Privacy Policy

Last updated: May 6, 2026

This policy explains what information AxiomState ("we", "us", "our") collects when you visit axiomstate.com, why we collect it, who we share it with, and the rights you have over your information. If anything here is unclear, email jordan@axiomstate.com and we will explain in plain English.

1. Information we collect

1.1 Information you give us

When you fill out our contact form we collect:

• Your name
• Your email address
• Your Shopify store URL
• Your monthly revenue range (if you selected one)
• Anything you type into the "biggest frustration" field

If you email us directly, we collect whatever information you choose to send.

1.2 Information collected automatically

When you visit the site, our server automatically records:

• Your IP address (used to prevent spam and abuse of the contact form)
• The browser and device type you are using
• The pages you visit and the times you visit them

1.3 Behavioral analytics via Harvv

We use our own product, Harvv, to understand how visitors interact with the site (a practice called dogfooding). Harvv is a lightweight behavioral pixel that measures friction signals such as dead clicks, rage clicks, scroll depth, and page load performance. Harvv does not record your session, does not capture form contents, and does not collect personally identifiable information. Full details at /harvv.

2. Why we collect this information

We only use your information for these purposes:

• To respond to your inquiry. If you submit the contact form we use your email to reply. If you tell us about your store we use that context to prepare your audit.
• To prevent fraud and abuse. We log IPs to detect spam bots and to block repeat offenders from flooding the contact form.
• To improve the site. Harvv tells us which pages are working and which are not so we can fix problems.
• To comply with the law. If we are legally required to retain or produce information, we will.

Under GDPR our legal basis for processing is (a) your consent when you submit the contact form and (b) our legitimate interest in operating and securing the site.

3. Who we share information with

We do not sell your information. We share it only with the service providers we need to operate the site:

• Railway — hosts the website itself.
• Cloudflare — manages the domain name system for axiomstate.com.
• Resend — delivers the emails triggered by the contact form.
• Harvv — provides the behavioral analytics described above. Harvv is our own product but is a separate service.

Each of these vendors has its own privacy commitments. We share only what is necessary for them to do their job.

4. How long we keep information

• Contact form submissions: retained for up to 24 months so we can maintain the conversation with prospects and clients, then deleted.
• Server logs (including IPs): retained for up to 90 days for security and abuse investigation, then rotated out.
• Harvv analytics: retained per Harvv's data retention terms, which currently sit at 12 months for aggregated behavioral data.

5. Your rights

Regardless of where you live, you can email us at jordan@axiomstate.com at any time to:

• Ask what information we have about you
• Ask us to correct information that is wrong
• Ask us to delete your information
• Ask us to stop contacting you

We will respond within 30 days.

If you are a California resident under the CCPA/CPRA you additionally have the right to opt out of the sale or sharing of personal information. We do not sell or share personal information for advertising purposes, so there is nothing to opt out of, but if this ever changes we will update this policy first.

If you are in the EU, UK, or another jurisdiction with equivalent rights, you also have the right to lodge a complaint with your local data protection authority.

6. Cookies and similar technology

The site does not set advertising or retargeting cookies. We do not run Google Analytics, Facebook Pixel, or any other third party ad network. The only tracking on the site is the Harvv behavioral pixel described in section 1.3, which does not use cookies for user identification.

7. Children

The site is a B2B service directed at Shopify store owners and agencies. It is not intended for anyone under 16. We do not knowingly collect information from children.

8. Security

We use standard technical safeguards: HTTPS everywhere, encrypted storage for form submissions, and least-privilege access to systems that hold personal data. No system is perfectly secure. If you believe there has been a security incident affecting your information, email us immediately.

9. International visitors

The site is hosted in the United States. If you visit from outside the US, your information will be transferred to and processed in the US. By using the site you consent to this transfer.

10. Changes to this policy

If we make a material change to how we handle your information we will update this page and the "Last updated" date at the top. If the change is significant we will also announce it via a banner on the site for at least 30 days.

11. Contact

Questions about this policy, or about the information we hold about you, go to jordan@axiomstate.com.