Privacy Policy
Last updated:
This page states plainly what data of yours this site collects, why it collects it, where it goes, and how you get it back out. It covers the site axiomgo.io. It does not cover the AxiomGO product, which is not open yet.
This text describes what the site does today, checked against the code that is live. It has not yet been through legal review.
Who is responsible for your data
ST-OPERATIONS, SOCIEDADE UNIPESSOAL LDA, tax number 519208935, registered at Avenida República 1910, Condomínio Quinta Patino, Lote 36, 2645-143 Alcabideche, Cascais, Lisbon, Portugal.
This is the entity that decides what happens to your data — what the GDPR calls the controller. To raise anything about privacy, use the waiting-list form on the site: the message reaches a person, not an automated inbox.
What we collect, and where
Only what you type. We buy no lists, we import no contacts from anywhere, and we build no profile of you from other sites.
On the waiting list: your name, email, company and WhatsApp, the language of the page, which of the listed pains you ticked, and whether you asked to join the Living Library. Alongside that goes the address of the page you were on, where you came from, and the campaign tags in the address, when they exist.
On the Living Library form: your name, email, company and role, plus the record that you ticked the consent box. We also store a cryptographic digest of the consent text that was on your screen, so that a year from now it is possible to prove what exactly you agreed to, even if the wording has changed since.
In the conversation with Axis: what you type in the conversation, and the same page context as above. Do not put sensitive data or trade secrets there — it is a text box on a public site.
What we do NOT collect: we do not ask for your address, we do not ask for identity documents, we do not ask for card details, and we use no advertising cookies and no social-network pixels.
What we use it for, and on what basis
To talk to you about the product opening and about the Living Library, and to decide what we build first from the pains people tick. Nothing beyond that.
The basis is your consent: you typed your details into a form that says what they are for, and ticked the box where there is one. You can withdraw that consent at any time, and withdrawing it does not affect what was done before.
We do not sell, rent or pass on the list. We make no automated decisions about you, and we do no profiling.
Who your data is shared with
With the suppliers below, and only those, each doing one thing:
Vercel — serves the site's pages and runs the functions that receive the forms. Technical server logs pass through it.
Atlassian (Trello) — is where each sign-up becomes a card for the team to work from. In practice, this is where your name, email, company and WhatsApp are stored.
OpenRouter — forwards your message to the language model that answers in the Axis conversation. This only applies if you use the conversation.
The internal channel where the team is told a sign-up arrived (today, a Slack or Discord room), whenever that channel is configured. Only the alert goes there: your name, the company, the language and the link to the Trello card. Your email, your phone and the pains you ticked do NOT go, because a team channel gets copied, forwarded and stays searchable forever.
These suppliers process data outside the European Economic Area, including in the United States. That transfer rests on the European Commission's standard contractual clauses and on each supplier's data-processing terms.
Beyond these, we share only where the law or an authority requires it.
How long we keep it
For as long as the waiting list makes sense, and at most 24 months after your last contact with us. After that, or whenever you ask, the record is deleted.
The Living Library consent record is kept for as long as we keep the sign-up it refers to, because it is what proves the sign-up was legitimate.
Your rights
You can ask to see what we hold about you, correct what is wrong, delete everything, take your data with you in a file, limit what we do with it, object to the processing, and withdraw consent.
Once you ask, we answer within 30 days. We charge nothing for it.
If you think we handled your data badly, you can complain to the authority: in Portugal, the CNPD (cnpd.pt); in Brazil, the ANPD (gov.br/anpd).
Cookies and measurement
This site uses no advertising cookies, no social-network pixels, and does not follow you across other sites.
We measure how many people arrive and where they give up using Vercel Analytics, the same supplier that serves this site. It uses NO cookies and keeps no identifier that follows you across sites; what it counts is the page view and three steps of the form, by the name of the step — never what you typed. It is because there is no cookie that this page does not ask your permission to measure.
Your browser keeps a reference to the Axis conversation on your own device, so the conversation does not restart from scratch on each page. That stays on your device and is not read by us.
Security, and what it does not cover
The site is served over HTTPS, and the forms only accept submissions coming from our own addresses. Supplier credentials stay on the server side and never reach the browser.
No system is impregnable, and promising that would be a lie. What we do promise is to notify those affected if there is a breach involving personal data, within the deadline the law sets.
Changes to this policy
When this policy changes, the last-updated date at the top of this page changes with it. A change to what we use your data for is announced to those on the list before it takes effect.