Who we are
MAGNAXIS ("we", "us") operates the Axis assistant and CEO command center at magnaxis.com. The data controller is the operator whose email appears in the Contact section below.
What we collect and why
We collect only what Axis needs to help you:
- Account: name, email, hashed password, role/plan tier, created-at.
- Conversations: the utterances you say or type, the responses Axis generates, and the actions you approve. Retained 180 days by default (adjustable in Settings → Data).
- Approvals + audit: which actions were approved, by whom, at what time. Retained 24 months for compliance.
- Device signals: browser user-agent, IP address, coarse geo (country/region), page views. Used for security (rate limiting, brute-force detection) and product analytics.
- Vision frames (only when you turn on "let Axis see"): analysed in-memory by the multimodal model, temporary files deleted after inference, only a short observation summary persists.
- Billing: Stripe holds card details. We store Stripe customer IDs, plan tier, invoice IDs. We never see your full PAN.
- Cookies: httpOnly auth cookies (session, refresh), a localStorage preference for the consent banner, and a build SHA for cache-busting. No third-party analytics cookies without your consent.
Legal basis (GDPR Art. 6)
Contract (running the service you signed up for), legitimate interest (security, fraud prevention, product improvement), and consent (marketing emails, vision frames, optional analytics). You can withdraw consent at any time from Settings → Data.
Your rights (GDPR + CCPA)
You can:
- Access — download everything we hold about you as JSON:
GET /api/privacy/export. - Delete — erase your account and associated conversations, memory-book, and family docs:
POST /api/privacy/delete. Billing records are retained for the period tax law requires. - Correct — edit your account fields from Settings.
- Object / restrict — email us and we'll pause the disputed processing while we investigate.
- Portability — the export is a machine-readable JSON, no proprietary format.
- Opt out of "sale" — we don't sell, so opt-out is automatic. (CCPA §1798.120)
EU/EEA residents can complain to their national Data Protection Authority. California residents can complain to the California Attorney General.
Retention
We keep data only as long as we need it. Defaults:
- Conversations: 180 days.
- Approval audit log: 24 months.
- Vision observation summaries: 90 days.
- Password-reset tokens: 1 hour (deleted after use).
- Login attempt records: 15 minutes (TTL indexed).
- Billing records: 7 years (tax law).
Security
TLS 1.2+ everywhere. AES-256 at rest in managed MongoDB. Third-party access tokens are wrapped again with per-owner Fernet keys derived from a master key kept outside the database. Owner-only endpoints require TOTP two-factor when enrolled. Rate limiting on every /api/* route.
Children
The Buddy family surface is designed for supervised use. Children under 13 (US) or under 16 (EEA) must have a verified parent approve their account. Purchases and sensitive content are gated behind parental approval by default.
Changes to this policy
If we materially change how we handle your data, we'll email you and post a diff at the top of this page 30 days before it takes effect.
Contact
Data controller: quikygram@gmail.com. We respond to privacy requests within 30 days.