Privacy Policy

Who we are

Axiom Labs ("Axiom", "we") provides an AI diligence workspace for private markets. This policy explains what we collect, why, and how long we keep it. Questions go to hello@runaxiom.io.

What we collect

• Account data — name, work email, firm name, declared role and segment, and the access request that preceded your invite.
• Deal content — documents you upload, extracted text and figures, mandate details, buyer records, and questions and answers exchanged in a deal room.
• Buyer-side data — the email address a buyer verifies, NDA acceptance (name, timestamp, version), and their question history for that deal.
• Operational data — model usage and cost per outcome, audit events, email delivery status, support tickets, and coarse request metadata (hashed IP).
• Billing data — handled by Stripe. We store subscription and outcome balances, never full card numbers.

How we use it

• To run the workspace: retrieval, drafting, citations, review and delivery.
• To meter and bill usage, and to reconcile refunds.
• To keep an audit trail of what was sent to whom, and who approved it.
• To notify you about answers, balances, invites, and support replies.
• To detect abuse and to improve accuracy of our own retrieval and verification.

We do not sell personal data, and we do not use your deal documents to train third-party foundation models.

Sub-processors

We rely on a small set of processors, each bound by contract:

• Cloud hosting, database and file storage for the application.
• AI model providers for answer drafting, extraction and embeddings.
• Stripe for payments; Resend-class delivery for transactional email.
• Zoho Desk for support ticketing.

Confidentiality and access control

Deal content is scoped to your account by row-level security. Anonymised tearsheets never contain the company name or seller PII. Data room documents and buyer Q&A are gated behind email verification and, where you require it, a signed NDA. Buyer question threads are isolated per invited buyer.

Retention

Deal documents, chunks and Q&A history are retained while your account is active and for the retention window configured on the mandate. Audit records and billing records are retained for seven years. You can request deletion of a mandate or your account at any time; we remove content within 30 days except where retention is legally required.

Your rights

Depending on your jurisdiction you may request access, correction, export, or deletion of your personal data, and object to certain processing. Email hello@runaxiom.io and we will respond within 30 days. Marketing emails carry an unsubscribe link; transactional emails about your account do not.

Changes

We will post material changes to this page and, for significant changes, email account holders. Continued use after the effective date constitutes acceptance.