Legal
Last updated October 2026
We collect the contact and company information you give us, what Google or QuickBooks shares if you connect them, and we send company websites to an AI research provider to generate the summaries and credit read you see in a brief, a check, or the onboarding chat demo. When you finish one of our checks, we also look up your public LinkedIn profile so our team knows who they're talking to. We don't sell your data. This page explains what we collect, why, and who it's shared with.
What you give us directly. Name, email, phone number, company website, and details you share in a form or the onboarding chat — revenue range, growth stage, industry, team size, headquarters location, how bookkeeping and taxes are currently handled, and your role.
If you sign in with Google. Your name, email address, profile photo, Google account ID, and — if your account is on Google Workspace — your organization's domain.
If you connect QuickBooks Online (onboarding demo only). Read access to your company's financial reports (profit & loss, balance sheet, company info) via Intuit's API. We pull this data live each time it's shown to you rather than storing it — the only thing we keep is an encrypted connection token so you don't have to reconnect every visit.
Company research. When a website is submitted for analysis, we send that URL and publicly available content from it to an AI research provider (OpenRouter) to generate a summary of the company and a read on which tax credits might apply. That summary is stored alongside your other information.
Your public LinkedIn profile. When you finish one of our checks (like the fit check or the R&D check), we run a web search for your name and company to find your public LinkedIn profile. We keep only the profile link, so the person who follows up knows who they're talking to. We never send connection requests or messages automatically.
Collected automatically. Pages you visit, how you use them (for example, whether you played a video or finished a check), your general location, device and browser, and the link that brought you to the site (such as a campaign tag in the URL).
To generate the brief or dashboard preview you asked for, to follow up with you about it, and to understand what's actually resonating so we can improve the product. We don't use your information to train AI models, and we don't use it for advertising.
We don't sell your data. It passes through the services that make the product work:
Sensitive tokens (like your QuickBooks connection) are encrypted at rest. Access to your data is restricted by row-level database policies scoped to your account, and every request that reads or writes it is checked against a verified login session — never a value we just trust from the request itself. That said, no system is completely secure, and we can't guarantee it.
This isn't directed at children, and we don't knowingly collect information from anyone under 13. If you believe a child has given us personal information, email privacy@staxiom.com and we'll delete it.
We don't use advertising cookies. We use two kinds of site analytics: Vercel Analytics, which doesn't use cookies, and Google Analytics, which uses cookies to count visits and see which pages and links people use. You can block these cookies in your browser settings or with Google's opt-out add-on (tools.google.com/dlpage/gaoptout). If you sign in, your session is kept in your browser's local storage, not a cookie.
Every email we send has an unsubscribe link. To have your information corrected or deleted, email us at privacy@staxiom.com and we'll take care of it.
If this changes in a way that matters, we'll update the date at the top of this page. Material changes will be reflected here before they take effect.
Reach us at privacy@staxiom.com.