Privacy Policy

1. Data We Collect

Account data: name, email, password hash (Argon2id, managed by Better Auth).

Usage data: lab session activity (spawn/stop/heartbeat), IP address, user agent.

Lead data: if you submit the early-access or B2B contact form: name, email, company, message.

Free teaser (“Aximo”) data: when you use the free in-browser demo we record your IP address, approximate location derived from it (country, region, city), browser/device details (user agent) and a device fingerprint, the number of attempts you make, and any email you submit. This is used to prevent abuse of the free lab, enforce the free-attempt limit, and understand where our audience is.

2. How We Use Data

Account data: authentication and access control. Usage data: lab orchestration, security monitoring, and SIEM logging. Lead data: responding to inquiries and notifying you when the course launches. Free-teaser data: abuse prevention (detecting attempts to bypass usage limits), rate limiting, and aggregate marketing analytics (which regions our visitors come from).

3. Data Sharing & Processors

We do not sell your personal data. We use a small number of processors to run the service: email delivery (Resend) for account and verification emails, and an IP-geolocation lookup (ip-api.com) to derive approximate location from the IP addresses of free-teaser visitors. B2B inquiry data may be shared with the Attaxium sales team internally.

4. Data Storage & Retention

Data is stored in PostgreSQL on managed infrastructure and on local lab infrastructure for session management. Logs are shipped to an internal SIEM.

Free-teaser records from visitors who did not sign up (no email submitted) are automatically deleted after 90 days. If you submit an email you become a lead and your contact details are retained until you ask us to remove them or we no longer need them.

5. Your Rights

You may request access, correction, or deletion of your personal data by contacting privacy@attaxium.com. We will respond within 30 days.

6. Cookies

We use httpOnly, Secure session cookies for authentication. No tracking or analytics cookies are used.

7. Contact

Questions about this policy? Contact privacy@attaxium.com.