Privacy & Data Handling Statement

This statement describes how EV Express Network LLC ("EVEN," "we," "us") collects and processes personal data through the Axion Knowledge Core platform at axnx.io and through our marketing and informational site at axnx.ai. EV Express Network LLC is an Oklahoma limited liability company and is the data controller for the personal data described here.

Axion is a B2B SaaS platform that ingests company documents (including project-specific documents such as contracts, RFPs, bid documents, specifications, and related records) into a knowledge graph and provides AI-powered document intelligence. The platform is designed for professional users (project managers, estimators, engineers, pre-construction leads, and field operators) acting in a business capacity across construction, energy, and adjacent industries.

01What We Collect

Account data

When you create an Axion account, we collect your name, work email address, company name, job title, and authentication credentials. If you contact us through a form on axnx.ai or by email, we retain the content of that correspondence.

Billing data

Subscription and usage pack payments are processed by Stripe, Inc. We do not see, store, or process full card numbers. We retain the Stripe customer identifier, products and quantities purchased, and the invoice history associated with your account. Card numbers, CVCs, and expiration dates never enter our systems.

Billing records (invoices, payment history, and account identifiers) may be shared with our payment processor, tax authorities, external accountants or auditors, or debt collection services, strictly to the extent required to fulfill billing, tax, and legal obligations. We do not share billing data for any marketing or commercial purpose.

Customer Data (project documents and inputs)

To use the platform, you upload project documents: specifications, drawings, RFIs, submittals, contracts, as-builts, and other project materials. This information is supplied by you, belongs to you, and is treated as your confidential data. See Section 10 for details on data ownership.

Platform output data

The platform generates analytical outputs based on your Customer Data: Explore responses, Agent Reports, and knowledge graph query results. These outputs are stored in your single-tenant environment and accessible only to your authorized users.

Usage and technical data

We log standard service telemetry: IP address, user agent, request timestamps, feature usage, Insight Credit consumption, and error traces. We use this data to operate the platform, debug issues, reconcile billing, and prevent abuse. Where you are signed in, we may associate usage events with your account's internal identifier (an opaque UUID, not your email or name).

Marketing and inquiry data

If you request a pilot, demo, or contact us through axnx.ai, we collect the information you provide, typically your name, work email, company, and project context. We do not purchase or rent marketing lists.

02How We Use It

We use personal data to:

• Provide, operate, maintain, and support the Axion platform and respond to your requests.
• Process subscriptions and usage pack purchases and issue invoices.
• Ingest your Customer Data, build and maintain your knowledge graph, and generate Outputs.
• Communicate service-related notices, security alerts, and product updates.
• Send marketing communications where you have subscribed or where permitted by applicable law, with the ability to opt out at any time.
• Detect, prevent, and respond to fraud, abuse, and security events.
• Improve the platform through aggregated, de-identified usage analysis that cannot be linked back to you.
• Comply with applicable legal, tax, and accounting obligations.

03How Long We Keep It

We retain account data, Customer Data, and output data for as long as your account is active and for a commercially reasonable period after closure to handle disputes, billing reconciliation, and legal obligations. Billing records are retained for the period required by applicable tax law (typically seven years). Server and session logs are typically retained for up to 90 days.

You may request deletion of your account and associated Customer Data at any time by contacting info@axnx.io. Certain data may be retained where required by law or to resolve outstanding disputes. See the data return and deletion provisions in our Terms of Service for the full process.

De-identified and aggregated telemetry data that cannot reasonably be linked back to you, your account, or your projects may be retained indefinitely for product development and analytics purposes.

04Who Processes Data on Our Behalf (Subprocessors)

Axion operates with a deliberately focused set of subprocessors. The following providers store or process Customer Data or personal data on our behalf:

Each subprocessor is contractually bound to process data only on our instructions and to apply appropriate technical and organizational measures. We do not permit our AI model providers to use Customer Data to train third-party or general-purpose models. A complete and current named subprocessor list is available at axnx.io/subprocessors or on request at info@axnx.io. We will provide at least 30 days' notice before adding or replacing a subprocessor that processes Customer Data.

05Your Choices and Rights

Regardless of where you are located, you can:

• Access, correct, or update your account information directly in the platform, or by contacting us.
• Request deletion of your account and associated Customer Data, subject to retention obligations.
• Opt out of marketing communications at any time using the unsubscribe link or by contacting us.
• Request a copy of the personal data we hold about you.
• Request a Data Processing Addendum (DPA) if your organization requires one for compliance purposes.

To make any of these requests, contact us at info@axnx.io. We respond within 30 days.

06Notice for California Residents (CCPA / CPRA)

The California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"), gives California residents specific rights regarding their personal information. Subject to the conditions in the CCPA, you may:

• Know what categories of personal information we collect and how we use it.
• Request access to or deletion of your personal information.
• Request correction of inaccurate personal information.
• Opt out of the sale or sharing of personal information. EVEN does not sell personal information and does not share it for cross-context behavioral advertising.
• Be free from discrimination for exercising any of these rights.

To exercise CCPA rights, contact us at info@axnx.io. We may need to verify your identity before fulfilling certain requests.

07Notice for Users in the EU, UK, and Switzerland (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, additional rights apply under the General Data Protection Regulation and equivalent UK and Swiss law. Our legal bases for processing are:

• Performance of a contract: to provide the Service and respond to your requests.
• Legitimate interests: to operate, secure, and improve the platform in a manner that respects your rights.
• Consent: for newsletter subscriptions, marketing communications, and any non-essential cookies.
• Legal obligation: to retain required records and comply with applicable law.

You have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local supervisory authority.

Our subprocessors are predominantly based in the United States. Where personal data of EEA, UK, or Swiss users is transferred outside those regions, we rely on Standard Contractual Clauses or other valid transfer mechanisms. A copy is available on request at info@axnx.io.

08Cookies, Analytics, and Session Recording

The axnx.ai and axnx.io sites use a limited set of cookies and similar tracking technologies:

• Strictly necessary cookies: to operate session, authentication, and security functions. These cannot be disabled without breaking the Service.
• Analytics cookies: to measure aggregate site and platform usage. Where you are signed in, we may associate analytics events with your account's opaque internal identifier. We do not transmit your name, email, or other directly identifying information to analytics providers. IP addresses are anonymized where technically possible.
• Session recording (Microsoft Clarity): axnx.ai uses Microsoft Clarity to record anonymized visitor sessions, including mouse movement, scroll depth, and click patterns. These recordings help us understand how visitors use the site so we can improve it. Clarity does not capture content from the Axion platform environment or any Customer Data. Clarity's own privacy policy is available at privacy.microsoft.com. Session recordings are subject to Clarity's data retention policies and are not used for advertising.
• Contact form processing (Web3Forms): inquiry forms on axnx.ai route submissions through Web3Forms, which temporarily processes the form data to deliver it to our team by email. Web3Forms does not store your submission permanently or use it for any purpose other than delivery.
• Font and CDN cookies: set by Google Fonts and content delivery services when serving typography and assets.

EVEN does not use, and has no current plans to use, third-party advertising cookies, behavioral retargeting cookies, or paid marketing pixels on axnx.ai or axnx.io. If this changes, this statement will be updated and affected users notified in advance. For users in the EEA, UK, and Switzerland, non-essential cookies and session recording are not activated until you provide consent. You may also control cookies through your browser settings; disabling certain cookies may affect site functionality.

09Security

We apply the following measures, scaled to a platform at our current stage:

• Encryption. Data is encrypted in transit (TLS 1.2 or above) and at rest using encryption provided by AWS and our database providers.
• Single-tenant isolation. Each customer's knowledge graph and vector store namespace are cryptographically segmented. Your Customer Data is never commingled with another customer's environment.
• Authentication and access control. User credentials are hashed by our identity provider. Production systems use role-based access controls restricted to authorized personnel under written agreement.
• Payment isolation. Card data is handled exclusively by Stripe. Card numbers, CVCs, and expiration dates do not enter our systems.
• Backups and recovery. Customer Data is stored in managed AWS services with provider-level redundancy and backup.
• Incident response. If we become aware of a personal data breach that creates a material risk to affected users, we will notify the relevant authority where required and inform affected users without undue delay.

Axion does not currently hold formal certifications such as SOC 2 or ISO 27001. We will publish an updated security statement when that changes.

10Data Ownership and Our Use of Derived Data

Your data

You retain ownership of the project documents you submit to the platform and the analytical outputs generated for your account. We do not claim ownership of your Customer Data or the Agent Reports and Explore responses produced for you. You may use those outputs in your own work, including in deliverables to your clients, in accordance with your subscription and our Terms of Service.

No model training

We will not use your Customer Data to train, fine-tune, or improve any machine learning model, large language model, or other AI system, ours or our providers'. This is a core architectural commitment, not just a policy statement. Your IP Fortress environment is cryptographically isolated precisely to make this guarantee enforceable.

Our platform and derived data

We retain all right, title, and interest in the Axion platform, including its software, knowledge graph ontology, methodologies, algorithms, and user interface. We may collect and use Anonymized Telemetry (de-identified technical metadata stripped of Customer Data that cannot reasonably be linked back to you, your account, or your projects) to operate, improve, and develop the platform.

Confidentiality of identifiable project data

We do not sell, license, or share identifiable Customer Data with third parties other than the subprocessors described in Section 4, and only to the extent required to operate the Service. We never publish individual project inputs or outputs that identify you, your clients, or specific projects without your express written permission.

11International Data Transfers

EV Express Network LLC is based in the United States. Information we collect may be transferred to, stored in, or processed in the United States or other countries. For transfers of personal data from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses approved by the European Commission and the UK International Data Transfer Addendum, as applicable. A copy is available on written request to info@axnx.io.

12Children

Axion is a B2B service intended for professional users and is not directed at children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a minor has provided us with personal information, please contact us at info@axnx.io and we will take appropriate steps to delete it.

13Changes to This Statement

We may update this statement to reflect changes in the platform, our subprocessors, or applicable law. Material changes will be communicated through the platform or by email to account holders. The "Last updated" date at the top of this page reflects the latest revision. Your continued use of the Service after the effective date constitutes your acceptance of the changes.

14Contact

For privacy questions, data subject requests, DPA requests, or subprocessor inquiries:

If you are an EU or UK resident and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.