Privacy Policy

Axorea (“we”, “us”) is based in Lugano, Switzerland. We provide an automated receptionist: a chat widget that businesses embed on their websites to answer customer questions and capture inquiries, plus a dashboard where those businesses manage their answers and leads.

For questions about this policy or your data, write to info@axorea.io.

When you chat with the widget on a business’s website, that business decides what the receptionist knows and receives the details you leave. In data-protection terms, the business is the controller of that data and Axorea processes it on the business’s behalf.

When you use our own website — for example the contact form or the live demo on axorea.io — Axorea is the controller.

• Contact details you submit in the widget — name, email address, and optionally a phone number, when you choose to leave them (for example to request a booking or a quote).
• Conversation content — the messages you exchange with the widget, so the business can follow up on your inquiry.
• Contact form submissions on axorea.io — the details you type into the form (name, email, business details, your message).
• Dashboard account data — the email address and login credentials of business users who manage their Axorea dashboard.

We do not collect data from the widget silently: conversation content exists only because you typed it, and contact details are only saved when you submit them.

• To generate the widget's replies from the information the business has provided.
• To notify the business owner by email when you leave your details as an inquiry (a "lead"), including a short summary of what you asked for.
• To show the business its own conversations and leads in its dashboard.
• To respond to messages you send us through the contact form.
• To operate, secure, and improve the service.

We do not sell personal data. We do not share it with third parties for advertising or marketing.

Conversation data, leads, and account data are stored in our database hosted with Supabase on servers located in the European Union. Data is encrypted in transit, and each business’s data is isolated from every other business’s.

We use a small number of providers to run the service, and share with them only what is necessary for their function:

• Supabase — database, authentication, and storage (EU servers).
• Groq — processes conversation text to generate the widget’s automated replies.
• Resend — delivers transactional email, such as lead notifications and contact form messages.
• Vercel — hosts the website and application.

Some of these providers may process data outside Switzerland and the EU. We only pass them the data required to provide the service described above.

The widget does not use tracking cookies. It stores a single random session identifier in your browser’s sessionStorage, which keeps your conversation together while the tab is open and is deleted automatically when you close it. It is not used to track you across sites or sessions.

The dashboard uses strictly necessary authentication cookies so business users can stay logged in. Our marketing site sets no analytics or advertising cookies.

Conversations and leads are kept so the business can follow up on them, for as long as the business’s account is active or until the business deletes them or asks us to. Contact form messages are kept as long as needed to handle your request. When an account is closed, its data is deleted.

Under the Swiss Federal Act on Data Protection (nFADP) and, where it applies, the EU GDPR, you have the right to:

• Access the personal data we hold about you and receive a copy of it.
• Have inaccurate data corrected.
• Have your data deleted.
• Object to or restrict certain processing.
• Receive your data in a portable format.

To exercise any of these rights, email info@axorea.io. If your data was collected through a business’s widget, the fastest route is usually to contact that business directly — but you can also write to us and we will help. You can also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local supervisory authority.

If we change this policy, we will update this page and its effective date. Material changes will be communicated to our clients directly.