Legal

Privacy Policy

Last updated: April 2026

Axodex (Аксодекс ЕООД, a company registered in Bulgaria) operates axodex.com. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under the General Data Protection Regulation (GDPR).

Your data controller is Аксодекс ЕООД, Bulgaria. For any data-related enquiries, contact us at: peter.paunov@axodex.com

What data we collect

We collect personal data in the following ways:

When you complete a form or survey

Your name, email address, and company name
Your responses to assessment questions
We use this to deliver the service you have requested

When you book a call

Your name and email address, via TidyCal
TidyCal processes this data under their own privacy policy

When you visit the website

Standard server logs (IP address, browser type, pages visited, time of visit)
Cookie data (see our Cookie Policy for details)

We do not collect sensitive personal data (health data, financial records, biometric data, or data about minors).

Legal basis for processing

We process your personal data under the following legal bases:

Contract performance - when you purchase an assessment or other service, processing your data is necessary to deliver it
Legitimate interests - for website analytics and improving our services, where this does not override your privacy rights
Consent - for any marketing communications you explicitly opt into

How we use your data

We use your data to:

Deliver the AI Readiness Assessment and other purchased services
Communicate with you about your engagement (scheduling, report delivery, follow-up)
Respond to enquiries submitted through the contact form
Improve the quality of our services using aggregated, anonymised data

We do not sell your data. We do not share your data with third parties for their own marketing purposes.

Third-party processors

We use the following sub-processors to deliver our services. Each is bound by a data processing agreement:

Tally (tally.so) - form and survey collection. Data is processed in the EU.
TidyCal - appointment scheduling. Review TidyCal's privacy policy for their data practices.
Google Workspace - business email. Data is processed under Google's standard contractual clauses.
Anthropic - AI analysis pipeline used to generate assessment reports. We do not send personal data to the analysis pipeline; responses are processed under pseudonymous identifiers.
Framer - website hosting. Data is processed under Framer's privacy policy.

Data retention

We retain your personal data for as long as necessary to deliver the service and meet our legal obligations:

Assessment inputs and reports: retained for 12 months from delivery, then deleted
Contact form submissions: retained for 12 months, then deleted
Booking data: retained per TidyCal's retention policy
Website logs: retained for 90 days

Your rights under GDPR

As a data subject, you have the right to:

Access - request a copy of the personal data we hold about you
Rectification - request correction of inaccurate data
Erasure - request deletion of your data, subject to our legal obligations
Portability - receive your data in a structured, machine-readable format
Restriction - request that we limit how we use your data
Object - object to processing based on legitimate interests

To exercise any of these rights, contact us at peter.paunov@axodex.com. We will respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP): www.cpdp.bg

International transfers

Some of our processors operate outside the EEA. Where data is transferred outside the EEA, we ensure it is protected by appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects when changes were last made. Significant changes will be communicated by email where we hold your contact details.