Complete data sovereignty and zero AI model training.

Account & Contact Details: Name, business email, organization name, billing address, and phone number when you register.

Operational & Financial Telemetry: Transactional metadata, invoice amounts, timestamp logs, and system performance metrics necessary for ERP reconciliation.

Agent Task Execution Context: Prompts, workflow rules, and approval actions configured by authorized workspace users.

ADXO CRM employs dedicated zero-retention inference endpoints with our AI infrastructure partners. Your prompts and business context are never logged, stored, or retained by third-party model providers.

Fine-tuned models or custom workflow heuristics created within your enterprise workspace remain exclusively accessible to your authenticated organization.

To deliver core ERP functionalities including automated reconciliation, lead scoring, invoice dispatching, and agent task scheduling.

To prevent fraud, verify multi-factor authentication, and monitor for unauthorized intrusion or anomalous API behavior.

To comply with legal obligations including tax reporting, audit trails, and government e-invoicing standards.

Infrastructure Providers: Amazon Web Services (AWS) and Google Cloud Platform (GCP) for isolated cloud compute and encrypted object storage.

Payment Processors: Stripe Inc. and localized payment gateways for PCI-DSS Level 1 compliant payment settlement.

We never sell, rent, or monetize your personal or business data under any circumstances.

Customers may select regional hosting zones during workspace provisioning (US-East, EU-Central Frankfurt, or GCC-Riyadh).

For transfers between the EEA, UK, Switzerland, and third countries, we execute EU Standard Contractual Clauses (SCCs) and UK IDTA.

Customer Data is retained for the duration of the active subscription plus a 30-day grace period following account closure.

Upon written request or automated workspace de-provisioning, all tenant databases, backups, and encryption keys are permanently destroyed within 30 days.

Right of Access & Portability: Request a structured JSON export of all personal data held in your account.

Right to Rectification: Correct inaccurate or outdated company and user profile information.

Right to Erasure ('Right to be Forgotten'): Request irreversible deletion of all personally identifiable records.

We maintain SOC2 Type II compliance, continuous penetration testing, 2FA/SSO enforcement, and automated audit trails.

If you have questions regarding this Privacy Policy or wish to execute a Data Processing Addendum (DPA), please contact our Data Protection Officer at privacy@adxocrm.com.