Skip to main content

Legal

Privacy Policy

What we collect, how we use it, and who we share it with. Short, plain-language summary now; the counsel-reviewed full document is available on request.

Last updated: 2026-04-26 · In draft

We collect only what's necessary to operate Axion Studio: your account email, the photos and brand assets you upload, the generations and approvals you make, and standard product analytics (page views, clicks, performance metrics).

We process your data on Google Cloud Platform in us-central1 (multi-region GCS for object storage, Cloud SQL Postgres in us-central1 for the relational database). EU data residency in europe-west1 lands with the multi-region rollout in Phase 6 (Week 16).

We use a small set of subprocessors to deliver the product — see /legal/subprocessors for the full list. Each subprocessor has its own data access scope, documented there.

We never sell your data. We never use your reference assets or generated outputs to train any model that serves another customer. Your brand LoRA is workspace-isolated at the database layer (Postgres Row-Level Security on every domain table).

You can export your data at any time via the dashboard's export bundle (LoRA, reference set, audit log, generation lineage). On account deletion we delete your data within 60 days, except where retention is required by law (e.g. invoice records, security incident logs).

For questions, data subject access requests (GDPR Article 15), or to invoke your right to erasure (Article 17), email legal@axionminds.com — we respond within one business day.

This document is in draft.

We're working with counsel on the final version. For the current signable copy — which we provide for any Agency-tier engagement and above — email legal@axionminds.com. We respond within one business day.

Subprocessors live at /legal/subprocessors — that page is up to date.