Privacy Policy

Updated 21/06/2026

This Policy explains how Axon handles personal data, in line with Brazil's LGPD (and GDPR principles). Privacy is part of the product.

1. Data we process

Account data (name, team email) and the conversation transcripts you send for evaluation. We don't ask for more than needed.

2. PII redaction before evaluation

Before persisting and before sending to the judge, Axon automatically redacts PII from transcripts (email, tax IDs, phone, card, postal code, keys). The judge never sees raw PII.

3. BYOK and the data path

Evaluations run on the customer's own AI provider key (BYOK). The (redacted) transcript is sent to that provider under their terms. Axon does not use your data to train models.

4. Subprocessors

We use Supabase (database/auth), Vercel (hosting) and Woovi (PIX payments). The AI provider is chosen by you (BYOK).

5. Data residency

Application data is stored on managed infrastructure (Supabase). Enterprise customers can get data-residency options under contract.

6. Retention and deletion

We keep data while the account is active. On closure, data is deleted. You can request deletion at any time.

7. Your rights (LGPD/GDPR)

You can access, correct, port and delete your data, and withdraw consent. Contact our DPO to exercise these rights.

8. Security

Encryption in transit and at rest, provider keys encrypted (AES-256-GCM), role-based access and least privilege.

9. DPO and contact

Privacy requests: gabrielspaulinod@gmail.com.