Skip to content

Privacy

Privacy policy

How Axieo Technologies Inc. collects, uses and protects personal information. We collect as little as we can, and we never sell it. Last updated: November 9, 2026.

In short

  • We use what you send us only to reply to you and deliver our services.
  • Forms are delivered to us by email. The website doesn't store them.
  • Payments are handled by Stripe. We never see your full card number.
  • We count visits with cookie-less statistics that can't follow you from day to day.
  • No tracking cookies, no advertising and no third-party trackers.
  • We never sell or rent personal information.

Who we are

Axieo Technologies Inc. ("Axieo", "we") is a Canadian company based in Toronto, Ontario. This policy covers axieo.ca and the personal information we handle when you contact us, buy from us, or engage us for an audit. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Our Privacy Officer is accountable for this policy. Contact: info@axieo.ca (subject: "Privacy").

What we collect, why, and where it goes

Request an audit, Free Mini Scan and contact forms

What
Name, email, company (optional), the service you choose, your message, budget and timeline, your app or repository address, how you heard about us (optional), and your confirmation that you may authorize testing
Why
To reply to you, scope and quote the work, and keep a record of what you asked for
Where
Sent to us by email through Resend. The website itself doesn't store form submissions.

Chat assistant

What
The messages you type
Why
To answer your question
Where
Answered on our server. When the live AI assistant is enabled, your messages are also sent to Anthropic to generate the answer. We don't save chat conversations.

Payments (Axieo Guard audits and care plans, the PlainChain course)

What
Your name, email, billing address and payment details
Why
To take payment, send receipts, manage subscriptions and start the work you bought
Where
Entered on Stripe's secure pages. We never see or store your full card number. Stripe sends us your name, email, the plan and the amount.

Emails you send us

What
Whatever you include
Why
To reply and deliver our services
Where
Received at info@axieo.ca through Cloudflare Email Routing and kept in our email account

Technical data

What
IP address, browser type, the page requested and the time
Why
To run and secure the website, and to limit abuse (for example, too many form submissions)
Where
Our hosting provider's standard logs. IP addresses used for rate limiting are kept as short-lived counters, in our server's memory or in our rate-limit store (Upstash), and deleted automatically, at most about an hour later.

Visit statistics

What
The page you visit, the site that sent you (referrer), campaign tags in the link (utm_ parameters only; we remove any other part of the address before it is sent), your approximate location (country or city), and your browser, operating system and device type
Why
To count visits and see which pages and links bring people to the site
Where
Vercel Web Analytics. It uses no cookies. Visitors are counted with an anonymous code that resets every 24 hours, so you can't be followed from one day to the next or across websites, and the statistics aren't tied to your IP address.

Audit engagements

What
Code, settings and findings that you share with us under a signed authorization
Why
To perform the audit you asked for
Where
Handled under your service agreement and our audit data rules. We never copy your users' personal data.

By sending a form, an email or a chat message, or by buying from us, you consent to these uses. We don't use your information for anything else without asking you first.

What we don't do

  • We don't use cookies, advertising or third-party tracking on axieo.ca. Our visit statistics are cookie-less and anonymous (see "Visit statistics" above). Our fonts are served from our own site.
  • We don't sell, rent or trade personal information.
  • We don't add you to a mailing list or send marketing emails unless you ask us to.
  • The live security demo on our homepage runs entirely in your browser. Nothing you type there is sent to us.

Service providers

We use a small number of trusted providers to run the website and our business. They process information for us under their own privacy policies:

  • Vercel: Website hosting and cookie-less visit statistics (Vercel Web Analytics) (privacy policy)
  • Resend: Delivers form submissions and notifications to our inbox (privacy policy)
  • Stripe: Payments, receipts and subscriptions (privacy policy)
  • Anthropic: The AI model behind the chat assistant, when the live assistant is enabled (privacy policy)
  • Upstash: Short-lived rate-limit counters keyed by IP address (deleted automatically after at most an hour), and Stripe event IDs kept for 24 hours so payment notices aren't sent twice (privacy policy)
  • Google: Email (Gmail) and our private records of enquiries, leads and partners (Google Sheets) (privacy policy)
  • Cloudflare: Domain name service and email routing for info@axieo.ca (privacy policy)

Some of these providers store or process information outside Canada, including in the United States. There it may be subject to the laws of that country, including lawful access by its authorities.

How long we keep it

  • Messages and requests that don't lead to an engagement: up to one year, then deleted.
  • Audit working files (copies of code, evidence): deleted after the engagement, as described in how we audit.
  • Signed agreements, invoices and payment records: as long as Canadian law requires (generally six years for tax records).
  • Chat messages: we don't store them.
  • Visit statistics: kept by Vercel for the reporting period of our plan, without anything that identifies you.

You can ask us to delete your information sooner, except where the law requires us to keep it.

How we protect it

We limit access to the people who need it, keep client files on access-controlled devices and out of public code repositories, use HTTPS everywhere, and test only with written authorization. No system is perfectly secure, so if a breach involving your personal information ever creates a real risk of significant harm, we'll tell you and report it as PIPEDA requires.

Your choices and rights

You can ask us to:

  • tell you what personal information we hold about you and how we use it;
  • correct it if it's wrong;
  • delete it, or stop using it (withdraw consent), subject to legal requirements.

Email info@axieo.ca. We reply within 30 days. If you're not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

Children

Our website and services are for businesses and are not directed at children. We don't knowingly collect information from anyone under 16.

Changes to this policy

If we change how we handle personal information, we'll update this page and its date. For significant changes, we'll also tell current clients directly.

Last updated: November 9, 2026.