace integration data is managed entirely by Composio and never stored by Axamy. Upon disconnect, connections are fully deleted from Composio. You may request deletion of your data at any time by contacting privacy@axamy.com.

Your rights

You may disconnect any Google integration at any time within the Axamy application. You may also revoke Axamy's access directly via your Google Account permissions page. Upon revocation, Axamy will no longer access your Google data.

Education Customers (FERPA & Student Data)

When Axamy is used by a school, district, college, or other educational institution ("Educational Institution"), we recognize that personal information about students, faculty, and staff is subject to additional legal protections, including the U.S. Family Educational Rights and Privacy Act (FERPA), the Children's Online Privacy Protection Act (COPPA), and equivalent state and provincial laws.

For Educational Institution customers, the following additional commitments apply on top of the rest of this policy. Where this section conflicts with another provision, this section controls for Educational Institution customers and their end users.

School Official Exception

When processing personal information on behalf of an Educational Institution, Axamy acts as a "school official" with a legitimate educational interest, as defined under FERPA (34 CFR § 99.31(a)(1)). This means:

• We are under the direct control of the Educational Institution with respect to the use and maintenance of education records.
• We use education records only for the purposes authorized by the Educational Institution.
• We do not disclose education records to any third party without the Educational Institution's prior written consent, except as required by law.

COPPA Compliance

Where Axamy is used in K to 12 settings that may include students under the age of 13, Axamy operates under the consent of the Educational Institution acting on behalf of parents, consistent with FTC guidance on school-authorized COPPA consent. We do not knowingly collect personal information directly from children under 13 without verifiable parental or institutional consent.

Student Data Commitments

For all Educational Institution customers, Axamy commits to the following:

• No advertising or marketing: We do not use student data, education records, or related metadata for advertising, marketing, profiling for commercial purposes, or to build non-educational profiles. Third-party advertising and analytics trackers are not applied to Educational Institution workspaces.
• No sale of student data: We do not sell, rent, or trade student data under any circumstances.
• Purpose limitation: Student data is used only to provide the contracted service to the Educational Institution.
• Data ownership: The Educational Institution retains ownership of and control over its student data.
• Deletion on request: Student data will be deleted within 30 days of a written request from the Educational Institution, or upon contract termination.
• Breach notification: We will notify the Educational Institution of any confirmed security incident affecting student data within 72 hours of discovery.
• No AI model training on student data: Student data is not used to train generalized machine learning or AI models.

Educational Institutions may request a Data Processing Addendum (DPA) that incorporates FERPA, COPPA, and applicable state student privacy law commitments (e.g., California SOPIPA, New York Education Law §2-d, Illinois SOPPA) by contacting privacy@axamy.com.

Canadian Users (PIPEDA, Law 25, and Provincial Privacy Laws)

For users in Canada, Axamy complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, including:

• Quebec: Act respecting the protection of personal information in the private sector (Law 25)
• British Columbia: Personal Information Protection Act (PIPA)
• Alberta: Personal Information Protection Act (PIPA)
• Provincial public-sector privacy laws where applicable to government or public-sector education customers (e.g., Ontario MFIPPA, BC FIPPA, Alberta FOIP)

Cross-Border Data Transfers

By default, Axamy processes Canadian customer data on AWS infrastructure located in the United States. We disclose this transfer to all Canadian users and rely on contractual safeguards, encryption in transit and at rest, and Standard Contractual Clauses (or equivalent) to protect your data. See "Transfer of Your Personal Data" above for full details on PIA, comparable protection, and US surveillance law disclosure.

For customers requiring Canadian data residency, Axamy will evaluate regional hosting requests on a case-by-case basis for enterprise plans. Contact privacy@axamy.com to discuss.

Canadian Anti-Spam Legislation (CASL)

When Axamy sends commercial electronic messages (CEMs) to Canadian recipients, including marketing emails, lifecycle communications, and product announcements, we comply with Canada's Anti-Spam Legislation (CASL) and the related Canadian Radio-television and Telecommunications Commission (CRTC) regulations.

Consent. We send marketing CEMs only to recipients who have given express or implied consent under CASL. You give express consent when you sign up for our newsletter, create an Axamy account, or otherwise opt in to receive marketing messages. Implied consent applies in limited circumstances permitted by CASL (such as an existing business relationship). We retain records of consent for the duration of the existing business relationship plus three years following its termination, in line with CASL record-keeping expectations and applicable limitation periods.

Identification. Every commercial electronic message we send identifies Axamy, Inc. as the sender, includes our mailing address (450 Park Ave S, New York, NY 10016, USA), and provides a contact channel that remains valid for at least 60 days after the message is sent.

Unsubscribe. Every commercial electronic message includes a clearly described unsubscribe mechanism. Unsubscribing is free, requires no more than two steps, and your request is honored within 10 business days. You can also unsubscribe at any time by contacting privacy@axamy.com.

Transactional and account messages (such as billing receipts, password resets, security notifications, and direct service messages) are not commercial electronic messages under CASL and are sent regardless of marketing preferences, as they are necessary to deliver the Service.

For complaints regarding our compliance with CASL, contact privacy@axamy.com or file a complaint with the Spam Reporting Centre operated by the Canadian Radio-television and Telecommunications Commission.

Your Canadian Privacy Rights

Canadian users have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate personal information
• Withdraw consent (subject to legal or contractual restrictions)
• Request deletion of your personal information
• File a complaint with the Office of the Privacy Commissioner of Canada or your provincial commissioner (e.g., the Commission d'accès à l'information du Québec)

For Quebec residents under Law 25, you also have the right to data portability. We provide your personal information in a structured, commonly-used, machine-readable format (such as CSV or JSON) within 30 days of a verified request, with one possible 30-day extension on notice. There is no fee for the first request in any 12-month period; a reasonable fee may apply to manifestly unfounded or excessive duplicate requests, in line with applicable law. Quebec residents also have the right to be informed about automated decision-making that produces legal or significant effects (see "Automated Processing and Decision Support" above for details).

To exercise any of these rights, contact privacy@axamy.com.

Your Privacy Rights

GDPR Rights (EU and UK Users)

If you are in the European Union, the European Economic Area, or the United Kingdom, you have the right to:

• Request access to your Personal Data
• Request correction of your Personal Data
• Object to processing of your Personal Data
• Request erasure of your Personal Data
• Request restriction of processing
• Request the transfer of your Personal Data (data portability)
• Withdraw your consent at any time
• Lodge a complaint with your supervisory authority

Legal bases for processing include: performance of a contract (to deliver the Service), legitimate interests (to maintain and improve the Service, and to operate marketing activities where appropriate), consent (for advertising and marketing cookies, and other purposes where required), and compliance with legal obligations.

For privacy inquiries, including GDPR matters, contact privacy@axamy.com. Axamy has designated a Privacy Officer (see "Privacy Officer" section above) who is the primary point of contact for privacy-related requests across all jurisdictions.

CCPA / CPRA Rights (California Users)

If you are a California resident, you have the right to:

• Know what personal information is collected about you
• Know whether your personal information is sold or shared and to whom
• Opt out of the sale or sharing of personal information for cross-context behavioral advertising
• Request deletion of your personal information
• Correct inaccurate personal information
• Limit the use of sensitive personal information
• Receive equal service and pricing, even if you exercise your privacy rights

Axamy does not sell personal information for monetary consideration. However, our use of advertising cookies and pixels on our marketing site may constitute "sharing" for purposes of cross-context behavioral advertising under the CPRA. You can opt out of this sharing using the cookie consent banner on axamy.com or by enabling Global Privacy Control (GPC) in your browser, which we honor as a valid opt-out signal.

To exercise any other CCPA/CPRA rights, contact privacy@axamy.com. We will verify your request and respond within the timelines required by applicable law.

Children's Privacy

Outside of authorized Educational Institution use (see "Education Customers" above), Axamy is not directed to children, and we do not knowingly collect personal information from minors without appropriate consent.

• Children under 13 (United States): We comply with COPPA. We do not knowingly collect personal information from children under 13 without verifiable parental consent or, in K to 12 educational settings, school-authorized consent.
• Minors under 14 (Quebec): Under Quebec Law 25, we do not knowingly collect, use, or disclose personal information of a minor under 14 without the consent of the person having parental authority, except where collection is clearly for the minor's benefit as defined by Law 25.
• Minors aged 14 to the age of majority (Quebec): Consent may be given by the minor or by the person having parental authority, in accordance with Law 25.
• Other jurisdictions: Where applicable law sets a different age threshold or consent standard for minors, we apply the more protective standard.

If you believe a minor has provided us with personal information without proper consent, contact privacy@axamy.com and we will take steps to delete it.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page, updating the "Last updated" date at the top, and, for material changes affecting customer data, providing notice to account administrators by email at least 30 days before the change takes effect.

You are encouraged to review this Privacy Policy periodically for any changes. For changes affecting how we process your data on the basis of consent (such as marketing communications, optional cookies, or processing of sensitive personal information), we will obtain fresh consent before the change takes effect. For other updates, your continued use of the Service after changes are posted constitutes acknowledgement of the updated policy.

Contact Us

• Privacy inquiries, access requests, deletion requests, or any other matter related to this Privacy Policy: privacy@axamy.com
• Education and Enterprise customers requesting a Data Processing Addendum (DPA), regional hosting, or other contractual arrangements: privacy@axamy.com
• General support: support@axamy.com