Website Privacy Policy
This policy explains how Graxana Software Inc. handles information submitted through graxana.com, including launch-update forms, support requests, general inquiries and authorized voice-assistant integrations.
Information you choose to provide
- Name, email address and optional phone number
- App interest, feedback, support details and callback preference
- Newsletter or product-testing consent and unsubscribe status
- Information included in an authorized voice-assistant message or business inquiry
Do not submit passwords, payment-card numbers, banking credentials, API keys, private health records or confidential client information.
How we use information
We use submitted information to respond to inquiries, provide support, manage requested product updates, operate testing programs, maintain consent records, protect the service and improve Graxana products. We do not sell personal information or use it for behavioural advertising.
Email and consent
Product and marketing email is sent only where a recipient has requested it or another lawful basis applies. Every marketing message must include an unsubscribe mechanism. Transactional support or security messages may still be sent when necessary to complete a request.
Cookies and technical records
The website may use essential session, security and CSRF cookies needed for forms and administration. Hosting infrastructure may record IP address, user agent, request time, requested URL and error details for security, reliability and abuse prevention. The current website does not use an advertising SDK.
Optional website analytics and heatmaps
Graxana also receives consented aggregate public-page click buckets from PortfolioDump, RentReminder and Axima Workforce for combined product reporting. Each website requests consent separately and uses its own design. These buckets contain only a product/page key, day, screen-size category and grid coordinates, and are retained for up to 90 days. They do not include tenant, workforce, project or billing records.
When you allow analytics using the Analytics preferences control, the website can load Google Analytics 4 and collect aggregate click coordinates to help us understand page use and improve navigation. Declining does not prevent access. You can change your choice using the same control; the site respects a Global Privacy Control signal. The choice is stored in this browser for up to six months.
Graxana's click maps store page categories, screen-size categories, coordinate buckets and daily counts for up to 90 days. They do not store form values, page text, IP addresses or individual session recordings. Admin usage uses generic page paths and titles without contact identifiers or search queries.
If configured, Microsoft Clarity may provide masked heatmaps and session recordings on the PortfolioDump and Axima business landing pages after consent. Clarity is excluded from the CRM, learning/family app pages, and URLs containing query strings or fragments. Page text is masked before the recorder loads. Google and Microsoft process analytics data under their applicable service terms and retention settings. See Google's privacy information and Microsoft's privacy information.
App lifecycle and email delivery records
Connected Graxana app servers may send registration, activation, usage, trial, subscription and payment-status events to the CRM for customer operations and aggregate business reporting. These events do not contain payment-card details and do not automatically subscribe an account to marketing. Configurable follow-up emails check the recipient's subscription status before delivery.
Where enabled for a disclosed campaign, an email may include a small image and a tracked button link to estimate opens and clicks. Mail privacy tools and security scanners can affect these counts. Delivery providers may also report delivery, bounce and complaint events; suppression records are retained to prevent further marketing sends to suppressed addresses.
Service providers
Graxana may use hosting, email, database, security and AI or voice-service providers to operate the requested service. Providers process information under their own terms and Graxana’s configurations. Information may be processed outside Canada where a provider operates internationally.
Retention
We retain inquiries, consent records and operational logs only as long as reasonably necessary for the purpose collected, legal obligations, dispute resolution, security and service continuity. Unsubscribe records may be retained to ensure a request remains honoured.
Access, correction and deletion
You may ask about personal information associated with your email address, request a correction or request deletion where applicable. Some information may need to be retained for legal, security or unsubscribe-compliance purposes.
Security
We use access controls, encrypted transport, rate limits and operational safeguards appropriate to the service. No internet service can be guaranteed completely secure.
Children
The website and current app-testing programs are intended for adults and young adults and are not directed to children under 13.
Application-specific policies
See the current policies for Grax Prompt 101, Grax ME, Grax Scanner, Graxana SkinIQ, PortfolioDump and Axima Workforce.
Contact
Graxana Software Inc.
1351 Wilson Avenue, Toronto, Ontario M3M 1H7, Canada
privacy@graxana.com · support@graxana.com