Who we are
Galloway Digital LLC operates the Axori platform, a tool that helps rental owners keep track of their rentals, available at axori.com. For questions about this policy, contact us at privacy@axori.com.
What we collect
Account information
When you create an account, we collect your name and email address. Signing in is handled by Clerk, our sign-in provider; we never see a password.
Your rentals and documents
The core of Axori is what you choose to add: addresses, purchase prices, rent, expenses, loans, contacts, notes, documents and photos. You own this data. We store it to provide the service. Your records can include other people’s details, such as a tenant’s name on a lease.
Questions you type into chat
When you type a question into Axori’s chat, we keep the question, the page you asked it on, and which answer Axori matched it to. We read these to learn what owners ask and to improve the answers. We do not keep the answers themselves.
Feedback you send
If you send feedback, answer our survey, or give an answer a thumbs-up or thumbs-down, we keep what you send. With a feedback message we also keep the page you were on and your browser type.
Usage and errors
We record a short list of named actions in the app, such as signing up or adding a rental, and errors that happen while you use it. This is collected through PostHog, using a small script that runs in your browser. “Who receives your data” says exactly what PostHog receives.
Payment information
If you subscribe to a paid plan, your payment is handled by Stripe. Axori never stores your card details.
Technical data
Our servers record your IP address, browser type and the pages requested, for security and to keep the service running. If you join the waitlist, we keep your IP address and browser type with your sign-up.
Cookies
We use session cookies required for signing in. Our analytics provider (PostHog) also stores a cookie on axori.com and a browser-storage entry so it can recognize a returning browser. This identifier is a random ID and does not contain your name, email address, or anything you type.
How we use your information
- Provide, maintain, and improve the Axori platform
- Sign you in and keep your account secure
- Work out your rentals’ figures, reviews and projections
- Send you account emails, your monthly email, and pilot updates
- Learn which features and questions matter to owners
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations
We do not sell your personal data. We do not use your data to train AI or machine learning models without your explicit consent.
Who receives your data
We use these providers to run Axori. Each receives only what it needs to do its job.
Google Cloud (hosting, database, file storage and document reading)
Everything you keep in Axori. Your account, rentals and figures are stored in a database on Google Cloud SQL, and your documents and photos in Google Cloud Storage, both in the United States (Iowa). When you upload a document, Google Document AI reads the whole document to fill in its details. Our servers run on Google Cloud Run, which keeps request logs.
Anthropic (backup document reading)
The whole document and its file name, but only when Google Document AI is not set up to read it. Axori is set up to use Document AI, so today Anthropic receives no documents; we list it because our code can send them there.
Clerk (sign-in)
Your email address and name, how you sign in, and your sign-in sessions and devices. If you sign in with Google, Google shares your name and email address with Clerk.
Stripe (payments)
Your name, email address, Axori account ID and subscription, when you subscribe. You type your card details on Stripe’s own page, so they never reach Axori.
Resend (email delivery)
Your email address and name, and the content of each email we send you. Some emails, like your monthly email, include your rentals’ names and figures.
PostHog (product analytics and error reports)
A random ID stored in your browser, your Axori account ID once you sign in, the pages you visit, a short list of named actions (such as signing up or adding a rental, with yes-or-no details and the rental’s ID), reports of errors (from our servers these name the request that failed and why, never what you were saving, and are not tied to your account), and your browser, device and IP address. PostHog does not receive your name, email address, rental addresses, figures, documents or chat questions.
Mapbox (address search and maps)
The address you type when you add a rental, so we can find and confirm it. App pages also load Mapbox’s map styles, which shares your IP address with Mapbox. When you open a rental’s map, your browser asks Mapbox for the map of the area around it, so Mapbox can see roughly where that rental is.
Slack (messages to our team)
Notes to our team about your account: your name or email address with any feedback, survey answers or thumbs-down you send (including the chat question and answer it was about), and any request to download or delete your data. Also new waitlist sign-ups (name, email address, how you found us) and error alerts, which never include what you were saving.
We do not send your data to anyone else. We will update this list when that changes.
How long we keep your data
We keep your data only as long as we need it:
- Your account, rentals, figures, documents and photos: While your account is open. Documents and photos you delete in the app stay in our file storage until then. Deleted with your account.
- Questions you type into chat: While your account is open. Deleted with your account.
- Feedback, survey answers and thumbs on answers: While your account is open. Deleted with your account, along with our team’s Slack messages about them.
- Records of the emails we send you, and your email choices: While your account is open. Deleted with your account.
- Your waitlist sign-up or pilot invitation: Until you ask us to remove it, or delete your account.
- Your requests to download or delete your data: While your account is open. After a deletion we keep only a bare record that a request was made, with nothing that names you.
- Analytics and error reports linked to your account: While your account is open. Deleted with your account.
- Server logs: 30 days.
- Backups: Replaced within 30 days, so deleted data is gone from them 30 days after it is deleted.
- Billing records at Stripe: As long as tax and accounting law requires, even after you delete your account.
When you delete your account we also delete your sign-in at Clerk and your profile and events at PostHog, and cancel any subscription at Stripe. Resend keeps a log of the emails it sent under its own retention rules.
Your rights
Access and portability
You can ask for a copy of everything you have put into Axori: in the app, go to Settings, then Your data, then Download everything, or email privacy@axori.com. We will email you your export within 2 working days.
Correction
You can update your account information and records at any time in the app.
Deletion
You can ask us to delete your account: in the app, go to Settings, then Your data, then Delete account, or email privacy@axori.com. We will email you within 2 working days to confirm, and nothing is deleted before you do. Once you confirm, we delete your account and its data within 30 days. “How long we keep your data” says what remains after that, and for how long.
Opt out of analytics
You can clear or block the PostHog cookie in your browser settings at any time. The site works fully without it. To opt out of usage analytics entirely, contact privacy@axori.com.
People named in your records
If your details are in an Axori owner’s records (for example, as their tenant or contractor), contact privacy@axori.com and we will help.
California residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of personal information. Axori does not sell personal information. To exercise your CCPA rights, contact privacy@axori.com.
EEA and UK residents (GDPR)
If you are located in the European Economic Area or United Kingdom, you have rights under the General Data Protection Regulation including the right to access, rectify, erase, restrict, and port your data, and the right to object to processing. Our legal basis for processing is the performance of our contract with you (providing the service) and legitimate interests (security, fraud prevention, product improvement). To exercise your GDPR rights, contact privacy@axori.com.
Data security
- Encryption in transit (TLS/HTTPS)
- Encryption at rest for stored data
- Access controls limiting which systems and personnel can access data
- Regular security reviews
No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
Children's privacy
Axori is not directed at children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, contact us immediately at privacy@axori.com.
Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new date. For significant changes, we may also send an email notification to the address on your account.
Privacy questions or requests? Contact us.