Privacy Policy

1. Introduction

Paxanimi, LLC ("Paxanimi," "we," "our," or "us") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your information when you visit our website at paxanimi.ai (the "Site"), submit an inquiry, or engage with us in connection with our professional services.

We provide enterprise cybersecurity consulting, software development, management consulting, and business consulting services. In the course of delivering these services, we handle both publicly available and sensitive organizational data. This policy covers information collected through our website and initial client engagement processes — not data processed under a separate client data processing agreement ("DPA"), which governs our handling of client-owned data during active engagements.

By using the Site or submitting information to us, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue use of the Site.

2. Information We Collect

3. How We Use Your Information

We use the information we collect for the following purposes, each supported by a lawful basis under applicable data protection law:

We do not use automated decision-making or profiling that produces legal or similarly significant effects about you.

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We share data only as described below:

• Service providers: vetted vendors who assist with CRM, email delivery, website hosting, analytics, and application security — each bound by data processing agreements prohibiting use of your data for their own purposes.
• Professional advisors: attorneys, accountants, and insurers under strict confidentiality obligations, where required to operate our business.
• Regulatory and legal compliance: when required by applicable law, court order, or lawful government request. Where permitted, we will notify you prior to disclosure.
• Business transfers: in connection with a merger, acquisition, or sale of substantially all assets, subject to the acquiring entity honoring the commitments in this Policy or obtaining your fresh consent.
• With your consent: for any purpose you have specifically authorized in writing.

Paxanimi does not share client engagement data (data arising from active consulting engagements) through our website infrastructure. Such data is governed exclusively by the applicable client DPA.

5. Data Retention

We retain personal information only as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law:

• Contact and inquiry data: up to 3 years from last contact, unless an engagement begins, in which case the relevant engagement records retention schedule applies.
• Engagement-related data: subject to the applicable client DPA and any statutory record-keeping obligations (typically 7 years for financial records under US law).
• Marketing preferences and consent records: until you withdraw consent or 5 years, whichever is earlier.
• Website analytics: aggregate, anonymized data retained indefinitely; individual session data retained for 13 months.
• Job application data: 12 months from application submission for unsuccessful candidates; for the duration of employment plus applicable statutory period for hired candidates.

Upon expiry of retention periods, data is securely deleted or anonymized in accordance with our data destruction procedures.

6. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Erasure (“Right to be Forgotten”): request deletion of your data, subject to our legal retention obligations.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests or for direct marketing purposes.
• Restriction: request that we restrict processing in certain circumstances.
• Withdraw consent: where processing is based on consent, withdraw it at any time without affecting prior lawful processing.
• Non-discrimination (California residents — CCPA): we will not discriminate against you for exercising CCPA rights.
• Opt-out of sale (California/Colorado/Virginia): we do not sell personal information; no opt-out is required.

To exercise any of these rights, submit a written request to privacy@paxanimi.ai. We will respond within 30 days (or within the timeframe required by applicable law). We may request identity verification before processing your request.

7. Cookies & Tracking Technologies

Our Site uses cookies and similar technologies as follows:

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair Site functionality. Our Site does not respond to Do Not Track (DNT) signals, but we apply the same privacy protections regardless.

8. Security

Paxanimi maintains an information security program commensurate with the sensitivity of the data we process. Measures include:

• SOC 2 Type II certified security controls across people, processes, and technology.
• End-to-end TLS encryption for all data in transit; AES-256 encryption for data at rest.
• Role-based access controls and principle of least privilege for all internal systems.
• Annual third-party penetration testing and continuous vulnerability scanning.
• Employee security awareness training and background screening.
• Incident response plan with defined notification timelines consistent with applicable breach notification laws.

No system is completely secure. In the event of a data breach affecting your personal information, we will notify you and relevant authorities as required by applicable law.

9. International Data Transfers

Paxanimi is headquartered in the United States. If you are located outside the United States, your information will be transferred to, stored, and processed in the US and potentially other countries where our service providers operate.

For transfers from the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms where applicable. A copy of the relevant transfer safeguards is available upon request at privacy@paxanimi.ai.

10. Children's Privacy

Our Site and services are directed exclusively to business professionals and organizations. We do not knowingly collect personal information from individuals under the age of 16. If we learn that we have inadvertently collected information from a minor, we will delete it promptly. If you believe a minor has submitted information to us, please contact us at privacy@paxanimi.ai.

11. Third-Party Links

Our Site may contain links to third-party websites, research publications, or partner portals. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the content or privacy practices of those sites.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the 'Effective Date' at the top of this page and, where appropriate, notify you by email (if we have your contact information) or by prominent notice on the Site.

Continued use of the Site following the posting of a revised Privacy Policy constitutes your acceptance of the changes.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Privacy Team: