This Privacy Policy describes how Axle ("we," "us," or "our") collects, uses, and protects your personal information when you use our website at withaxle.com, our web application at app.withaxle.com, our Framer plugin, and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Information you provide

Account information: When you create an account, we collect your name and email address. If you sign up using Google, we receive your name, email address, and profile photo from Google.

Payment information: When you subscribe to a paid plan, your payment is processed by Polar (polar.sh). We do not store your credit card number or billing details. Polar handles all payment processing and stores your billing information under their privacy policy.

Stripe connection: When you connect your Stripe account through Axle, we store your Stripe account ID and connection status. We do not access or store your Stripe credentials, bank account details, or your customers' payment card data.

Information collected automatically

Transaction data: When payments are processed through your Axle-powered checkout, we record the transaction amount, currency, status, customer email (if provided by Stripe), product name, and the domain where the transaction occurred. This data is displayed in your Axle dashboard.

Usage data: We collect basic usage information such as pages visited, features used, and timestamps to improve the Service.

Device and browser data: We may collect your IP address, browser type, operating system, and device information through standard server logs.

Cookies: We use essential cookies to maintain your session and authentication state. See our Cookie Policy for details.

2. How We Use Your Information

We use your information to:

- Provide, operate, and maintain the Service

- Process your subscription and manage your account

- Display transaction data in your dashboard

- Send transactional emails (account confirmation, password reset, subscription updates)

- Respond to support requests

- Monitor and prevent abuse or unauthorized use

- Improve the Service based on usage patterns

We do not sell your personal information. We do not use your information for advertising purposes.

3. How We Share Your Information

We share your information only in the following circumstances:

Stripe: When you connect your Stripe account, Axle communicates with Stripe's API to facilitate payment processing. Transaction data flows between Stripe and Axle as necessary to provide the Service. Stripe's privacy policy governs their handling of data.

Polar: Your subscription payments are processed by Polar. Polar receives your email address and payment details to process billing. Polar's privacy policy governs their handling of data.

Supabase: We use Supabase for authentication and data storage. Your account data is stored in Supabase's infrastructure. Supabase's privacy policy governs their handling of data.

Resend: We use Resend to send transactional emails. Your email address is shared with Resend for this purpose.

Vercel: The Service is hosted on Vercel. Standard server logs (IP address, request data) are processed by Vercel's infrastructure.

Legal requirements: We may disclose your information if required by law, regulation, legal process, or government request.

4. Data Retention

Account data: We retain your account information for as long as your account is active. If you delete your account, we permanently delete your personal data, transaction history, API keys, domain configurations, and Stripe connection within 30 days.

Transaction data: Transaction records are retained for the duration of your account. Deleted accounts have all associated transaction data permanently removed.

Server logs: Basic server logs are retained for up to 90 days for security and debugging purposes.

5. Data Security

We implement appropriate technical and organizational measures to protect your data:

- All data in transit is encrypted using TLS/SSL

- API keys are hashed before storage — we never store raw API key values

- Authentication is handled through Supabase with secure session management

- Stripe credentials are never stored by Axle — we use Stripe's OAuth Connect flow

- Database access is restricted and monitored

Despite these measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you

Correct inaccurate personal data

Delete your account and associated data

Export your transaction data (available on Pro+ plans via CSV export)

Withdraw consent for optional data processing

To exercise these rights, contact us at support@withaxle.com or delete your account directly from the Settings page in the Axle dashboard.

7. International Data Transfers

The Service is hosted in the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States. By using the Service, you consent to this transfer.

8. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will delete it promptly.

9. Third-Party Links

The Service may contain links to third-party websites or services (such as Stripe, Polar, and Framer). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact

If you have questions about this Privacy Policy, contact us at:

Email: support@withaxle.com