CAXO Pilot — Privacy Policy

Last updated: September 2026 · Pilot program

This Privacy Policy explains what personal data CAXO Pilot (referred to throughout as "CAXO", "we", "us") collects when you use our marketing automation service, how we use it, and who we share it with. It applies to visitors, account holders, and the businesses they manage through CAXO Pilot.

1. Information we collect

Account information — the email address (or, if enabled for your account, mobile number) and password you sign up with, or the profile information provided by Google/Facebook if you sign in that way; your display name.

Business profile information — your business name, category, description, country, contact phone and email, and any logo or photos you choose to upload. Business contact details are used to identify and represent your business; they aren't independently verified at signup.

Connected channel information — when you connect a social media, advertising or messaging account (e.g. Instagram, Facebook, Google Ads, WhatsApp), we store the authorization tokens needed to publish content on your behalf, and basic connection status. We don't request more access than publishing requires.

Billing information — your chosen plan and subscription status. Card, UPI and other payment details are collected and processed directly by our payment providers (Razorpay or Stripe); CAXO does not store your full payment card details.

Usage information — how you use the dashboard (e.g. approvals, content performance you view), and standard technical data like IP address and browser type, collected automatically for security and reliability purposes.

2. How we use this information

• To provide the service — creating drafts, scheduling and publishing approved content to your connected channels, and showing you your dashboard.
• To operate your account — authentication, billing, plan management, and customer support.
• To communicate with you — service emails (like one-time verification codes, billing notices, or responses to support requests).
• To keep CAXO secure and working reliably, and to improve the product during this pilot.

3. Who we share it with

We don't sell your personal data. We share it only with the service providers that help us run CAXO, and only as needed for the purpose described:

• Microsoft Azure — hosting, database and file storage (logos/photos you upload) for the application.
• Azure Communication Services — sending verification codes and account-related emails.
• Google and Facebook/Meta — if you choose to sign in with them, and when publishing to channels you've connected on those platforms.
• Razorpay and Stripe — payment processing for paid plans.
• Any other social, advertising or messaging platform you explicitly connect to CAXO, solely to publish content you've approved.

Each of these providers has its own privacy policy governing how they handle data on their own platforms — we encourage you to review theirs as well.

We may also disclose information if required by law, or to protect the rights, safety or property of CAXO, our customers, or others.

4. Data storage and security

Your data is stored on Microsoft Azure infrastructure and transmitted using HTTPS encryption. Access to customer data within CAXO is limited to what's needed to operate and support the service. As with any online service, no method of storage or transmission is 100% secure, and we can't guarantee absolute security.

5. Data retention

We keep your account and business data for as long as your account is active, plus a reasonable period afterward to comply with legal, accounting or dispute-resolution requirements. One-time verification codes are short-lived and expire automatically shortly after they're issued.

6. Your choices and rights

• You can review and update most of your account and business profile information directly from your dashboard.
• You can disconnect a connected channel at any time, which revokes CAXO's access to publish there.
• You can request a copy of your data, ask us to correct it, or ask us to delete your account and associated data, by contacting us (see below) — we'll respond within a reasonable time, subject to any records we're legally required to keep.

7. Cookies

CAXO uses a session cookie to keep you signed in. We don't currently use advertising or cross-site tracking cookies of our own on the CAXO dashboard.

8. Children's privacy

CAXO is a business tool and isn't directed at children. We don't knowingly collect personal data from anyone under 18.

9. Changes to this policy

Because CAXO is in active pilot, this policy may change as the product evolves. We'll post updates here with a new "Last updated" date, and let active subscribers know directly about material changes.

10. Contact us

Questions about this CAXO Pilot policy, or a data request? Reach us at privacy@caxo.example.com.