Privacy Policy

Aexon respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, process, disclose, and protect personal information when you visit the Aexon website, create an account, use our applications, connect third-party integrations, or use any services provided through Aexon.

Aexon provides business communication and automation tools, including WhatsApp automation, CRM and pipeline management, social media management, booking workflows, customer communication, and related business tools.

This Privacy Policy should be read together with our Terms of Service, Acceptable Use & Anti-Spam Policy, Data Processing Agreement, Refund & Cancellation Policy, and Cookie Policy.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected or processed through:

• The Aexon website
• Aexon web applications
• Aexon mobile applications, where applicable
• Aexon APIs and integrations
• Customer support and communications
• Account registration and subscription services
• Other services or features that link to this Privacy Policy

When you use Aexon on behalf of a business, organization, or other entity, additional privacy terms may apply based on your organization's agreement with Aexon.

2. Information We Collect

The information we collect depends on how you interact with Aexon and which features you use.

2.1 Information You Provide

You may provide information such as:

• Name
• Email address
• Phone number
• Business name
• Business address or location
• Business registration information
• Account and login information
• Billing and subscription information
• Information provided when contacting support
• Information submitted through forms
• Information contained in customer records, CRM records, or other content you upload
• Other information you voluntarily provide while using Aexon

2.2 Information Collected Automatically

When you access or use Aexon, we may automatically collect certain technical and usage information, including:

• IP address
• Browser type
• Device type
• Operating system
• Login information
• Date and time of access
• Pages, screens, and features used
• Service activity and usage information
• Error and diagnostic information
• Performance information
• Security-related information

We use this information to operate, secure, maintain, and improve Aexon.

2.3 Information From Third-Party Services

If you connect a third-party service to Aexon, we may receive information from that service based on the permissions you provide.

Depending on the integration and functionality you enable, this may include:

• Account information
• Contacts
• Messages
• Phone numbers
• Files and documents
• Images, audio, or video
• Social media information
• Calendar or booking information
• Delivery and interaction information
• Other information necessary to provide the connected feature

You control which integrations you connect to Aexon and may revoke permissions through the relevant third-party service or your account settings, where supported.

3. Mobile Application Permissions

If you use an Aexon mobile application, certain features may require access to information or functionality on your device.

Depending on the features you use, this may include access to:

• Contacts
• Photos and images
• Audio
• Video
• Documents
• Other device features required by a particular function

For example, contact access may be required for CRM or messaging features, while access to photos or documents may be required when you choose to upload those files.

You can manage or revoke application permissions through your device settings. Revoking a permission may prevent the related feature from working correctly.

4. Google User Data

If you connect a Google account or use a Google service through Aexon, we may access Google user data based on the permissions you grant.

The information accessed depends on the specific Google service and Aexon feature you choose to use.

Google Account Information

This may include:

• Name
• Google account email address
• Profile picture
• Other basic account information made available through the permissions you grant

Google Service Data

If a feature requires access to services such as Google Contacts or Google Drive, Aexon may access the relevant information necessary to provide that feature.

We request only the permissions reasonably necessary for the functionality you choose to use.

How We Use Google User Data

Google user data is used only to provide or improve the Aexon functionality that you actively use.

For example, if you connect Google Contacts to support a CRM or messaging feature, relevant contact information may be used to help you manage or communicate with contacts through that feature.

We do not use Google user data for:

• Targeted advertising
• Personalized advertising
• Interest-based advertising
• Retargeting
• Selling information to data brokers
• Providing information to information resellers
• Determining creditworthiness
• Lending purposes
• Any purpose unrelated to the core functionality of the Aexon feature for which the data was accessed

We do not sell, rent, or commercially exploit Google user data.

We do not use Google user data to serve advertisements or send promotional communications unrelated to the functionality you have chosen to use.

Our access to and use of Google user data is intended to comply with applicable Google API requirements, including the Google API Services User Data Policy and its Limited Use requirements.

5. How We Use Your Information

We use personal information for purposes including the following.

Providing Aexon Services

We may use information to:

• Create and manage your account
• Provide the features and services you request
• Operate WhatsApp automation
• Provide CRM and pipeline functionality
• Manage customer and contact information
• Provide booking and workflow functionality
• Connect third-party integrations
• Process messages and communications
• Provide customer support
• Maintain and improve the service

Account and Billing

We may use information to:

• Process subscriptions
• Process payments through our payment providers
• Generate invoices
• Manage billing
• Communicate about your subscription
• Maintain account records

Service Communications

We may send service-related communications, including:

• Account verification messages
• Sign-up confirmations
• Security notifications
• Billing notifications
• Account-related WhatsApp messages
• Service announcements
• Important policy updates
• Other communications necessary to provide the service

These are operational communications and are not intended to be promotional marketing messages.

Security and Abuse Prevention

We may process information to:

• Detect and prevent fraud
• Prevent unauthorized access
• Protect Aexon and its users
• Detect spam and abuse
• Investigate security incidents
• Enforce our Terms and policies
• Maintain the security and integrity of our services

Product Improvement

We may use aggregated or appropriately de-identified information to understand service usage, troubleshoot problems, analyze performance, and improve Aexon.

We do not use de-identified or aggregated information to identify individual users.

Legal Compliance

We may process information where necessary to:

• Comply with applicable laws
• Respond to lawful requests
• Meet regulatory obligations
• Resolve disputes
• Enforce agreements
• Establish, exercise, or defend legal rights

6. WhatsApp and Business Messaging

Aexon provides features that allow businesses to communicate with customers and contacts through WhatsApp and other supported messaging channels.

Depending on the features you use, Aexon may process:

• Contact names
• Phone numbers
• Message content
• Message metadata
• Message delivery information
• Message interaction information
• Templates
• Campaign information
• Customer records
• Media
• Other information required to provide the messaging functionality

When a business customer uses Aexon to communicate with its own customers or contacts, that business customer is generally responsible for determining the purpose of processing and ensuring that it has the necessary rights, permissions, notices, and lawful basis to process that information.

Businesses using Aexon must comply with applicable privacy laws, WhatsApp and Meta requirements, and Aexon's Acceptable Use & Anti-Spam Policy.

Aexon does not guarantee delivery of messages or continued availability of third-party messaging services because those services are operated or controlled by third parties.

7. Our Role When Processing Customer Data

Aexon may process two broad categories of information.

Information About Aexon Users

When we collect information directly from you to create and operate your Aexon account, manage billing, provide support, maintain security, or communicate with you, Aexon determines how that information is processed.

Information Managed by Our Business Customers

Aexon customers may upload or manage information about their own customers, leads, contacts, employees, or other individuals through Aexon.

For this information, the Aexon customer generally determines:

• Why the information is collected
• What information is collected
• How it is used
• How long it should be retained

In these circumstances, Aexon generally acts as a data processor/service provider on behalf of the relevant business customer.

Our processing of such information is governed by the applicable customer agreement and, where applicable, our Data Processing Agreement.

If you have received a message from a business using Aexon, you should generally contact that business regarding questions about how it collected or uses your information.

8. Legal Basis for Processing

Where applicable law requires a legal basis for processing personal information, we may rely on the following legal bases.

Consent

Where required, we process information based on your consent.

You may withdraw consent where permitted by applicable law.

Contract

We may process information when necessary to provide services requested by you or perform our agreement with you.

Legal Obligations

We may process information where necessary to comply with legal, regulatory, tax, accounting, or governmental requirements.

Legitimate Interests or Other Lawful Grounds

Where permitted by applicable law, we may process information for legitimate business interests such as:

• Security
• Fraud prevention
• Service improvement
• Abuse prevention
• Customer support
• Business administration
• Enforcement of agreements
• Protection of our rights

9. How We Share Information

We do not sell personal information.

We may share personal information only when reasonably necessary for the purposes described in this Privacy Policy.

Service Providers

We may use third-party service providers that support Aexon's operations, including providers for:

• Cloud infrastructure
• Data storage
• Payment processing
• Email delivery
• Messaging
• Analytics
• Customer support
• Security
• Monitoring
• Other technical services

These providers may process information on our behalf and are required to follow appropriate confidentiality and data protection obligations.

Third-Party Integrations

When you choose to connect a third-party integration, information may be shared with that provider as necessary to operate the integration.

Your use of the third-party service is also subject to that provider's own privacy policy and terms.

WhatsApp and Meta

If you use Aexon's WhatsApp functionality, relevant information may be transmitted to Meta or WhatsApp systems as necessary to provide the messaging service.

Legal Requirements

We may disclose information when required or permitted by law, including in response to:

• Court orders
• Government requests
• Legal processes
• Regulatory requirements
• Requests from law enforcement authorities

We may also disclose information when reasonably necessary to protect Aexon, our users, or the public from fraud, abuse, security threats, or other unlawful activity.

Business Transactions

If Aexon is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods may depend on:

• The type of information
• The purpose for which it was collected
• How you use Aexon
• Contractual requirements
• Legal and regulatory requirements
• Security requirements
• The need to resolve disputes or enforce agreements

When information is no longer required, we may delete, anonymize, or securely dispose of it.

For information processed by Aexon on behalf of a business customer, retention and deletion may be determined by the relevant customer and the applicable agreement.

Backups

Deleted information may remain temporarily in backup systems created for disaster recovery and business continuity.

Backup copies are subject to appropriate security controls and are deleted or overwritten according to our backup and retention procedures.

11. Data Security

We implement reasonable technical and organizational measures designed to protect personal information from unauthorized access, loss, misuse, alteration, disclosure, or destruction.

Depending on the service and system involved, these measures may include:

• Encryption in transit
• Encryption at rest, where appropriate
• Access controls
• Authentication and authorization mechanisms
• Role-based permissions
• Logging and monitoring
• Security monitoring
• Backup and recovery procedures
• Infrastructure protections
• Incident response procedures

However, no online service can guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and should notify us promptly if you believe your account has been compromised.

12. Data Breach

If we become aware of a personal data breach involving personal information, we will take reasonable steps to:

1. Investigate and contain the incident.
2. Assess the nature and scope of the breach.
3. Take appropriate remedial and security measures.
4. Notify affected customers or individuals where required by applicable law.
5. Notify relevant authorities where required by applicable law.

Where Aexon processes information on behalf of a business customer, we will cooperate with that customer in accordance with the applicable agreement and applicable law.

13. Your Privacy Rights

Depending on applicable law and your location, you may have rights relating to your personal information, including the right to:

• Request access to personal information
• Request correction of inaccurate information
• Request deletion of personal information
• Withdraw consent where processing is based on consent
• Request information about how your information is processed
• Request portability of certain information
• Object to or restrict certain processing
• Lodge a complaint with a relevant data protection authority

These rights may be subject to legal limitations and exceptions.

If Aexon processes information solely on behalf of one of our business customers, we may refer your request to that customer because the customer may be responsible for determining the purpose of processing.

14. Account and Data Deletion

You may request deletion of your Aexon account or personal information by contacting:

Email: business@aexon.app

We may ask you to verify your identity before processing the request.

Once a valid request has been verified, we will process it within the period required by applicable law and our contractual obligations.

Some information may need to be retained where required by law or where reasonably necessary for security, fraud prevention, dispute resolution, or legal claims.

Information processed on behalf of an Aexon business customer may be deleted according to that customer's instructions and the applicable Data Processing Agreement.

15. International Data Transfers

Aexon and its service providers may process personal information in India and other countries where our infrastructure, integrations, or service providers operate.

Where applicable law imposes requirements for international transfers, we will use appropriate safeguards and comply with applicable legal requirements.

Such safeguards may include contractual protections or other legally recognized transfer mechanisms.

16. Cookies and Similar Technologies

Aexon may use cookies and similar technologies to:

• Keep users signed in
• Maintain sessions
• Remember preferences
• Understand website usage
• Improve service performance
• Analyze traffic and usage
• Maintain security

Where required by law, we will obtain consent before using non-essential cookies or similar technologies.

Please refer to our Cookie Policy for additional information about our use of cookies and similar technologies.

17. Marketing Communications

Where permitted by applicable law, Aexon may send marketing or promotional communications.

You may opt out of marketing communications using the unsubscribe or opt-out mechanism provided in the communication.

Opting out of marketing communications will not prevent us from sending essential service communications, including:

• Security notifications
• Billing information
• Account notifications
• Service notifications
• Important legal or policy updates
• Other communications necessary to operate your account

18. Children's Privacy

Aexon is designed primarily for businesses and is not intended for use by children as account holders.

We do not knowingly collect personal information directly from children for the purpose of creating Aexon accounts.

If you believe that a child has provided personal information to Aexon improperly, please contact us at:

Email: business@aexon.app

Where our business customers process information relating to children through Aexon, those customers are responsible for complying with applicable laws governing such processing.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, data practices, legal requirements, or security practices.

Non-Material Changes

For minor or non-material changes, we may update this Privacy Policy and change the "Last Updated" date.

Material Changes

If we make a material change that significantly affects how we collect, use, or process personal information, we will provide reasonable advance notice before the change becomes effective, where required by applicable law.

Notice may be provided through:

• Email
• An in-app or dashboard notification
• A notice on our website
• Another appropriate communication method

Where appropriate, the notice will include a brief explanation of what changed and why.

Changes Requiring Consent

If applicable law requires fresh or affirmative consent for a new purpose of processing or another material change, we will obtain the required consent rather than relying solely on continued use of Aexon.

Continued use of Aexon may constitute acceptance of contractual changes where legally permitted, but continued use will not be treated as consent where applicable privacy law requires affirmative consent.

Previous Versions

We intend to maintain dated versions of this Privacy Policy so users can review how our privacy practices have changed over time.

20. India

Aexon is intended to comply with applicable Indian privacy and data protection requirements, including the Digital Personal Data Protection Act, 2023, and applicable rules and regulations.

Where applicable, individuals may exercise their rights under Indian data protection law and may raise privacy grievances with Aexon using the contact information provided below.

Nothing in this Privacy Policy is intended to remove or restrict any rights that cannot lawfully be excluded under applicable Indian law.

21. European Union and United Kingdom

Where the GDPR or UK GDPR applies, individuals may have additional rights relating to their personal information.

These may include rights to:

• Access
• Correction
• Deletion
• Restriction
• Data portability
• Objection
• Withdrawal of consent, where applicable

Individuals may also lodge a complaint with their applicable data protection supervisory authority.

Where required, Aexon will use legally recognized safeguards for international transfers of personal information.

22. Australia

Where Australian privacy law applies, Aexon will handle personal information in accordance with applicable requirements, including the Privacy Act 1988 and Australian Privacy Principles.

Individuals may contact Aexon first with privacy concerns. Where applicable, individuals may also contact the Office of the Australian Information Commissioner.

23. United States

Aexon does not sell personal information.

Where applicable U.S. state privacy laws provide additional rights, eligible individuals may exercise those rights subject to applicable law and its exceptions.

Aexon will not discriminate against individuals for exercising privacy rights where prohibited by applicable law.

24. United Arab Emirates

Where UAE privacy law applies, including the UAE Personal Data Protection Law, Aexon will process personal information in accordance with applicable requirements concerning lawful processing, individual rights, security, and international transfers.

25. South Africa

Where the Protection of Personal Information Act (POPIA) applies, Aexon will process personal information in accordance with applicable POPIA requirements.

Where Aexon processes personal information on behalf of a business customer, Aexon will process that information according to the customer's instructions and applicable contractual requirements.

26. Nigeria

Where the Nigeria Data Protection Act applies, Aexon will process personal information in accordance with applicable requirements concerning lawful processing, data subject rights, security, and international transfers.

27. Grievance and Privacy Contact

If you have questions, concerns, complaints, or requests relating to this Privacy Policy or the handling of your personal information, please contact us:
Email: business@aexon.app

Please provide sufficient information for us to understand your request and, where necessary, verify your identity.

Where a request relates to information processed by Aexon on behalf of one of our business customers, we may refer the request to the relevant customer and provide reasonable assistance as required.

28. Contact Us

For privacy questions, data requests, account deletion requests, or other concerns relating to this Privacy Policy, please contact:
Email: business@aexon.app