Privacy

Last updated 6 September 2026

Axiom Orbit is used by digital agencies to review the websites of clients they already work with. This page says what the service stores, what leaves it, and who else processes it. It describes the software as built, not an intention.

What we store about you

• Your account. Email address, name, a hashed password, and session records. Passwords are never stored in a readable form.
• Your workspace. Its name, and optionally an agency name and logo you save for use on proposals.
• Your client records. For each client you add: name, website domain, the offerings you record, your own notes, and optionally a typical job value. This is information you enter, about businesses you already work with.
• Analysis results. The findings produced for each client, the evidence they rest on, your decisions about them, and the outcome you record.

What we read from client websites

When you run an analysis, the service makes ordinary HTTP requests to the public pages of the website you named — the same requests any browser or search engine makes. It identifies itself as AxiomOrbitBot with a contact address, reads and obeys that site’s robots.txt, and requests at most a few dozen pages per analysis. It does not sign in, submit forms, execute JavaScript, or attempt to reach anything not publicly served.

It stores the parts of those pages the analysis needs: titles, headings, link targets and anchor text, meta descriptions, structured-data types, image alt attributes, form shapes, and word counts. A page we were asked not to read is recorded as unread, never as empty.

Who else processes this data

• Cloudflare hosts the service and stores its database. All data described above lives there.
• Resend delivers email. It receives the recipient address and the message.
• DeepSeek is the AI provider. Two separate features send it data, and they send different things; the inventory below says exactly what each one sends.

What leaves the service, feature by feature

This list is per feature on purpose. An earlier version of this page described one feature’s narrow transfer as though it covered the provider, which was not true of the catalog assistant — and that feature sends data about your agency, not about a client.

• Candidate evaluation (DeepSeek). When an analysis judges whether a candidate finding is genuinely sellable work, it sends the client’s business name, their website domain, the single subject being judged — for example the words “heat pump installation” — and the bounded supporting evidence needed to judge it. It does not send your notes, your catalog, or your prices.
• AI catalog assistant (DeepSeek). When you ask it to draft your service catalog, it sends the summary you write and, if you give it your agency website, the URL, page title, headings and short text excerpts of the public pages it read there. This is information about your agency. Nothing it proposes is saved until you review the names, descriptions and prices.
• Account email (Resend). Verification links, password resets and team invitations: the recipient address and the account or recovery content of the message.
• Monitoring digest (Resend). Where monitoring is enabled and email delivery is configured: the recipient address you set, and a summary of what changed across the clients in your portfolio.

What a provider does with what it receives is governed by that provider’s own terms, which we cannot observe from here and therefore do not restate as a promise.

What we do not do

We do not sell data, share it with advertisers, or use it to train models. We do not use tracking or advertising cookies; the only cookie the service sets is the one that keeps you signed in. Workspaces are isolated from one another at the database level — no workspace can read another’s data.

Getting your data out, and deleting it

You can export everything in your workspace at any time from Settings. The export excludes authentication records and secret values. Deleting a client removes that client and everything derived from them. To close an account and delete a workspace entirely, email us and we will do it.

Retention

Your data is kept while your account is open. Evidence and analysis history are retained so the service can tell what changed on a client’s site over time — which is the point of monitoring — and are removed when you delete the client or the workspace.

Contact

Questions about this page, or a request about your data, go to privacy@getaxiom.ca. See also our terms of service.