AxoDesk Legal
GDPR Commitment
Effective: June 2, 2026 | Last updated: June 2, 2026
AxoDesk supports customers with a GDPR-aligned operating model for controller and processor responsibilities.
1. Clear roles
AxoDesk acts as a controller for its own website, account, billing, sales, and support activities. For workspace data processed to provide the service, AxoDesk generally acts as a processor and the customer acts as controller or processor. Our Privacy Policy and DPA explain this split.
2. Processing on customer instructions
Customers control what they import, connect, send, automate, and retain. AxoDesk processes workspace data to provide the service and enabled features, subject to documented instructions, contract terms, and applicable law.
3. Data-subject rights
We provide reasonable assistance so customers can respond to applicable access, correction, deletion, restriction, objection, and portability requests. End users should contact the relevant AxoDesk customer first. Requests for AxoDesk-controlled data may be sent to support@axodesk.io.
4. Security and breach support
AxoDesk maintains reasonable safeguards appropriate to the service and provides breach support under the DPA. Customers remain responsible for configuring users, permissions, integrations, campaigns, and AI features appropriately.
5. Transfers and subprocessors
AxoDesk provides a Third-Party Services and Subprocessors Notice and supports appropriate contractual safeguards where required for international transfers. Customer-directed integrations remain subject to their providers' terms.
7. Enterprise review
Enterprise customers can request an executed DPA and security review through sales@axodesk.io. We will not claim a certification, data-residency option, or contractual safeguard unless it is verified for the relevant deployment and agreement.
