Legal and Trust

Privacy Policy and Data Protection Notice

This Privacy Policy governs how AiXO collects, uses, stores, protects, and discloses personal and business information when you access our website, submit forms, request assessments, register deals, or engage in pre-sales services.

This policy is designed for IT Services and Consulting engagements and is aligned to enterprise procurement expectations: lawful processing, minimum necessary collection, transparent purpose limitation, controlled retention, and auditable access.

Effective Date

March 3, 2026

Version

v2.0 Enterprise

Applies To

All Website Workflows

Jurisdiction Focus

Global B2B Compliance

1. Scope and Data Controller Context

AiXO operates as a B2B pre-sales operating system for IT Services and Consulting firms. This website is intended for business users. By using this site, you acknowledge that your data may be processed for engagement qualification, governance workflows, and commercial communication.

Policy Item	Statement
Service Context	Pre-sales strategy, solutioning, proposal governance, and partner-led pursuit workflows.
Data Subject Type	Business users, partner representatives, prospective client stakeholders, and authorized delegates.
Controller Function	AiXO determines purpose and means of processing for site interactions and related commercial workflows.
Contact Route	Use official website forms for privacy requests, correction requests, and processing objections.

2. Data We Collect and Why

We collect only the data required to deliver legitimate pre-sales workflow outcomes. Collection categories and legal basis are listed below.

Data Category	Examples	Primary Purpose	Legal Basis
Identity and Contact	Name, work email, company, role, phone (if provided).	Respond to requests, set meetings, deliver requested assets.	Legitimate interest and pre-contractual necessity.
Commercial Context	Engagement preference, plan interest, service line, opportunity data.	Scope qualification, decision-pack preparation, and pursuit governance.	Legitimate interest and contract performance.
Usage and Diagnostics	Device/browser metadata, session activity, page interaction patterns.	Security hardening, UX quality, and platform reliability.	Legitimate interest and security obligation.
Assessment Inputs	Maturity and ROI form responses, operating assumptions.	Generate analytical outputs, recommendations, and planning artifacts.	Consent and legitimate interest.

3. Cookies, Local Storage, and Tracking Signals

Essential Processing

Security, navigation continuity, session control, and basic form operations.

Measurement Processing

Attribution context, performance diagnostics, and conversion-path quality analysis.

Preference Processing

Remembering selected options and consent states to avoid repetitive prompts.

Control

You can clear cookies/local storage at any time via browser settings. If cleared, some workflow continuity features may reset.

4. Sharing, Disclosure, and Transfers

We do not sell personal information.
Data may be shared with authorized delivery personnel strictly on a need-to-know basis.
Service providers may process data under contractual confidentiality and security obligations.
Data may be disclosed to comply with legal obligations, lawful requests, or fraud-prevention duties.
Where cross-border processing occurs, we apply contractual and technical safeguards appropriate to risk level.

5. Security, Retention, and Deletion

Security Controls

Access control with least-privilege principles.
Encryption in transit where infrastructure supports HTTPS/TLS.
Monitoring, hardening, and abuse prevention safeguards.
Confidentiality controls for partner-led and white-label engagements.

Retention Model

Data is retained only for operational, legal, and audit purposes.
Inactive records are periodically reviewed and minimized.
Deletion/anonymization is executed when retention purpose ends.
Regulatory and dispute-related holds may extend retention where required.

6. Your Rights

You may request access, correction, deletion, restriction, portability, or objection where applicable law provides such rights.

Access and correction of business contact and engagement records.
Objection to processing based on legitimate interest where justified.
Request deletion when data is no longer required for stated purposes.
Withdraw consent for consent-based processing at any time.

Requests are handled through official AiXO web forms and validated before actioning.

7. I Accept: Consent Acknowledgement

By selecting I accept, you confirm that you have read this Privacy Policy and agree to data processing for the purposes described above, including communication regarding your submitted requests and engagement workflows.

8. Policy Updates

We may update this policy to reflect legal changes, service changes, risk posture improvements, or operational updates. Material updates will be reflected on this page with an updated effective date.

Back to Home