Privacy Policy

1. Overview

Axiom ("Axiom," the "Service," "we," "us," or "our") is a remote-access and remote-display software product based in the State of New York, United States. Throughout these documents, "you" and "your" refer to the individual or entity that accesses or uses Axiom.

This Privacy Policy explains what information we collect through our websites, applications, and software, how we use and share it, and the rights and choices you have. We aim to collect the minimum information reasonably necessary to provide a secure, working service. This Policy is designed to be consistent with the EU/UK General Data Protection Regulation (GDPR) and U.S. state privacy laws such as the California Consumer Privacy Act (as amended by the CPRA).

2. A note about your remote sessions

We do not watch your sessions or store their contents.

Axiom connects your devices to stream screen video, audio, input, files, and clipboard data. That session content is transmitted between the connected devices and is protected in transit by encryption. We do not record, view, or retain the contents of your remote sessions (for example, what is on your screen, your keystrokes, or the files you transfer). When a direct peer-to-peer connection is not possible, encrypted session traffic may pass through a relay (TURN) server so the connection can be established; the relay forwards encrypted traffic and does not decrypt or store your session content. We do process limited technical metadata about connections, as described below.

3. Information we collect

Information you provide

• Account information — such as your email address and authentication details, handled through our third-party authentication provider when you create an account.
• Waitlist / marketing information — the email address (and any details) you submit to join the waitlist or contact us.
• Payment information — if you purchase a paid plan, our third-party payment processor collects and processes your payment details. We do not store full card numbers; we receive limited billing metadata (such as the last four digits, card brand, and billing country).
• Support communications — information you include when you contact us, such as your email and the contents of your message, and any log files you choose to share.

Information we collect automatically

• Connection and session metadata — to establish and secure connections and to operate the Service, we process technical data such as IP addresses of connecting devices, device identifiers (device IDs), device and system statistics (for example, operating system, CPU type, and screen resolution), and the time, duration, and status of sessions.
• Security and audit logs — we keep tamper-evident logs of security-relevant events (such as device enrollment and connection attempts) to protect the Service and investigate abuse.
• Website and product analytics — we use analytics tools (see our Cookie Policy) to understand usage, such as pages visited, referring URL, approximate location derived from IP, device/browser type, and interactions. Some of this is collected via cookies and similar technologies.
• Marketing attribution — we store campaign parameters (such as UTM tags and ad-click identifiers) and a randomly generated client identifier in your browser's local storage to understand which campaigns bring visitors to us.

4. How we use information

• To provide, operate, secure, maintain, and improve the Service;
• To establish and relay connections between your devices;
• To create and manage your account and process payments;
• To communicate with you about the Service, respond to support requests, and send waitlist and product updates you have asked for;
• To detect, prevent, and investigate fraud, abuse, security incidents, and violations of our Terms and Acceptable Use Policy;
• To understand usage and improve our product and marketing; and
• To comply with legal obligations and enforce our agreements.

Where GDPR applies, our legal bases are: performance of a contract (to provide the Service you request); legitimate interests (to secure, operate, and improve the Service and prevent abuse); consent (for non-essential cookies and certain marketing, which you may withdraw at any time); and legal obligation.

5. Cookies and similar technologies

We and our providers use cookies, local storage, and similar technologies for essential functions (such as keeping you signed in), analytics, and measuring marketing. You can control non-essential cookies through our cookie banner and your browser settings. See our Cookie Policy for details.

6. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising as those terms are defined under U.S. state privacy laws. We share information only as follows:

• Service providers (sub-processors) — companies that perform functions on our behalf under contract, such as cloud hosting and network relay, authentication, payment processing, analytics, and email. They may process your information only to provide services to us. Our current providers include, for example, our hosting/relay infrastructure provider, our authentication provider, our payment processor, and our analytics providers.
• Legal and safety — when we reasonably believe disclosure is required by law, legal process, or governmental request, or is necessary to protect the rights, property, or safety of Axiom, our users, or the public, or to investigate abuse or violations of our Terms.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy or a successor policy.
• With your direction or consent — when you ask us to share information or otherwise consent.

7. International data transfers

We are based in the United States, and our providers may process information in the United States and other countries. If you access the Service from outside the United States, you understand that your information may be transferred to and processed in countries whose data-protection laws may differ from yours. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for such transfers.

8. Data retention

We keep personal information only as long as necessary for the purposes described in this Policy — to provide the Service, comply with legal obligations, resolve disputes, prevent abuse, and enforce our agreements — after which we delete or anonymize it. Retention periods vary by data type; for example, security and audit logs are kept for a limited period appropriate to their security purpose, and account data is kept while your account is active.

9. Security

We use technical and organizational measures designed to protect information, including encryption of session traffic in transit, access controls, and security logging. However, no method of transmission or storage is completely secure. Given the nature of the internet, we cannot guarantee absolute security, and you use the Service at your own risk. You are responsible for keeping your credentials, device IDs, and connection passwords secure.

10. Your rights and choices

Depending on where you live, you may have some or all of the following rights: to access the personal information we hold about you; to correct inaccurate information; to delete your information; to obtain a portable copy; to restrict or object to certain processing; to withdraw consent; and, under U.S. state laws, to opt out of the "sale" or "sharing" of personal information (note: we do not sell or share it) and to not be discriminated against for exercising your rights.

To exercise any of these rights, email us at Showersafes@gmail.com. We will verify and respond to your request as required by applicable law. You may also have the right to lodge a complaint with your local data-protection authority. You can manage cookie choices through the cookie banner and your browser, and you can unsubscribe from marketing emails using the link in those emails.

11. Children's privacy

The Service is not directed to children and is intended only for users 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, contact us at Showersafes@gmail.com and we will delete it.

12. Third-party sites and services

The Service may link to or rely on third-party websites and services that we do not control. Their privacy practices are governed by their own policies, and we are not responsible for them.

13. Changes to this Policy

We may update this Policy from time to time. We will update the "Last updated" date and, for material changes, provide additional notice where appropriate. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

14. Contact us

For privacy questions or to exercise your rights, contact Axiom at Showersafes@gmail.com.