Privacy Notice

Data Controller

Axion ERP is jointly operated by Conexión Laboral del Bajío, S.A. de C.V.("CLB", Mexico) and Smart Global Technologies Inc.("SGT", Ontario, Canada). Depending on the client company using the application, the primary controller may vary. CLB and SGT act jointly as controllers for personal data collected through Axion.

Data we collect

Through the demo request form in the mobile app:

• Full name
• Corporate email
• Company
• Phone (optional)
• Country and industry
• Free-form message you send when requesting a demo
• Technical metadata: IP, user agent, app version, device language

When a company contracts Axion ERP as a customer, we additionally process operational data of personnel registered by the customer (employees, candidates, shifts, attendance with optional geolocation, HR documentation, tax and social security data IMSS / SAT / INFONAVIT for Mexican cases). This data is owned by the customer · CLB / SGT act as data processors.

Purposes

• Respond to demo requests and commercial communication.
• Operate the ERP for contracted customers: manage workforce, shifts, candidates, attendance, payroll, and reports.
• Comply with Mexican legal obligations (IMSS, SAT, INFONAVIT) and Canadian ones (CRA, ESA) when customer requires.
• Application security and fraud prevention.
• Product improvements based on aggregated, anonymized usage.

Data transfers

• To the customer company contracting Axion (when applicable).
• To tax and social security authorities when the customer instructs us to file mandatory reports (IMSS, SAT, INFONAVIT, CRA).
• To technology providers: AWS (hosting), Cloudflare (CDN/security), Twilio and messaging providers (notifications), Apple/Google (push and stores).
• We do NOT sell or share your personal data with third parties for advertising or unrelated commercial purposes.

ARCO rights and equivalents

In Mexico you have rights to Access, Rectification, Cancellation, and Opposition (ARCO) under the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP). In Canada you have equivalent rights under PIPEDA. In the EU and other jurisdictions we apply GDPR-like standards (access, portability, rectification, deletion).

To exercise any of these rights, email us at [email protected] with subject "ARCO Request" or "Data Rights". Response timeline: 20 business days (LFPDPPP art. 32) for Mexico.

Data retention

Demo form data is retained for up to 24 months after last contact. Operational data of contracted customers is retained while the contract is active, plus applicable legal periods (5 fiscal years in Mexico · 7 employment years in Canada).

Security

Encryption in transit (TLS 1.2+) and at rest (AES-256). Auth via signed JWT. Per-device ephemeral tokens. Immutable audit logs. Role-based access with least-privilege principle.

Children's privacy

Axion ERP is an enterprise tool intended for adult professionals. It is NOT directed to children under 16. We do not knowingly collect personal data from minors. If we learn we have collected data from a minor without verifiable parental or legal-guardian consent, we will delete it promptly. If you believe a minor has provided us information, contact [email protected] and we will delete that data within 30 days.

How to delete your data

You can request complete deletion of your data at any time. See our data deletion page for the step-by-step process, timelines and what data is retained for legal obligations after your request.

Notice updates

If we modify this Notice we will notify you in-app and by email at least 15 days before the change takes effect. The effective date above reflects the latest published version.