Privacy policy

1. Who is responsible

Starlink Parts Trading FZE, Sharjah, United Arab Emirates, operates AXO and is responsible for the personal information described here. AXO is a subsidiary of Starlink Parts Trading FZE.

For privacy questions or requests, email [email protected].

2. Information you give us

• Account: your email address, and the full name, country, contact number and optional company name you enter when you set up your account. If you sign in with Google or Apple, we receive your name and email from them.
• Agreement record: which version of these terms and this policy you accepted, and when.
• Content: the links, destinations, QR settings, smart app link details, AI Marketplace listings, API keys you create (stored only in a scrambled form we can't reverse) and webhook addresses.
• Messages: what you send through the contact form, the abuse report form, or a marketplace listing's “Ask the maker” form.
• Billing: your plan, billing status and the reference Stripe gives us for you. Card details go straight to Stripe; we never see or store your full card number.

3. Information collected when links are used

When someone opens an AXO short link, we record the time, the referring site, the device type, the approximate country, and for smart app links the platform, the app store used and whether opening the app was attempted. We don't store raw IP addresses with clicks, record precise location, or follow people across other websites.

When the link owner uses deferred deep linking and a phone opens their smart app link, we also keep a short-lived record: a one-way scrambled version of the network address, the phone type and the operating system version. It is used only to match a first app launch to that link, for that owner's app, and is deleted after 7 days. Google Play installs are matched through the store's install referrer instead.

We keep technical records needed to run AXO safely, such as request counts for rate limits, webhook delivery results and security logs.

If you accept analytics cookies, Google Analytics records your visits to axo.nz — pages viewed, approximate location, device and browser — and which features you use, such as downloading a QR code or starting checkout. It never receives what you type or paste. If you decline, nothing is sent. See the Cookie policy.

4. Information from apps that use AXO

Businesses that build apps can send AXO app installs and in-app events (for example a sign-up or a purchase) with a random install ID. We handle that information on behalf of that business and only to provide AXO to it. The app's own privacy policy explains what it sends; contact the app's maker about that information.

5. How we use information

We send service emails such as sign-in codes, welcome messages, receipts, billing notices, listing updates and form confirmations. We do not send marketing newsletters without your consent, and we do not sell personal information.

• To create and secure your account, sign you in and send your one-time codes.
• To run your links, QR codes, smart app links, analytics, API, webhooks and marketplace listings.
• To take payments, manage plans and send receipts and billing notices.
• To answer your messages and pass marketplace enquiries to the maker you contacted.
• To prevent and investigate abuse, phishing, fraud and security problems, and to enforce our terms.
• To fix problems and improve AXO.
• To meet legal, tax and accounting duties.

6. Legal grounds

Where the law asks for a legal ground, we rely on: providing the service you asked for (your account, links and plans); our legitimate interests in keeping AXO secure, preventing abuse and improving it; your consent where we ask for it, such as for non-essential cookies; and our legal duties, such as keeping billing records.

7. Who we share information with

Link owners see analytics for their own links. They do not receive visitors' IP addresses from us.

• Our hosting and database provider, which stores AXO's data and runs the website.
• Stripe, for payments and billing.
• Resend, which sends AXO's emails from [email protected].
• Google and Apple, when you choose to sign in with them.
• Google Analytics, only if you accept analytics cookies (see the Cookie policy).
• Google Ad Manager, when advertising is shown on the free-link waiting page (see the Cookie policy).
• The maker of a marketplace listing, when you send them a message.
• Authorities, courts or others when the law requires it, or to protect people from harm or fraud.
• Another company that takes over running AXO, as described below.

8. International transfers

AXO is operated from United Arab Emirates, and our service providers process information in other countries, including the United States and countries in Europe. When information leaves the country where it was collected, we rely on the safeguards those providers offer, such as contractual commitments, as the applicable law requires.

9. How long we keep information

• Account and content: while your account is open. After you ask us to close it, we delete or anonymise it within 30 days, except what we must keep by law.
• Click analytics: while the link exists. Your plan controls how much history you can see. When you move a link to your archive, its click records are deleted; the archive keeps only the link details and its total click count until you delete it.
• Deferred deep linking match records: deleted after 7 days.
• Billing and invoice records: for as long as tax and accounting laws require.
• Messages and abuse reports: as long as needed to deal with them and keep a record of safety decisions.

10. Security

AXO uses encrypted connections (HTTPS), access controls so each account can only reach its own data, scrambled storage of API keys, signed webhooks, and limits on sign-in attempts and API use. No system is perfectly secure; if a breach affects your personal information, we will tell you and the authorities where the law requires.

11. Your rights

Depending on where you live — for example under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), the EU or UK GDPR, or the New Zealand Privacy Act 2020 — you may have the right to access, correct, delete or receive a copy of your personal information, to object to or limit how we use it, and to withdraw consent.

Email [email protected] from your account email to make a request. We will reply within 30 days and may need to confirm your identity. You can also export your link analytics as CSV from your dashboard. If you are not satisfied, you can complain to the data protection authority where you live.

12. Children

AXO accounts are for adults. We don't knowingly collect personal information from children. If you think a child has given us information, email us and we will delete it.

13. If AXO moves to another company

AXO is currently owned and operated by Starlink Parts Trading FZE. AXO may in future be run by another company in the same group or by a new company set up to operate AXO. If that happens, we may transfer our agreement with you, your account and the information we hold to that company.

We will tell account holders by email and update this page, with the new company's details, before the transfer takes effect. The transfer will not reduce your rights under this document.

14. Changes to this policy

Each update gets a new version number and effective date on this page and is listed in the document history. For changes that matter to you, we will email account holders before they take effect.

15. Contact

Starlink Parts Trading FZE, Sharjah, United Arab Emirates, operating AXO at axo.nz.

Email [email protected] — for privacy requests, write from your account email. Abuse reports go to [email protected].