Axelio Privacy Policy

Account information. Name, email address, phone number, role, and password (stored hashed, never in plain text) when you or your company administrator creates an account.

Company operational data. Information your company enters or connects to run its fleet: trucks, trailers, loads, drivers, dispatch records, maintenance, compliance dates, invoices, and documents.

Bank account data via Plaid. If your company connects a bank account, we use Plaid Inc. to link it. Through Plaid we receive account balances and transaction history — we use this only to show your company its cash position and to match deposits to invoices. We never see or store your online banking username or password; credentials are provided directly to Plaid. We do not initiate payments or move money. We treat bank-derived data as confidential financial information: it is used only to provide the service, shared only with the subprocessors listed below, and protected with safeguards consistent with the principles of the Gramm-Leach-Bliley Act. Plaid's handling of your data is described in the Plaid End User Privacy Policy.

Connected company email (Google/Gmail). If your company connects a Gmail or Google Workspace mailbox, we request only Google's "send email on your behalf" permission (gmail.send). We use it to send invoices, load updates, and operational messages from your company's own address instead of a generic Axelio address — so replies and message history stay in your own mailbox. We do not request, and cannot use, permission to read your inbox, search your existing mail, or access messages already in your account. Every message sent through a connected mailbox also lands in that mailbox's own Sent folder, so you can review everything Axelio has sent. You can disconnect a mailbox at any time in Settings, which immediately revokes Axelio's access at Google.

Integration data. If your company connects third-party services (telematics/ELD providers, accounting software such as Intuit QuickBooks, messaging), we receive the data those integrations provide (e.g. vehicle locations, hours of service, accounting records, chat messages relevant to dispatch).

Usage and device information. Standard technical logs (IP address, browser/device type, pages viewed, timestamps) used for security, debugging, and improving the product.

• To provide the service: dashboards, dispatch, accounting, compliance tracking, notifications, and AI-assisted operations features.
• To keep the service secure: authentication, fraud and abuse prevention, audit logging.
• To support you: responding to requests and diagnosing problems.
• To improve the product, using aggregated or de-identified information where practical.

We do not sell personal information. We do not use your company's operational or financial data for advertising.

Axelio includes AI features that process your company's operational data (for example, summarizing fleet status or drafting messages). Data sent to our AI model providers is used to generate responses for your company and is not used by us to train public models.

We share information only with service providers ("subprocessors") needed to run Axelio — hosting and databases, bank connectivity (Plaid), accounting export (Intuit QuickBooks), AI model providers, transcription, SMS/email delivery, Google (for sending email through a connected company mailbox, if your company chooses to connect one), and telematics integrations your company chooses to connect — and, if ever required, to comply with law or protect the rights and safety of our users. Each provider receives only the data needed for its function.

Account and company data are retained while your company's account is active.

• You can delete your individual account in the app (Profile → Delete account). Company administrators can request deletion of the entire company workspace by contacting us.
• Upon verified deletion requests we remove personal data from active systems within 30 days, except records we must keep for legal, tax, or security-audit purposes, which are kept only as long as required. Copies in encrypted backups are not individually purged; they expire automatically as backups age out of our backup-retention cycle.
• Bank connections can be disconnected at any time in Settings; disconnecting deletes our stored access token, requests revocation of the connection at Plaid, and stops all further data retrieval. Transactions already imported remain part of your company's financial records until you request their deletion.
• Connected email mailboxes can be disconnected at any time in Settings; disconnecting deletes our stored access token and revokes Axelio's access at Google immediately. Messages already sent remain part of your company's records.

Data is encrypted in transit (TLS) and at rest. Access is role-based and limited to what each user's job requires. Administrative changes and automated actions are recorded in tamper-resistant audit logs. Our full information-security program is described in our Information Security Policy, available to customers on request.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information — including under the California Consumer Privacy Act (CCPA/CPRA) if you are a California resident. We do not sell or share personal information as the CCPA defines those terms. Email us (directly or through an authorized agent) and we will honor verified requests within 30 days; we verify requests against the account's registered email. We do not discriminate against anyone for exercising privacy rights, and if we decline a request you may appeal by replying to our response.

Axelio is a business tool and is not directed to anyone under 16. We do not knowingly collect information from children.

If we make material changes, we will notify customers in the app or by email before the changes take effect, and update the effective date above.

Axelio Inc — contact@axelio.app