Privacy policy

What this policy covers

Attesko LLC, doing business as Paxo, operates the Paxo website, desktop application, and related services. This policy explains what information we collect, why we use it, who receives it, and the choices available to you.

Information we collect

We collect account and workspace details, records you choose to place in Paxo, support communications, billing information handled by our payment provider, and limited device, security, and usage data needed to operate and protect the service.

When you connect another service, we receive the account identifiers, authorization tokens, and records covered by the permissions you approve. We request only the permissions needed for the connector you select. You can disconnect a provider from Paxo at any time.

How we use information

We use information to provide and secure Paxo, synchronize the integrations you enable, process documents and approved actions, answer support requests, maintain audit evidence, and improve service reliability. Paxo does not sell personal information. Customer content is not used to train shared AI models without a separate, explicit agreement.

Website analytics

On paxo.io, our first-party analytics measures page views, approximate country/region/city, device category, browser, operating system, referring site, campaign tags and selected link or video actions. The server briefly uses your network address and browser headers to derive a daily anonymous estimate; raw IP addresses and user-agent strings are not saved in analytics. The daily secret is discarded, and visitors are not linked across days, devices, accounts or workspaces. Location is approximate and may reflect a VPN or network provider.

Visits group activity separated by less than 30 minutes. Focused, visible time is measured in short intervals. Anonymous analytics events are retained for up to 400 days. No advertising trackers, session recordings or analytics identity cookies are used. You can exclude this browser from analytics; this saves only an exclusion-preference cookie shared across Paxo subdomains. Repeat this choice on each browser or device. Your choice does not change earlier anonymous counts.

Google user data

Paxo's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Google data is used only to provide the features you authorize, is not sold, and is not used for advertising.

AI receptionist calls

When a business enables Paxo's AI receptionist, ElevenLabs processes speech and OpenAI processes bounded transcribed text to answer questions from the business's published profile and prepare caller-confirmed requests. Their standard processing may occur outside the United States. This is separate from the US region used for uploaded workspace files.

The call explains AI processing and requests your consent before transcription. You may decline or ask for a person. Audio recording is disabled. Call transcripts are retained for up to 30 days unless a documented hold requires preservation; provider deletion follows the configured retention settings and applicable provider terms. A receptionist cannot approve prices, book work or make payments on its own.

Text messages and phone data

If you explicitly opt in to Paxo text messages, we use your phone number and message history to deliver requested operational messages, respond to you, prevent abuse, and keep required delivery records. Consent is not a condition of purchase. Message frequency varies with requested activity. Message and data rates may apply. Reply STOP to opt out or HELP for help. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. See how work-alert consent works.

Service providers and disclosures

We use vetted infrastructure, identity, communications, payments, document-processing, and support providers to run Paxo. They may process information only for contracted services. We may also disclose information when required by law, to protect people or the service, or as part of a business transaction with appropriate safeguards.

Retention and security

We retain information for as long as needed to provide the service, meet documented legal or audit obligations, resolve disputes, and enforce agreements. Retention can vary by record type and workspace policy. We use access controls, encryption, tenant isolation, logging, and recovery procedures designed to protect stored information. No system can guarantee absolute security.

Your choices

You can review or update account details, disconnect integrations, revoke a provider grant at the provider, and ask us to access, correct, export, or delete personal information, subject to legal and record retention requirements. Workspace administrators control business records held for their organization.

Contact us

For privacy questions or requests, email privacy@paxo.io. You can also read our Terms of service and Customer data policy.