Privacy Policy

Who we are and what this covers

Axceera (Private) Limited ("Axceera", "we", "us") is registered in Sri Lanka under No. PV 00252314, at 157/3 Kadawatha Road, Nadimala, Dehiwala 10350, Sri Lanka. We are the data controller for the personal information described here. We handle it in line with Sri Lanka’s Personal Data Protection Act, No. 9 of 2022, and, where they apply to you, other data protection laws such as the EU and UK GDPR.

This policy covers:

• axceera.com and ai.axceera.com (AxceAI);
• enquiries and call bookings you make with us;
• our newsletter.

What you put into one of our products is covered by that product’s own privacy notice. For that data, the product’s notice comes first:

• PlayStep
  Privacy notice
• Let’s Save
  Privacy notice
• Sprint Track
  Privacy notice
• AccountRio
  Privacy notice

Where an Axceera product decides how your data is used, the controller is this same company. Some of our products are tools that businesses use for their own customers or teams, such as Sprint Track and PlayStep. There, the business decides how its users’ data is used, and we process it on its behalf. The product’s notice explains which applies.

For any question or request about your information, email our data protection contact at hello@axceera.com.

Information we collect

When you send a form on axceera.com

• Project enquiry form: your name and email address; if you add them, your company, phone number, message and the service you’re interested in; the goal you choose; the industry page you came from, if you followed a link from one; whether you agreed to marketing emails, with the exact wording you agreed to; and the page you sent it from and when.
• Newsletter signup: your email address, the wording you agreed to, and the page you signed up from and when.

When you send a form on ai.axceera.com (AxceAI)

• Consultation request: your name, work email, company and its website, job title, industry, company size, main business challenge and area of interest, and any details you add.
• eBook download: your name, work email, company and job title, and the wording you agreed to.
• AI Radar assessment: to unlock your report, your name, company, role and work email, your phone or WhatsApp number if you add it, and the wording you agreed to. With it we keep your industry, team size, number of business units, scores and top opportunities. If you claim the offer, we also keep your timeline, budget range, preferred time and any notes.
• Before you give your details, the AI Radar assessment sends us your profile answers, your score and how many questions you answered, with no name attached. Your answers to individual questions stay in your browser.
• With each form, we record how you found us: the page you landed on, the site that sent you, any campaign tags in the link, your approximate location (country, region and city, worked out from your IP address) and your type of device.
• We record which steps of the AI Radar and eBook forms you reach, so we can see where people stop. These steps carry no name until you send the form, when they are linked to it.
• When we email you, Brevo tells us whether the email was delivered, opened or clicked.

We don’t store your IP address with your message.

You don’t have to give us any of this, but we need at least your name and email address to reply to you.

When you use the site

Cloudflare, which hosts the site, runs security checks on every page to block bots and attacks. Cloudflare Turnstile also checks that forms are sent by people rather than bots. Both use technical signals from your browser, including your IP address.

If you allow analytics cookies, Google Analytics records the pages you visit, how you found us, your device and browser type and your approximate location.

How we use your information

To answer you

We use what you send us to reply to you and to talk about working together. On ai.axceera.com, we also use it to email you the eBook or your AI Radar report, and one reminder if you haven’t downloaded the eBook. We rely on our legitimate interest in answering enquiries, or on taking steps you ask for before a contract.

Marketing emails, only if you opt in

If you tick the box on the axceera.com enquiry form or sign up to our newsletter, we first email you a link to confirm. Once you confirm, we send occasional emails about our work. On ai.axceera.com, ticking the box on the eBook or AI Radar form lets us send you related Enterprise AI insights, or follow up about AI automation, as the box says. We rely on your consent, and every marketing email has an unsubscribe link.

To see what brings people to us

On ai.axceera.com, we use how you found us and the form steps you reach to see which pages and campaigns work. We rely on our legitimate interest in improving the site.

Security and spam protection

We use Cloudflare’s security checks and Turnstile only to protect the site and our forms from bots, spam and abuse. We rely on our legitimate interest in keeping them secure.

Analytics, only if you allow it

Analytics helps us see which pages are useful, so we can improve the site. We rely on your consent.

Cookies and analytics

Cookies are small files a website stores in your browser. Strictly necessary cookies are always on because the site needs them. Analytics and marketing cookies are set only if you allow them.

Google Analytics is loaded through Google Tag Manager. Until you allow analytics or marketing cookies, Google Tag Manager and Google Analytics don’t load at all.

YouTube, Vimeo and Loom videos in our blog posts and case studies show a preview image from our own site. The provider’s player, and any cookies it sets, loads only when you press play (YouTube through its privacy-enhanced youtube-nocookie.com service). LinkedIn and X posts load only if you allow marketing cookies; until then you see a link to the post instead.

ai.axceera.com uses no analytics or advertising cookies. Instead, it keeps a few items in your browser’s storage: where your first visit came from (for 90 days) and where the current one came from; your AI Radar progress, including the contact details you entered, until you retake it; and a copy of your recent requests. You can clear them in your browser settings.

Our Cookie Policy lists each cookie, what it does and how long it lasts. You can change your choice at any time from "Cookie settings" at the bottom of every page.

Sharing and disclosure

We don’t sell your personal information. These providers handle it for us, under contract and only for the purposes above:

• Cloudflare hosts the website, protects it from bots and attacks, stores form submissions and runs Turnstile.
• Brevo emails our team when you send a form and sends you an automatic reply, keeps our list of website enquiries, and sends our newsletter if you opt in.
• Microsoft 365 is our email service, where we read and answer your message. If you book a call with us, Microsoft Bookings takes your name, email address and the time you choose, and sends the invitation.
• Google provides Tag Manager and Analytics, only if you allow analytics or marketing cookies.

LinkedIn, X and the video services above are independent: when their content loads, their own privacy policies apply.

Across Axceera products

We don’t combine your data from different Axceera products, or use one product’s data for another, except as that product’s privacy notice describes.

Some of our products provide a service inside another. For example, PlayStep shows the in-app guides in Let’s Save, Sprint Track and AccountRio. When one of our products works inside another, it acts only on that product’s instructions and keeps only what that product’s notice lists. In Let’s Save, for instance, PlayStep runs only while usage analytics is on, and receives a one-way hash of your account ID, never the ID itself.

Payments

Paddle (on the web and desktop), Apple and Google take payments for our products as independent sellers, under their own privacy policies. We never see your full card number. We receive only what we need to manage your plan, such as which plan you have and whether it is paid.

Data retention

• Form submissions: 24 months, then deleted automatically. We delete them sooner if you ask.
• AxceAI requests, and AI Radar and eBook attempts: 24 months, then deleted automatically. We delete them sooner if you ask.
• Your details in our email system (Brevo): until you unsubscribe or ask us to delete them.
• Analytics data: 14 months in Google Analytics.
• Your cookie choice: 6 months, after which we ask again.

Children

Our websites are for businesses and aren’t aimed at children. Each product sets its own minimum age in its terms, and no Axceera product is aimed at children under 16. If you think a child has sent us personal information, email hello@axceera.com and we will delete it.

How we protect your data

The site and its forms use encrypted connections (HTTPS). Form submissions are stored with Cloudflare, and only our team can read them, after signing in with their Microsoft 365 work accounts.

We ask only for what we need to answer you, we don’t store your IP address with your message, and we delete submissions automatically after 24 months.

Your rights

Sri Lanka’s Personal Data Protection Act, and the data protection law where you live, let you ask us to:

• give you a copy of the personal information we hold about you;
• correct it if it’s wrong, or complete it if it’s incomplete;
• delete it;
• stop using it, where we rely on your consent or on our legitimate interest;
• review a decision about you made solely by automated means;
• where the EU or UK GDPR applies, restrict how we use it, or send it to you or another organisation in a portable format.

We don’t make decisions about you based solely on automated processing.

Where we rely on your consent, you can withdraw it at any time: unsubscribe from our emails, or change your cookie settings. Withdrawing it doesn’t affect what we did before. To make a request, such as asking us to delete your information, email hello@axceera.com. We reply without undue delay and within one month. If a request needs longer, we’ll tell you before the month ends, and we’ll reply within three months of receiving it.

If we refuse a request, or you are unhappy with how we handle your information, you can complain to the Data Protection Authority of Sri Lanka, or to the data protection authority where you live.

International transfers

We are based in Sri Lanka, and some of the providers above process data in other countries, including the United States and the European Union.

When your information leaves Sri Lanka or your own country, we use the safeguards the law provides: contracts that bind the provider to protect it, such as the European Commission’s Standard Contractual Clauses and any instruments Sri Lanka’s Data Protection Authority specifies. Some transfers are also needed simply to answer the enquiry you sent us.

Changes to this policy

If we change how we handle personal information, we’ll update this page and the date at the top.

Contact us

Questions about this policy or your data: