Privacy Policy

This Privacy Policy explains how AxisOne collects, uses, shares, and protects information when you use the AxisOne platform, websites, and related services (the “Service”). By using the Service, you agree to the practices described here.

AxisOne is built for professional research workflows. It is not configured as a HIPAA-covered system, and you must not submit protected health information (PHI) or other regulated personal data into the Service.

We collect information you provide directly and information generated as you use the Service.

• Account information: name, email, organization, role, and authentication identifiers (managed through our authentication provider).
• Research content: protocols, prompts, documents, manuscripts, and other content you create or upload to use the Service’s features.
• Marketplace and billing data: quote requests, engagement details, and payment metadata (card details are handled by our payment processor, not stored by AxisOne).
• Usage and device data: log data, feature usage, and telemetry used to operate, secure, and improve the Service.

We use information to provide, secure, and improve the Service; to generate AI outputs you request; to match protocols with labs and experts; to process payments; to communicate with you; and to comply with legal obligations. We may use aggregated or de-identified data to improve the quality and reliability of the Service.

Some features send your content to trusted third-party AI providers to generate outputs (for example, protocol design, critiques, and drafting). We also rely on infrastructure, authentication, email, and payment subprocessors to operate the Service. These providers process data on our behalf under contractual confidentiality and security obligations.

Because your content may be transmitted to these providers to deliver features, you must not include PHI or other regulated personal data in your inputs.

We do not sell your personal information. We share information only as needed to operate the Service:

• With labs and expert reviewers you choose to engage, to the extent needed to fulfill a quote, project, or review.
• With subprocessors (AI, infrastructure, payments, email) acting on our behalf.
• When required by law, to protect rights and safety, or in connection with a corporate transaction such as a merger or acquisition.

We retain information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account data, subject to records we are required or permitted to retain.

We use administrative, technical, and organizational measures designed to protect information, including access controls and encryption in transit. No system is perfectly secure, and we cannot guarantee absolute security. You are responsible for safeguarding your account credentials and for not submitting prohibited data such as PHI.

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can manage much of your account information in-product, and you can contact us to exercise applicable rights. We will respond consistent with applicable law.

The Service may be operated and data processed in countries other than where you reside. Where we transfer data internationally, we take steps intended to ensure appropriate safeguards consistent with applicable law.

The Service is intended for professional use and is not directed to children. We do not knowingly collect personal information from children under 18.

We may update this Privacy Policy from time to time. Material changes will be communicated by posting the updated policy with a new “Last updated” date and, where appropriate, additional notice.

Questions or privacy requests can be sent to info@axisone.ai.