Privacy Policy

This Privacy Policy governs the collection, processing, storage, and transfer of personal information and digital assets by Axionexa Solutions ("Axionexa", "we", "our", or "us"), operating from Dhaka, Bangladesh.

Our data protection practices comply with the applicable legal framework of Bangladesh, including:

• The Information and Communication Technology (ICT) Act, 2006 (as amended)
• The Cyber Security Act, 2023 (CSA) / Digital Security Act
• The National Digital Commerce Policy & Digital Commerce Operation Guidelines
• The Contract Act, 1872 & Copyright Act, 2000 of Bangladesh

For international clients based in the United Kingdom, European Union, United States, and elsewhere, we additionally uphold global standards including strict non-disclosure, encrypted transmission, and zero unauthorized data dissemination.

We collect information that is strictly necessary to evaluate project feasibility, deliver digital engineering contracts, communicate with clients, and maintain the security of our platform:

We process data under lawful grounds recognized by the ICT Act and Contract Act of Bangladesh:

• Contractual Execution: To develop software, design interfaces, build web and mobile applications, configure cloud servers, and provide SLA maintenance.
• Client Communication: To respond to inquiries, schedule engineering scoping calls, and provide milestone status reports.
• Financial & Tax Compliance: To issue valid commercial invoices, maintain tax records under the National Board of Revenue (NBR) regulations, and verify legitimate payments.
• Cybersecurity & Fraud Prevention: To safeguard our servers, source code repositories, and user interactions from unauthorized access, malicious injections, and DDoS attacks.

Under Section 43 of the ICT Act 2006 and Section 26 of the Cyber Security Act 2023, Axionexa Solutions implements multi-layered security controls to protect client records and proprietary codebases:

• Transport Encryption: All data in transit is protected using modern HTTPS/TLS 1.3 encryption.
• Access Governance: Only authorized senior developers and project managers with authenticated SSH/2FA access can access development repositories.
• Strict Non-Disclosure (NDA): Every Axionexa engineer and contractor operates under binding non-disclosure agreements.
• Secure Offsite Backups: Database snapshots are encrypted at rest using AES-256 standards with verified disaster recovery protocols.

We do not sell, rent, or trade your personal or business data to third parties for marketing or advertising purposes.

We only share data with vetted technical sub-processors essential for service deployment:

• Cloud & Hosting Providers: AWS, Vercel, Hetzner, DigitalOcean (for hosting client applications).
• Payment Processors: Stripe, PayPal, SSLCommerz, bKash/Nagad Merchant Gateways (for processing project fees).
• Legal & Regulatory Authorities: We may disclose data only if required by a formal court order or lawful investigative directive issued by the judicial courts or law enforcement agencies of Bangladesh.

As an engineering agency serving clients across the UK, USA, Europe, and Asia, data may be transferred, stored, and processed across international cloud infrastructure. When handling cross-border data, Axionexa Solutions applies equivalent technical safeguards, encrypted storage protocols, and contractual confidentiality clauses to ensure consistent protection regardless of geographical jurisdiction.

You hold the following rights regarding your personal and business records:

• Right to Access: Request a copy of the personal and project records we hold about you.
• Right to Rectification: Request corrections to inaccurate, incomplete, or outdated information.
• Right to Erasure / Data Handover: Request the deletion of your staging files or complete transfer of Git repositories upon final settlement.
• Right to Revoke Consent: Withdraw consent for non-essential communications at any time.

We retain project source code, design files, and communications for the duration of the active contract plus any warranty or maintenance period. After formal project completion and IP handover, staging environments and development keys are securely purged or returned upon client request, subject only to statutory tax retention requirements under Bangladesh law.