Privacy Policy
Last updated 21 June 2026
This is a convenience translation. Axon is a Brazilian company and the binding version of this document is the Portuguese one, at axon-dev.com/privacy and axon-dev.com/terms; in case of any divergence, the Portuguese text prevails.
This Policy explains how Axon handles personal data, in compliance with Brazil's data protection law (LGPD, Law 13.709/2018). We take privacy seriously: it is part of the product.
1. Data we handle
Account data (name, team email) and the conversation transcripts you send for evaluation. We don't ask for more than we need.
2. PII redaction before evaluation
Before anything is stored and before anything reaches the judge, Axon automatically redacts PII from the transcripts (email, tax IDs, phone, card, postal code, keys). The judge never sees raw data.
3. BYOK and the path of the data
Evaluations run on the customer's own AI provider key (BYOK). The transcript — already redacted — is sent to that provider under the provider's terms. Axon does not use your data to train models.
4. Subprocessors
We use Supabase (database/auth) and Vercel (hosting). The AI provider is chosen by you (BYOK). Each one handles data under its own terms.
5. Data residency
Application data is stored on managed infrastructure (Supabase). Specific residency requirements are handled in the diagnostic contract.
6. Retention and deletion
The retention window for conversations is configurable and applied automatically: transcripts older than the limit are purged. When an account is closed, its data is removed. You can request deletion at any time.
7. Your rights (LGPD)
You may access, correct, port and delete your data, and withdraw consent. To exercise these rights, write to our data protection officer (DPO).
8. Security
Encryption in transit and at rest, provider keys encrypted (AES-256-GCM), role-based access and least privilege.
9. Data protection officer (DPO) and contact
Privacy requests: gabrielspaulinod@gmail.com.