Privacy policy

1. Who we are

Panaxus is a company based in the United States: [Company legal name], [Street address, City, ZIP], [State]. You can reach us at support@panaxus.io.

2. Two roles: controller and processor

• Website and demo requests. For the personal data you give us on this website (for example when you book a demo), Panaxus decides how the data is used. We are the controller.
• Client systems. When a business uses a Panaxus system, the data it puts in (about its staff, clients and work) belongs to that business. The business is the controller; Panaxus processes the data on its behalf as a processor, under a data processing agreement.
• Basic usage of client systems. To run and support the service, Panaxus records basic usage: who is signed in, which part of the app they use, and for how long.

3. What we collect on this website

• Demo requests: your name, company, email address, phone number (optional), industry, team size, what you would like to improve, and how you prefer to be contacted.
• Technical data: the page the form was sent from, your browser type (user agent) and, for spam protection, your IP address for a short time.
• Emails you send us and the replies we exchange.

We do not use advertising or analytics cookies on this website. See our cookie policy.

4. Why we use it, and on what basis

• To respond to your demo request and plan the demo (your consent and our legitimate interest in answering you).
• To prepare and follow up a proposal if you ask for one (steps before entering into a contract).
• To keep the website and forms safe from abuse (legitimate interest).
• To meet legal obligations, for example record-keeping (legal obligation).

We do not sell personal data, and we do not use it for automated decision-making.

5. Where data is stored

Client systems are stored in the client’s region: for clients in the European Union, data is stored in the EU. Data from this website may be processed in the United States. When personal data from the EU is transferred outside the EU, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

6. Service providers (subprocessors)

We use a small number of trusted providers to run our services:

Each provider only receives the data it needs for its task and is bound by a contract to protect it.

7. How long we keep it

We keep demo requests for as long as needed to follow up, and at most 24 months after our last contact, unless you become a client. Client data is kept for the duration of the agreement and deleted or returned afterwards, as set out in the data processing agreement.

8. Security

We protect personal data with technical and organisational measures, including role-based access so people only see what they need, and private, invite-only login links for each client system.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict its use, and to withdraw consent at any time. Residents of the EU/EEA have these rights under the General Data Protection Regulation (GDPR); residents of some US states (such as California) have similar rights under state law. To use your rights, email support@panaxus.io. If you are in the EU, you may also complain to your local data protection authority.

If you are a member of staff or a customer of one of our clients, please contact that business first: it controls the data in its own system. We will help them respond.

10. Data processing agreements

Data processing agreements (DPAs) are available for all clients. Ask us at support@panaxus.io.

11. Changes

We may update this policy. The date at the top shows when it last changed.