[legal] /privacy · rev 1.0
Privacy Policy.
Effective Date: July 26, 2026. Axioo, Inc. ("Axioo," "we," "us," or "our") operates the Axioo mobile application, a platform connecting startup founders, investors, and viewers through short-form video pitches.
This Privacy Policy explains how Axioo, Inc. collects, uses, shares, and protects your personal information when you use the Axioo application and related services (the "App"). By using the App, you acknowledge the practices described here.
If you have questions, contact us at prabhathsrinivas@axioo.co.
Information We Collect
Account & Profile Information
When you create an account, we collect your email address, account credentials, full name, username, and selected role (Founder, Investor, or Viewer/Team Member). You may optionally provide a profile photo, bio, location (free-text you enter — we do not access GPS or device location), and a LinkedIn URL.
- Founders may additionally provide: company name, tagline, website, logo, industry, vision statement, monthly revenue, user count, growth rate, and runway.
- Investors may additionally provide: firm/fund name, investment thesis, check size range, target industries/stages, geographic focus, and portfolio companies.
- Team Members are linked to a founder's startup with an assigned role and permission status.
Please do not submit sensitive personal information (such as data revealing health, racial or ethnic origin, religious or political beliefs, or sexual orientation) in free-text fields like your bio, vision statement, messages, or pitch content. We do not request this information and do not want you to provide it.
Account Credentials
We use a third-party authentication provider (Supabase) to manage sign-in. Your password is stored only as a securely salted, one-way cryptographic hash — we never store or have access to your plaintext password.
Business Verification Information
Founders seeking a "Certified" badge may submit their company registration number, registration country, and company email address. We use this information solely to verify business legitimacy, including sharing registration details with OpenCorporates, a third-party company-registry lookup service. We do not use this data for any other purpose.
User-Generated Content (UGC)
We store the videos, thumbnails, and metadata of pitches you post (startup name, tagline, category, funding stage, funding ask, valuation, equity offered, use of funds), comments you write, update posts (text/image/video) you publish, and direct messages (including file attachments) you exchange with other users.
Media and Biometric Notice
We store the photos and videos you upload or record as ordinary media files. We do not use facial recognition, generate faceprints or other biometric identifiers, or otherwise perform biometric analysis on your photos or videos. If we ever introduce any feature that would collect or process biometric information, we will provide advance notice, obtain your explicit, separate written consent before collection, and publish a biometric data retention and destruction schedule, as required by applicable law.
Usage & Interaction Data
We collect interaction data within the App: likes, saves, swipes, shares, follows, and video-viewing behavior (watch duration and completion rate). We use Mux, a video-hosting and analytics provider, to host pitch videos and measure playback quality; Mux receives your user ID, app version, and video playback telemetry as part of this service.
Device Diagnostics
At sign-up and during app usage, we log basic device diagnostics: device model, operating system version, and app version.
Device Permissions
The App requests access to your Camera, Microphone, and Photo Library solely to let you record or upload video pitches and avatar photos. We access these assets only when you actively trigger a recording or uploading feature. We do not access your device location, contacts, calendar, or health data.
How We Use Your Information and Our Legal Bases
We use the information we collect for the purposes below. For users in the European Economic Area (EEA), the United Kingdom, and other regions requiring a legal basis, the applicable basis under the GDPR is noted for each purpose.
| Purpose | Legal Basis (GDPR) |
|---|---|
| Create and manage your account and authenticate your session | Performance of a contract |
| Operate core features: video feed playback, posting, liking, saving, commenting, messaging, and following | Performance of a contract |
| Present founder pitches and profiles to investors and viewers, and vice versa | Performance of a contract |
| Verify business identity when a founder requests certification | Consent; legitimate interests in platform trust |
| Process content reports and block actions; review reported content and remove objectionable content or terminate violating accounts | Legitimate interests in safety and legal compliance |
| Send in-app notifications (likes, comments, follows, messages, team requests) | Legitimate interests; consent where required |
| Maintain and optimize video playback performance and system reliability | Legitimate interests |
| Detect and prevent abuse, fraud, and violations of our Terms | Legitimate interests; legal obligation |
We review reported content promptly (typically within 24 hours) and enforce a zero-tolerance policy for objectionable content, consistent with app-store safety requirements.
We do not use your data for third-party advertising, and we do not sell or "share" your personal information as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA).
How We Share Your Information
- With Other Users: Your name, username, avatar, bio, and any published pitch/post/comment content are visible to other users consistent with your role. Direct messages are private and accessible only by the conversation participants.
- Service Providers (Processors): We use Supabase (database, authentication, and file storage) and Mux (video hosting and analytics) to operate the App. These providers process data strictly on our behalf under contractual data-protection terms.
- Business Verification: Company registration details submitted by founders are shared with OpenCorporates solely to verify business legitimacy.
- Legal Compliance & Safety: We may disclose information if required by law, legal process, or in a good-faith belief that disclosure is necessary to protect the rights, safety, or property of Axioo, our users, or the public.
- Business Transfers: If Axioo is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.
We do not sell your personal information to third parties.
Data Retention & Account Deletion
We retain your personal information for as long as your account is active, plus any additional period required to comply with legal obligations, resolve disputes, or enforce our agreements.
You can delete your account at any time via Settings → Delete Account inside the App. When you delete your account, we promptly remove your profile, pitches, comments, posts, likes, and saves from our active systems. Please note the following limitations:
- Backups: Residual copies may remain in our encrypted backups for up to 30 days before being overwritten in the normal backup cycle.
- Direct messages: Messages you sent remain visible to the other participant(s) in a conversation, as they are also part of the recipient's data.
- Third-party providers: Data held by processors such as Mux may be deleted on their own retention schedules following our deletion request.
- Legal retention: We may retain limited information where required by law or for legitimate business purposes such as fraud prevention and financial record-keeping.
Once these processes are complete, your personal data is permanently removed and cannot be recovered.
Your Privacy Rights
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Access a copy of the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your data ("right to erasure").
- Port your data to another service in a machine-readable format.
- Object to or restrict certain processing.
- Withdraw consent at any time, where processing is based on consent (this does not affect prior processing).
- Opt out of the sale or sharing of personal information and of targeted advertising (we do not engage in these, but you retain the right).
- Non-discrimination for exercising your rights.
- Lodge a complaint with your local data protection authority (for EEA/UK users) or applicable regulator.
To exercise any of these rights, contact us at prabhathsrinivas@axioo.co. We will respond within the timeframe required by applicable law (generally 30–45 days). We will verify your identity before fulfilling a request. You may use an authorized agent where the law permits.
In-app self-service: You can review and update your profile anytime under Settings → Edit Profile, and manage Camera, Microphone, or Photo Library access via your device settings (Settings → Axioo).
International Data Transfers
Our primary server infrastructure is located in the United States. If you access the App from outside the United States, your information will be transferred to and processed in the United States and other countries where our service providers operate.
For transfers of personal data from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum. You may request a copy of the relevant safeguards by contacting us.
Data Security
We employ industry-standard security measures to protect your information, including encrypted network transport (HTTPS/TLS), encryption of data at rest, salted one-way hashing of passwords, and row-level security (RLS) policies on our database. No method of transmission or storage is 100% secure, but we work to protect your information and to notify you and regulators of any breach affecting your personal data as required by law.
Children's Privacy
Axioo is intended solely for users aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided us with personal information, please contact us immediately at prabhathsrinivas@axioo.co and we will delete it.
Changes to This Policy
We may update this Privacy Policy periodically. We will post the revised version with an updated "Effective Date," and we will provide in-app notice of material changes before they take effect.
Contact Us
If you have questions or requests regarding this Privacy Policy or your data, contact us at:
Axioo, Inc.
Email: prabhathsrinivas@axioo.co