Privacy Notice

Last updated: 4 October 2026

1. Who this notice is from

This Privacy Notice explains what personal information Unicorn Axis ("we", "us") collects when you visit our website or use AxisFinancial (the "Service"), why we collect it, who we share it with, and the choices you have. It applies to our public website, the sign-up and sign-in pages, and the application itself.

There are two roles to understand. For information about you as our customer (your name, email, billing details and how you use the Service), we decide how it is used and we are responsible for it. For the business information you enter into your workspace, which includes details of your own employees, vendors and customers, you are responsible and we only process it on your behalf and on your instructions. Section 3 covers that second role.

2. What we collect

Information	Where it comes from	Why we need it
Name, work email address, company name, country, phone number	You, when you sign up, add a user or write to us	To create your workspace, let you sign in, send you service messages and answer you
Password	You	To authenticate you. We store only a one-way hash, never the password itself
Subscription and billing details: plan, invoice history, billing country, last four digits and type of the card, the payment provider's customer and subscription references	You and our payment provider Paddle	To bill you, keep tax records and manage your subscription. Your full card number is entered on Paddle's checkout and never reaches us
Messages you send us through the contact form, email or WhatsApp	You	To reply, give support and keep a record of what was agreed
Activity records: sign-in and sign-out times, who created, approved, posted or changed a record, and the pages and actions used	Generated as you use the Service	To keep an audit trail for your company, secure the Service and investigate problems
Technical data: IP address, browser type and device, date and time of requests, error logs	Your browser	To deliver the pages, protect against abuse and diagnose faults

We do not ask for, and ask you not to enter, national identity card numbers, card numbers or bank passwords into free-text fields. We do not knowingly collect information from children.

3. Business information you put into your workspace

A workspace holds the records you create: projects, vendors, customers, employees and their pay, purchase orders, invoices, ledgers, files you attach and so on. Some of it is personal data about other people, such as an employee's name, CNIC or national ID number, address, bank account, salary and absences, or the contact details of a vendor.

• You decide what goes in, why, and who in your company can see it using roles and permissions. You are responsible for having a lawful reason to hold it and for telling your own staff and counterparties about it.
• We use it only to run the Service for you: to store it, display it to the people you authorise, back it up, protect it and, when you ask, help you with a problem.
• We do not read it for our own purposes, sell it, share it for advertising, or use it to train machine-learning models.
• Each workspace is logically separated from every other, and platform administrators can see counts, plan and billing information but not the contents of your documents.

4. How we use information

• To provide, secure, maintain and improve the Service, including support, fixing bugs and preventing fraud and abuse.
• To take payment, issue invoices and keep the tax and accounting records we are required to keep.
• To send you messages about the Service: confirmations, security alerts, billing and limit notices, changes to our terms and, where an Administrator has turned on approval emails, notifications about documents waiting for you. These are not marketing.
• To send news or offers about our products, only if you ask for them or the law allows it, and you can stop them at any time.
• To comply with the law and to establish, exercise or defend legal claims.

Where the law requires us to have a legal basis, we rely on: performing our contract with you; our legitimate interests in running, securing and improving the Service; compliance with legal obligations; and your consent where we ask for it.

5. Who we share it with

We do not sell personal information. We share it only with:

• Paddle, our payment provider and seller of record, which receives your billing details to process payments, tax and refunds, under its own privacy notice.
• Our hosting and infrastructure providers, which store and serve the Service and our backups for us.
• Email and messaging providers we use to deliver service emails and to talk to you on WhatsApp if you contact us there.
• Professional advisers, such as accountants and lawyers, under a duty of confidentiality.
• Authorities and courts, when we are legally required to, or to protect our rights, our customers or the public. We will limit what we give to what is required and, where we may, tell you first.
• A buyer or successor, if our business is sold or reorganised, on the same terms as this notice.

The people you invite into your workspace can see what their role allows. That sharing is controlled by you.

6. Where it is kept and international transfers

The Service is hosted on servers we or our hosting provider operate. Our payment provider and some other providers may process information in other countries. Where personal information is transferred across borders we take reasonable steps to make sure it is protected, for example by choosing providers that commit to appropriate safeguards.

7. Cookies and similar technologies

We keep this simple. We use only the cookies the Service needs in order to work: a session cookie that keeps you signed in and protects forms against cross-site forgery. Without it the application cannot function. We do not use advertising cookies, tracking pixels or third-party analytics on our website or in the application. When you use Paddle's checkout, Paddle may set its own cookies, which are covered by its notice. Your browser settings let you block or delete cookies, but doing so will sign you out and may stop the Service working.

8. How long we keep it

• Account information and workspace data for as long as your workspace is open. After closure we keep it for 30 days, then delete it from live systems; copies in backups are overwritten within a further 60 days.
• Billing and tax records for as long as the law requires us to keep them, typically several years.
• Activity logs inside your workspace for as long as the workspace exists; server logs for a limited period, normally up to 90 days.
• Contact-form messages and support correspondence for up to three years after the conversation ends, unless a longer period is needed to deal with a dispute.

9. Security

We use measures suited to the sensitivity of financial information, including: encrypted connections (HTTPS); passwords stored only as salted one-way hashes; protection of forms against cross-site request forgery; strict separation between workspaces; role-based access inside each workspace; verification of signed payment notifications; and an audit log of what is done. No service is perfectly secure. If we become aware of a breach that affects your personal information we will tell you and the authorities as the law requires.

Backups you download contain all of a workspace's data, including users' password hashes. Keep them on an encrypted drive and treat them like the original data.

10. Your choices and rights

Depending on where you live, you may have the right to ask us to: give you a copy of the personal information we hold about you; correct what is wrong; delete it; restrict or object to how we use it; and move it to another service. You may also withdraw consent you have given, at any time, without affecting what was done before.

• You can see and edit your own name, phone and password on the My Profile screen. An Administrator can export your workspace data from the Backup screen and most lists as CSV.
• If you are an employee, vendor or customer of one of our customers and want to see or correct information held in that customer's workspace, please ask that company, which is responsible for it. If you write to us instead, we will pass your request to them.
• To exercise any right or ask a question, write to info@unicornaxis.com. We may need to check your identity first and will reply within a reasonable time, normally within 30 days.
• If you believe we have not handled your information properly, tell us first so that we can put it right. You may also complain to the data-protection or consumer authority in your country.

11. Changes to this notice and contact

We will update this notice when our practices change and show the new date at the top. If a change is significant we will tell you by email or in the Service.

Questions or requests: info@unicornaxis.com, or Unicorn Axis, Karachi, Pakistan.