Privacy policy

Axiom Solutions B.V., at Voltastraat 6, 1446 VC Purmerend, the Netherlands, is the controller for our own website, enquiries, accounts, billing and administration of our own services. Contact us at info@axiom-solutions.eu or +31 85 130 83 55.

For customer data in managed software, campaigns and AI agents, Axiom generally acts as a processor on the customer's instructions under the applicable data processing agreement. The customer determines the purposes and lawful basis. We help forward and fulfil rights requests within our assignment. Our own service administration may remain our responsibility.

An independent customer or brand for which we build software or a website has its own responsibilities and privacy notice. Axiom is not automatically the controller for all of that customer's processing.

This policy covers the Axiom website, Axiom Growth Hub, our software and services such as Conservo, Entity One, Vastivo, AI Marketeer, CHIQ Event Suite, RentSuite and Aevora (Funeralhub), and our AI agents and actual integrations, to the extent we offer them and designate this policy as applicable.

Products do not all collect the same data or use the same integrations. Processing depends on the selected feature, package, assignment and connection actually enabled. Product-specific notices, connection disclosures and contractual agreements may supplement this policy.

We receive data directly from you, from your organisation or customer, or from a source explicitly connected for the selected feature. We limit processing to what that feature needs.

Business prospecting and research may use public business websites, directories and other public business sources. Records may include company details, business contact details, sources, contact history, replies and opt-outs. Public availability does not mean unrestricted use: we assess the purpose, lawful basis and applicable communication rules. You can always object to direct marketing or unsubscribe; a limited suppression record may be retained to respect your objection.

• Contact: name, email address, phone number if provided, company, product selection and enquiry content.
• Accounts and organisations: identity, organisation, membership, roles, authorisations and connection status for access and administration.
• Product data: necessary customer and business details, contacts, documents and administrative records, depending on the software and assignment.
• Services: agent instructions, inputs and outputs, support, correspondence, audit reports, snapshots and agreed reporting.
• Contracts and payments: contracts, invoices, payment references, payment status and relevant mandate status. Payments are handled by the payment provider.
• Technical and security data: IP address, request and error information, usage and security logs and necessary session data.
• Cookies and campaigns: cookie choices, permitted website events and campaign data described below.
• Website chat: your messages and answers using public product knowledge; an enquiry may include your contact details, intake answers, conversation and enquiry page. An identifier derived from the IP address may be used to limit abuse. Do not share passwords or unnecessary sensitive information in chat.

We rely on a contract or steps at your request before entering a contract when you are personally a party, to handle enquiries and provide the chosen software or service. For business contacts, support, service administration, security and appropriate business research, we may rely on legitimate interests. We balance those interests against your rights, minimise data and respect objections.

We rely on legal obligations for required financial records and other mandatory processing. We use consent where required for optional tracking and connections. API authorisation limits technical access but does not replace a lawful basis for each processing activity.

As a processor, we follow our customer's lawful instructions. The customer must establish the necessary lawful basis and inform individuals. Merely visiting our website does not constitute consent to all processing.

For Google Ads audits, analysis, reporting and authorised marketing services, the official API may provide account ID and name, campaigns, budgets, status, performance data and conversion statistics. Connections use OAuth tokens and granted permissions; we do not request Google passwords. The active feature determines the data and permissions required.

The app Sem | Ads Specialist | Axiom currently uses Google Ads read-only for analysis and reporting; this agent does not currently modify advertisements. Reports and snapshots may be stored and shared with the authorised customer as agreed, including weekly reporting.

A Google Ads connection does not grant access to Gmail, Drive, Calendar or Sheets. Any other Google feature requires an actually offered feature, specific disclosure of its purpose and data, and appropriate authorisation before use. Website Google Analytics and Google Ads measurement are separate from data obtained from a connected customer account.

Our policy is to use Google API user data only for user-requested, visible features. We follow the Google API Services User Data Policy and its Limited Use restrictions where they apply to the data or scopes, including derived data. We do not sell this data or use protected API user data for our own advertising, retargeting, creditworthiness assessment or training general-purpose AI models. Data from Gmail or similar protected sources must not be repurposed for advertising audiences.

Transfers are limited to necessary providers for the requested feature and cases permitted by the applicable Google policy, with the required consent or legal basis. Human access is also limited to permitted cases, such as your specific agreement, necessary security work or a legal obligation. We do not otherwise share Google user data with third parties.

You can revoke a connection in your Google account's connections page. Revocation stops future access under that authorisation but does not automatically erase stored reports or copies. Use the deletion procedure below for those copies.

• Google API Services User Data Policy
• Google account connections

Authorised features using the official Meta Graph/Marketing API may receive permitted account and business IDs, campaigns, ad sets, advertisements and creatives. These may include text, images, landing URLs, connected Page or Instagram IDs, budgets, status and aggregate performance and conversions. The chosen feature and permissions determine the available information; permissions do not grant unlimited access.

Sem currently uses Meta read-only for analysis and reporting, without advertising mutations. Reports and snapshots are stored within the requested service and reported to the authorised customer. Adspirer is an existing supplementary/fallback advertising analysis service; where used in the assignment, it processes the advertising data needed for that purpose.

Other Page, lead or message access may occur only for an actually enabled feature, following specific disclosure and explicit appropriate authorisation. Sem's advertising analysis does not include private messages or friends lists. We do not sell connected Meta platform data or use it to train general-purpose AI models or for our own advertising audiences outside the requested feature.

Disconnect through Meta/Facebook Settings > Apps and websites or Business integrations; labels depend on the account. Disconnecting revokes access but does not automatically erase stored copies. Use our Data deletion page to request deletion at Axiom. Meta also processes information under its own privacy policy.

• Meta Privacy Policy

Other providers receive data only where the selected service and actual connection require it. Microsoft 365/Outlook supports authorised business email: necessary sender and recipient details, message content and sending or reply information. Accounting integrations such as Exact use contact, document, invoice or accounting data necessary for the connected administration. A software logo or stated integration capability does not mean all integrations are enabled by default.

Mollie handles payment information to process payments and relevant mandates; Axiom receives necessary references and status information for billing and services. n8n processes workflow inputs, instructions, results and execution information for automation. Lovable Cloud provides hosting and data storage for this Axiom environment; the website runs on cloud infrastructure including Cloudflare. Other Axiom products may use providers disclosed specifically for those products.

AI features process the necessary inputs, business information or reporting data to answer or perform the requested task. OpenAI is an actually used AI provider, including through Sem; website chat uses AI through Lovable. Agent conversations, audit reports and snapshots may be stored for service delivery. We limit inputs to the feature and authorised customer. Our policy prohibits use of connected Google/Meta platform data to train general-purpose AI models.

AI outputs can be incorrect or incomplete. Decisions with significant consequences need appropriate human review; this policy does not authorise solely automated decisions with legal or similarly significant effects. Any specific service using such decision-making would require separate information, a valid lawful basis and applicable rights and safeguards.

Submitted website chat enquiries are stored for follow-up; authorised Axiom staff may receive a team notification through Telegram with the enquiry details needed for follow-up. Data is shared only with authorised people, necessary providers, the customer within the assignment or recipients required by law. Where applicable, we agree processing, confidentiality and security terms. We do not sell personal data.

We take appropriate technical and organisational measures, including organisation- and role-scoped access, authorisation checks and protection of connection tokens and other secrets. Access should be limited to people and services that need it for their tasks. No system can guarantee absolute security.

Cloud, payment, platform and AI providers may process data outside the European Economic Area. Transfers must have an appropriate basis and required safeguards, such as an applicable adequacy decision or standard contractual clauses with supplementary measures where needed. The actual providers and contracts for the selected service determine what applies. You can request information about international transfers or a copy of the applicable safeguards at info@axiom-solutions.eu.

We retain enquiries for no more than 24 months after the last contact. If an enquiry becomes an assignment, necessary contract and service data is retained as long as the contract and purpose require; mandatory records follow statutory retention requirements.

Account and product data is retained during use and as necessary for agreed services, settlement or a legal obligation. Customer data managed as a processor follows the customer's instructions and retention arrangements, within the law.

Connection tokens are needed only while the connection is valid and necessary. When authorisation is revoked or no longer needed, we restrict or end access and delete data where applicable. Logs, agent conversations, audit reports and snapshots are retained only as needed for security, service, agreed reporting or establishing and resolving rights and obligations.

We assess deletion or restriction upon an applicable request and when the purpose ends. Deletion at providers and in backups may take practical time; remaining backup copies are protected, excluded from ordinary service use and removed through regular replacement. Data required by law or for a necessary dispute is limited to that purpose. Limited suppression records may remain necessary to prevent unwanted contact.

Necessary storage supports website operation and remembers cookie choices. Google tags load before a choice with Consent Mode v2 set to ‘denied’. This does not mean Google receives nothing: limited cookieless signals may be transmitted as processed by Google Consent Mode, without permission for analytics or advertising cookies.

Our analytics and conversion events are separately gated by your analytics and marketing choices respectively. With analytics consent, Google Analytics 4 measures pages, visits and success events. With marketing consent, successfully stored contact and AI enquiries are measured through Google Ads for conversion measurement and advertising optimisation, using a random submission identifier to prevent duplicates. Entity One demos are measured separately with zero value. Form content, names, email addresses and hashes of those details are not sent in these conversion events.

The signed-in customer portal and administration area are excluded from this website measurement. You can change your choices using Cookie preferences at the bottom of the page. Revocation stops new consent-dependent events; it does not automatically erase data already received by Google or rule out the denied-state signals described above.

• Google: data from partner sites
• Google Privacy Policy

Where applicable, you have rights of access, rectification, erasure, restriction, portability and objection. You can always object to direct marketing. You can withdraw consent without affecting the lawfulness of earlier processing.

Send requests to info@axiom-solutions.eu; no login is required. Include your name/contact address, the product used and the relevant connected account or company so we can locate the data. Do not send passwords, tokens or identity documents. We request only proportionate additional verification if necessary to match information safely to the right person.

We respond within 1 month of receipt. Complex or multiple requests may require an extension of up to 2 additional months; we explain the reason within the first month. We explain what has been deleted, restricted, forwarded or retained under an exception. If your customer or employer is the controller, we help direct the request to them.

You may lodge a complaint with the Dutch supervisory authority, Autoriteit Persoonsgegevens. Our Data deletion page also explains how to revoke Google and Meta connections and request review of stored copies.

• Autoriteit Persoonsgegevens

This policy was updated on 27 October 2026. Material changes are reflected in this policy and, where needed, in the relevant service's disclosures. A new purpose or access is not authorised merely by editing this text: where required we inform you in advance and obtain new consent. Contact info@axiom-solutions.eu with questions.