Privacy Policy

The short version

Axiom brings the accounts you connect — Gmail, Google Calendar, Google Drive, Google Classroom, Google Tasks, Canvas, Outlook, and Notion — into one calm command center. Axio, our assistant, runs on your device by default. We do not sell your data, and we do not use your content to train AI models. You can export or delete your data at any time.

What we access, and why

We request only the permissions needed for the features you use, and you grant them through each provider's own consent screen:

• Gmail — read messages to summarize and triage; mark read/archive; send a reply only when you confirm it.
• Google Calendar — read events and deadlines to build your Today board.
• Google Drive — read files you connect (and documents your assignments link to); create and edit only the documents Axio makes for you (the drive.file scope — we cannot see files Axio didn't create).
• Google Classroom & Tasks — read your courses, coursework, announcements, and to-dos.
• Canvas — read assignments and announcements via your own session, with no admin keys.
• Outlook & Notion — read mail, calendar, and pages you connect, to bring them into the same unified view.

How Axio uses AI

Axio runs on a small model on your own device by default — your content stays on your machine for those features. If you turn on cloud backup or connect your own model key (e.g. OpenAI), the specific request is sent to that provider to generate the response, under their terms. We never send your data to any AI provider to train their models, and we don't train our own models on your content.

Where your data lives

Synced items are stored in your private account on our infrastructure (Supabase), protected by row-level security so only you can read them. Access tokens are stored encrypted and used solely to read the accounts you connect; they are never shared. Data is encrypted in transit (TLS) and at rest.

Google user data & Limited Use

Axiom's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer or use Google user data for advertising, and we do not allow humans to read it except with your explicit consent, for security, or as required by law.

Payments

Subscriptions and the Axio AI License are processed by Stripe. We don't store your full card details — Stripe handles payment data under its own terms. We keep a record of your plan, purchase, and (for the AI License) your reserved-access status so we can deliver what you bought.

Your controls

• Export — download everything Axiom holds about you as JSON from Settings → Privacy.
• Disconnect — revoke any single connection at any time.
• Delete — permanently erase all synced items and disconnect every account from Settings → Privacy. You can also revoke Axiom's access from your Google account permissions.

Data retention

We keep your synced items while your account is active so the app works. When you delete your data or close your account, we remove it promptly (within 45 days), except where we must retain limited records to comply with law.

Students & education data

Axiom is a consumer product you choose to connect to your own school accounts; we act on your behalf at your direction. We handle coursework and class data with the same care as the rest of your data and never use it for advertising. Schools or districts seeking a data-protection agreement (e.g. for FERPA) can contact us at the address below.

Children

Axiom is not directed to children under 13, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

Changes & contact

We'll post any material changes here and update the date above. Questions or requests: privacy@tokenio.io.