Privacy Policy

Privacy Policy

What data Axana AI collects, why, where it is stored, and how users control it.

Part 01 / Privacy Policy

Privacy Policy

What data Axana AI collects, why, where it is stored, and how users control it.

Published ataxanaai.ca/privacy
01

Information We Collect

Account information you provide (such as name, business name, and email) and, once you connect the Third-Party Accounting platform, the accounting data required to provide the Service: customers, invoices, estimates, payments, vendors, bills, employees, time activity, items, chart of accounts, reports, and company information. We also store the OAuth tokens issued by the Third-Party Accounting platform.

02

Why We Collect It

We collect and process this data only to provide the synchronization and automation services you request — for example, creating invoices, recording payments, posting vendor bills, logging time activity, and displaying financial reports. We do not use the Third-Party Accounting platform data for advertising, and we do not sell it.

03

How We Access the Third-Party Accounting Platform

Access is granted by you through OAuth 2.0. We never receive or store your Third-Party Accounting platform username or password. We call the Third-Party Accounting platform API using tokens that you authorize and can revoke at any time.

04

Where and How Data Is Stored

Data is stored on secured cloud infrastructure. All data is encrypted in transit (TLS/HTTPS) and encrypted at rest. OAuth tokens are stored encrypted and are accessible only to the processes that call the Third-Party Accounting platform API on your behalf.

05

Sharing With Third Parties

We do not sell your data and do not share it with third parties except: (a) your Third-Party Accounting platform integration; (b) infrastructure and service providers who process data on our behalf under confidentiality obligations; and (c) where required by law.

06

How We Protect Your Data

We use encryption in transit and at rest, least-privilege access controls, and monitoring. Access to production data is limited to authorized personnel. In the event of a security incident affecting your data, we will notify affected users without undue delay.

07

Data Retention

We retain your data only for as long as needed to provide the Service or as required by law. When you disconnect your Third-Party Accounting platform or close your account, we stop accessing your Third-Party Accounting platform and revoke the stored tokens.

08

Your Rights and Data Deletion

You may request access to, correction of, or deletion of your data at any time by emailing info@axanaai.ca. You may also revoke Axana AI’s access to your Third-Party Accounting platform at any time from your Third-Party Accounting platform or from the Axana dashboard. Upon a verified deletion request, we will delete your data from our systems within a reasonable period, except where retention is required by law.

09

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email, and the updated policy will be posted at axanaai.ca/privacy.

10

Contact

For any privacy question or data request, contact info@axanaai.ca.