Privacy
Axel is a personal AI agent that works on your behalf. To do that it holds parts of your life: what you tell it, the accounts you connect and what it learns about what matters to you. This policy explains what Axel collects, how it is used and protected, who helps us run it, how long it is kept, and the choices and rights you have.
What Axel collects
- Your account. Your name and email address, and the Apple or Google sign-in you choose, so Axel knows it is you.
- What you share. Your messages, voice notes and calls, and the files, photos and links you send or share to Axel from other apps. A call keeps its transcript in your conversation.
- Axel's memory. Facts and context from your conversations and the sources you share, kept so Axel can help you over time instead of starting from zero.
- Accounts you connect. If you connect Google, Axel can read, search, draft, organize and, when you say so, send your mail; read and change your calendar events; and read your Drive files and contacts (see "Google user data" below). You can also connect iCloud's calendar and contacts, Link for payments you approve, and other services you choose. Axel keeps what it needs to follow up, such as an email's subject, sender and date.
- Your money. If you connect a bank through Plaid, Axel reads your balances and transactions; it cannot move money through that connection. Axel keeps your accounts and balances, transactions, bills and payment schedules, the documents you or Axel keep, your corrections and labels, budgets and plans.
- Logins and cards you save. Saved logins, security answers and payment cards, stored encrypted and used only by Axel's computer to sign in for you or to pay at a checkout you approve.
- Axel's computer. Axel works in a web browser on its own computer. Websites it visits for you may set cookies there, as they would in your own browser. A recording of that screen is kept for a short time so you can see what Axel did.
- The iPhone app. A notification token, so Axel can reach your phone, and how long a call's sound dropped out, so a call can recover.
- This website. If you join the waitlist, the email address you enter.
We do not collect your precise location, and we do not use advertising identifiers or track you across other companies' apps and websites.
How Axel uses it
- To run Axel for you: understand your requests, act on them, follow up, and remember what matters so it can keep helping.
- To keep Axel and your account secure, and to prevent fraud and abuse.
- To operate and fix the service, using operational records.
- To run our business: our team keeps notes about your account, and we count how Axel is used, never what you say.
- To contact you about your account, and, only if you opt in, with tips and news (unsubscribe at any time).
We do not sell your information, we do not use it for advertising, and we do not use it to train AI models.
AI services, and your permission
Axel works by sending what each task needs to the AI services below. Before anything is sent, the app shows you this list and asks your permission. To withdraw, delete your account (below).
- OpenRouter, which passes Axel's requests to the AI model hosts it routes to (such as DeepInfra, Inference.net, Relace and Parasail), limited to hosts that don't store or train on what they're sent. They receive what a request needs: your messages and conversation, Axel's memory of you, files and photos you send, and what Axel reads for you from your connected accounts, websites and bank.
- TypeSafe, which checks a message before Axel sends it to you, against the memory, mail or bank details it rests on.
- OpenAI, which runs voice calls: your voice, Axel's speech and what the call is about.
- Amazon Web Services, which turns Axel's memory of you into a private search index.
Web searches go to search services, which receive the search words Axel writes and may use them to improve their search.
Passwords, card numbers, security codes and the access to your connected accounts are never shown to an AI model.
Who helps run Axel
We share information only with service providers who process it on our behalf, under agreements or terms that limit them to providing their service to us (search services' own use of search words is described above), and only as needed for the features you use:
- AI model providers, which generate Axel's replies, organize its memory, read what a task needs (such as an email you asked about), run voice calls, and help Axel make quick decisions, such as sorting your transactions or noticing which new mail needs your attention.
- Cloud hosting providers in the United States, which run Axel and its computers, store your information, hold the encryption keys that protect saved logins and connected accounts, and build the search index for Axel's memory.
- Plaid, if you connect a bank. Plaid's handling of your bank information is described in its End User Privacy Policy (plaid.com/legal).
- Apple and Google, if you sign in with them, and Apple, to deliver notifications to your iPhone.
- Providers that host our website and deliver our email.
- Services and websites you choose. When you ask Axel to work with a service you connected or a website, it sends that service what the work needs, as you would yourself.
We may also disclose information if the law requires it, to protect the rights, safety or security of you, others or Axel, or as part of a merger or acquisition, in which case this policy continues to apply to it.
Google user data
What Axel accesses. If you connect Google, Axel can access:
- your Gmail messages, threads, attachments, labels and drafts (
gmail.modify); - your calendar events, and the list of calendars you're subscribed to (
calendar.events,calendar.calendarlist.readonly); - your Google Drive files, read-only (
drive.readonly); - your contacts, read-only (
contacts.readonly); - your Google account's email address.
How it is used. Only to provide the features you use in Axel:
- answering about your mail, files, contacts and events;
- drafting, sending and organizing the mail you ask for or approve;
- creating, moving and cancelling the events you ask for;
- copying a Drive file into Axel's workspace when you ask;
- noticing what in your mail and calendar needs your attention;
- remembering what matters from it, so Axel can keep helping you.
Summaries, cards and memories Axel makes from your Google data are treated as Google user data under these same rules.
Who it is shared with. Only the service providers that run Axel for you, and only to do what you asked: our cloud hosting providers, which host and store it, and our AI model providers, which read the parts a task needs. None of them may use it to train AI models. It is never sold, never shared with advertisers or data brokers, never used for advertising, and never used for credit or lending decisions.
AI. The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements. Axel's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Your Google data is never used to develop, improve or train generalized AI or machine learning models, ours or anyone else's. It only personalizes your own Axel.
Protection. Encrypted in transit and at rest. Google's access to your account is held by Axel's own server, encrypted with keys in a key management service, and never given to an AI model. No person at Axel Labs reads your Google data unless you ask us to, it is needed for security or to investigate abuse, or the law requires it.
Keeping and deleting it. Axel keeps what it has used from your Google data while your account is open, so it can keep helping.
- Disconnecting Google in Axel deletes Axel's access at once and asks Google to revoke it. Messages, files and memories Axel already used stay in your conversation until you ask Axel to forget them or delete your account.
- Deleting your account in Settings deletes everything, including all data from Google, within 30 days.
- You can also remove Axel's access from your Google Account's security settings.
How we protect your information
- Everything travels encrypted between your devices, Axel and the services it works with.
- Your account, Axel's memory and data, Axel's computer and every saved copy of it are encrypted where they are stored. Axel's computers' disks, workspaces and saved memory use AES-XTS with two 256-bit keys, and the secret that unlocks them is protected by a key management service: it is never stored on disk unencrypted.
- Saved logins, cards, security answers and connected-account access are encrypted with keys held in a key management service, and are used only by Axel's own systems, never shown to an AI model.
- Each person's Axel runs on its own computer, kept apart from everyone else's.
- Only a small number of our staff can reach the systems that hold your information, and they do so only to run and protect the service, or when you ask.
No system is perfectly secure. If a breach affects your information, we will tell you and the authorities as the law requires.
Where your information is processed
We host everything in the United States. If you use Axel from Canada or elsewhere, your information is transferred to and processed in the United States, where it is protected as this policy describes. Some of our AI providers may process parts of a task outside the United States, under the same restrictions.
How long we keep it
- Your conversations, memory, money records and connected accounts are kept while your account is open, so Axel can keep helping.
- Axel's working files and task results are kept for about a week and its work history for about a month, longer while a task, plan or file you're still waiting on needs them. Screen recordings of Axel's computer are kept for about a day, and the final frame of each action for about a week.
- Axel's computer is saved as it works so it can recover; those saved copies go back at most 14 days.
- After you delete your account, everything is deleted as described below; our database backups age out within 14 days and our operational logs (ids, never content) within 30.
Your choices and rights
- Ask Axel what it remembers about you, correct it, or have it forget.
- Disconnect any account you connected. For Google, this deletes Axel's access and asks Google to revoke it. A service connected with a key stops being used; the key stays valid at that service until you remove it there.
- Marketing email only if you opt in; unsubscribe at any time.
- Delete your account in Settings, under Careful. Your sign-in ends at once on every device. Right after, Axel releases your connected accounts (Google is asked to revoke Axel's access, bank links are removed at Plaid), then deletes its computer, every saved copy of it, Axel itself and its data, its keys and its address. If a step is interrupted, it finishes by the next night; if a bank link can't be removed, Axel tries again each night, and after three nights finishes anyway and we remove the link by hand. Afterwards we keep only a record of the account's ids and when it was deleted.
- Access, correction, a copy, or deletion. You can ask us for a copy of your information, to correct it, or to delete it, by emailing hello@axelagent.io. Depending on where you live (for example in California or another U.S. state with a privacy law, or in Canada), you may have these rights by law, and the right to know how your information is used and shared. We will verify the request comes from you, answer within the time the law allows, and never treat you differently for asking. We do not sell or share your information for cross-context behavioural advertising.
Children
Axel is not for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
Changes
If this policy changes, this page will say so and show the new effective date, and we will tell you about any significant change before it applies.
Contact
Questions or requests about privacy: hello@axelagent.io. Axel Labs Inc., Canada.