Privacy Policy

Effective March 20, 2026 Axhera, Inc.

This Privacy Policy describes how Axhera, Inc. ("Axhera", "we", "us") collects, uses, and protects information when you use the Axhera Network platform.

1. Overview

Axhera operates a process-specific manufacturing capacity network. We connect Buyers with Producers. In doing so, we collect and process certain personal and business information. We are committed to handling this information responsibly and transparently.

2. Information We Collect

We collect different types of information depending on how you interact with the Platform:

Category	Data Collected	Source
Buyer Inquiries	Name, company, email, phone, project specifications, material and process requirements	Inquiry form submission
Engineering Drawings	Uploaded files (PDF, images, CAD). May be redacted by Buyer before submission.	Inquiry form upload
Producer Accounts	Company name, contact name, email, phone, address, machine inventory, capabilities, capacity data	Account registration and portal usage
Usage Data	IP address, browser type, pages visited, timestamps, referring URL	Automatic collection

3. How We Use Your Information

We use the information we collect to:

Match Buyer inquiries with qualified Producers based on process, material, tolerance, and capacity requirements.
Transmit engineering drawings and specifications to matched Producers under the terms of the Master NDA.
Facilitate communication between Buyers and Producers regarding quotes and orders.
Operate, maintain, and improve the Platform.
Send transactional communications related to inquiries, quotes, and account activity.
Detect and prevent fraud, abuse, and security incidents.

We do not sell your personal information. We do not use your information for advertising purposes.

We share information only in the following circumstances:

With Producers: When a Buyer submits an inquiry, we share the inquiry details and uploaded drawings with matched Producers who have executed a Master NDA with Axhera.
With Buyers: When a Producer responds to an inquiry, we share the Producer's quote and relevant company information with the Buyer.
Service Providers: We use third-party service providers for hosting (Vercel), database (Supabase), and AI processing (Anthropic). These providers process data on our behalf under contractual obligations to protect your information.
Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

5. Engineering Drawings

Engineering drawings receive special protection on our Platform:

Redaction: Buyers may redact sensitive areas of drawings before submission. Redacted areas are permanently pixel-burned — the original data is overwritten and cannot be recovered by anyone, including Axhera.
Storage: Uploaded drawings are stored in private, encrypted storage. Access is controlled through signed URLs with limited expiration.
NDA Protection: All Producers who receive drawings have executed a Master NDA with Axhera that prohibits unauthorized use, reproduction, or disclosure.
No AI Training: We do not use your engineering drawings to train machine learning models. AI analysis of drawings (for process recommendation) is performed in real-time and is not retained.

6. Data Storage & Infrastructure

Your data is stored on infrastructure provided by:

Supabase — Database and file storage. Data is encrypted at rest and in transit.
Vercel — Application hosting and edge delivery.
Anthropic — AI processing for drawing analysis. Anthropic's API operates under a zero-data-retention policy; no input data is stored or used for model training.

All data is stored in the United States.

7. Data Retention

We retain your information for as long as necessary to provide the services described in these terms and to comply with our legal obligations:

Inquiry data: Retained for the duration of the inquiry lifecycle plus three (3) years for audit and compliance purposes.
Engineering drawings: Retained for the duration of the inquiry lifecycle. Buyers may request deletion at any time.
Producer accounts: Retained for the duration of the Producer's participation in the Network plus three (3) years.
Usage data: Retained for twelve (12) months.

8. Security

We implement industry-standard security measures to protect your information, including:

TLS encryption for all data in transit.
Encryption at rest for stored data.
Signed URLs with expiration for file access.
Row-level security policies in our database.
Rate limiting on API endpoints.
Security headers including CSP, HSTS, and X-Frame-Options.

No system is perfectly secure. We cannot guarantee the absolute security of your information, but we take reasonable and appropriate measures to protect it.

9. Cookies & Analytics

The Platform uses minimal cookies necessary for functionality:

Session cookies: Used for Producer portal authentication. These are essential and cannot be disabled.
Analytics: We may use privacy-respecting analytics to understand Platform usage. We do not use third-party advertising trackers.

We do not serve targeted advertisements. We do not share cookie data with third parties for advertising purposes.

10. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access: Request a copy of the personal information we hold about you.
Correction: Request correction of inaccurate personal information.
Deletion: Request deletion of your personal information, subject to our retention obligations.
Portability: Request your data in a structured, machine-readable format.
Objection: Object to processing of your personal information in certain circumstances.

To exercise any of these rights, contact us at legal@axhera.com. We will respond within thirty (30) days.

11. Children's Privacy

The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete that information promptly.

12. International Users

The Platform is operated from the United States. If you access the Platform from outside the United States, you consent to the transfer of your information to the United States, which may have different data protection laws than your jurisdiction. For users in the European Economic Area, United Kingdom, or other jurisdictions with data transfer restrictions, we rely on appropriate legal mechanisms for cross-border data transfers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective" date at the top of this page. Material changes will be communicated through the Platform or by email to registered users. Your continued use of the Platform after any changes constitutes acceptance of the updated Privacy Policy.

14. Contact

For questions, concerns, or requests related to this Privacy Policy or our data practices:

Axhera, Inc.
Email: legal@axhera.com