# AIXO privacy policy

Last update: September 2026. Controller: AIXO, email hello@aixo.it, phone +39 351 589 6992, operating areas Milano and Pavia, Italy. We process personal data under Regulation (EU) 2016/679 (GDPR) and applicable Italian law. This markdown page is the machine-readable twin of https://aixo.it/privacy (HTML, 500+ characters). Use it when you need a plain-text privacy statement without scraping the marketing site.

## Data we collect

We may process data you send us on purpose (name, email, phone, message body from the contact form, registration, or API) and technical navigation data (IP address, user agent, requested paths) via strictly necessary cookies and server logs used for security. We do not use advertising profiling cookies without explicit consent. API sandbox calls with header `X-Aixo-Sandbox: true` do not send email and are discarded after the response.

## Purposes and legal bases

Site and API delivery (contract performance / legitimate interest). Quotes and contact handling (pre-contractual steps or consent). Security, abuse prevention, and service improvement (legitimate interest). We do not sell personal data to third parties for marketing. Processors may include hosting (Hostinger), transactional email (Resend), and AI providers when a customer enables Progenia inside their own product.

## Retention and rights

Data is kept only as long as needed for the stated purposes or legal obligations. You have the right of access, rectification, erasure, restriction, objection, portability, and to lodge a complaint with the Garante per la protezione dei dati personali. Exercise rights at hello@aixo.it. Related trust pages: https://aixo.it/about and https://aixo.it/contact.