1. Overview
This policy covers the Axinofy website and our services. We collect the information needed to respond to you, evaluate and deliver projects, and run the Website. We do not sell or rent personal information. The Website code does not load advertising pixels or third-party analytics scripts.
Individual Axinofy products may have their own privacy policies, linked at the end of this page.
2. What We Collect and Where It Goes
2.1 Contact and Support Forms
The contact form collects your name, email address, and message. The support form collects your name, email address, subject, category, priority, optional product, and description. We send these to our inbox by email. Contact and support submissions are not saved to our database by the Website.
2.2 Service Inquiries and Enrollment Audit Requests
Service inquiries collect your name, email address, optional phone number, business or center name, website URL, project brief, timeline, and notes. Enrollment audit requests collect your name, business or center name, email address, website URL, optional Google Business Profile or location link, and notes, plus whether you opted in to marketing messages. These requests are saved to our database and sent to our inbox. We use them to assess fit, prepare audits or proposals, and contact you about your project.
2.3 Blog Updates and Waitlists
If you subscribe to blog updates, we save your email address as an active subscriber right away. There is no confirmation step for blog subscriptions. Waitlist signups save your email address; a confirmation step is optional and is off by default.
2.4 Website Analytics
We record a small set of first-party events: viewing a service page, viewing the pricing section, opening a sample demo, and selecting a consultation button. Each record can include the local page path (no query string or hash), a service or package identifier, a short label, and campaign values from the link you followed (UTM source, medium, and campaign). Campaign and identifier values must be simple lowercase codes. Email addresses, URLs, and free text are rejected and not stored.
To avoid counting repeat requests, each event stores a deduplication value: a SHA-256 hash of your IP address, browser user agent, and event details. The raw IP address and user agent are not written to analytics records. Our server still receives them for each request, to apply rate limits and compute the hash. A hash is pseudonymous, not anonymous. It can still relate to your device or network, and IP addresses are few enough in number that a hash can be matched by guessing.
Analytics records are scheduled for automatic deletion 90 days after they are created, through a database index. Deletion is not instant, and we do not guarantee that a record is removed at a particular moment. The index must exist in the production database for this to work, and we verify it during launch checks. Without it, records are not removed automatically.
Rate-limit counters track request volume over a short time window. Counters are held in server memory for each running instance. When shared limits are enabled, they are stored in the database under a keyed hash of the request identifier, not the raw IP address or user agent. Those counters expire through a database index; the same index check applies. Removal of an expired counter is not immediate, and we make no guarantee about its timing.
3. Browser Storage and Cookies
- Display theme:Your light or dark theme choice is stored in your browser's local storage.
- Analytics de-duplication: Your browser session storage remembers which view events were already sent, so repeat views are not counted.
- Staff sign-in: A sign-in cookie is used only for Axinofy staff accessing the admin area. It is HTTP-only, uses the SameSite=Strict setting, and expires after 24 hours.
The Website code does not set advertising cookies.
4. Sample Demos and Children's Information
Our interactive daycare demo uses sample data and runs entirely in your browser. Its form does not send anything to our servers. Its age-group and tour-window fields are for illustration only.
- The Website and our forms are intended for adults: parents, guardians, and business owners. They are not directed to children under 13.
- Our forms do not ask for a child's name, birth date, medical or immunization information, identification numbers, or payment card details.
- If you believe a child's personal information was submitted through the Website, email us at axinofy912@gmail.com. We will review the request and delete any such information we find in our systems.
5. Service Providers
We use these providers to run the Website and our services:
- Database: MongoDB, which stores the service, audit, subscriber, waitlist, and analytics records described above.
- Email: Resend, or an SMTP mail server, depending on how the Website is configured. Email carries your messages to our inbox and any messages we send you.
- Hosting: The Website is hosted on the platform configured for each deployment. Admin-uploaded media is stored in Vercel Blob when that storage is configured.
- Agreements: Indy, where a project agreement is executed through it.
- Fonts and icons: The Website loads its icon font from Google Fonts. When your browser requests that font, Google may receive standard network and browser information, such as your IP address and user agent.
6. Retention
Analytics records are scheduled for automatic deletion after 90 days (see Section 2.4). We have not yet set a retention schedule for contact and support emails, service and audit requests, blog subscribers, or waitlist entries. Those records are kept until they are deleted manually.
7. Your Choices and Requests
- Waitlist messages: Waitlist emails include an unsubscribe link. You can also manage your waitlist entry at /waitlist/unsubscribe using the link in your email.
- Blog updates and other requests: Email us to unsubscribe, to ask what personal information we hold about you, to correct it, or to ask us to delete it.
We handle these requests by hand and do not guarantee a fixed response time. Requests are sent to axinofy912@gmail.com.
8. Security
We protect the Website with the controls described on our Security & Data Practices page. No system can be guaranteed to be secure.
Product Privacy Policies
Our specialized products process different types of user data and require specific permissions. Please review the dedicated privacy policies for each product using the links below:
9. Contact Us
Questions about this policy or how we handle data can be sent to: