Privacy Policy for Axess Hive
Last Updated: July 1, 2026
Effective Date: January 20, 2025
Introduction
Axess-Corrosion, Inc. ("we," "our," "us," or "Axess-Corrosion") operates the Axess Hive mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our App.
By using Axess Hive, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use the App.
Our Role: Your Organization and Us
Axess Hive is a business tool provided to organizations. Who controls your data depends on the type of data:
- Field service data (service reports, measurements, photos, checklists, customer and site information) is owned and controlled by your organization — your employer or contracting company. Axess-Corrosion stores and processes this data on your organization's behalf to provide the Service.
- Account, authentication, security, and support data (your login credentials, login records, support requests) is controlled by Axess-Corrosion in order to operate and secure the Service.
If you have questions about how your organization uses field data collected through the App, or want to exercise rights over that data, contact your organization's administrator. Requests about your account or support data can come directly to us.
When you create or use an account, we collect:
- Email address - Used for authentication and login
- Name (first and last) - Used to identify you within the application
- Phone number (optional) - For contact purposes if provided
- User role - Administrator or Technician designation assigned by your organization
2. Service Report Data
In the course of using the App for field service operations, we collect:
- Customer information - Names and details of customers you service
- Site information - Names, locations, and descriptions of service sites
- Location data - Names and descriptions of specific monitoring locations within sites
- Service dates and times - When service activities occur
- Technician assignments - Which technicians are assigned to specific tasks
- Corrosion monitoring data - Measurements, weight loss calculations, corrosion rates, and related technical data
- Checklist data - Safety checklist responses and completion records
3. Photos and Images
The App allows you to capture and store:
- Location photos - Images documenting site conditions
- Installed coupon photos - Images of corrosion monitoring coupons after installation
- Retrieved coupon photos - Images of coupons after retrieval for analysis
Photos are stored locally on your device and synchronized to our cloud servers when you have an internet connection.
Photo metadata (EXIF): Photos are stored and uploaded as captured. If your device's camera is set to embed location tags (geotagging), photos you capture or attach from your gallery may contain metadata added by your device — including GPS coordinates — and that metadata is stored with the photo on our servers. The App itself never requests location permission and does not read or use this metadata. If you do not want location data embedded in photos, disable location tags in your device's camera settings.
4. Device Permissions
The App requests the following device permissions:
- Camera (
android.permission.CAMERA on Android; Camera access on iOS) — used only for:
- Scanning QR codes to identify monitoring locations and devices. No images or video from QR scanning are stored, transmitted, or shared — the camera is accessed only while the scanner is open.
- Capturing report photos (location, installed coupon, and retrieved coupon images). Only photos you explicitly save to a record in the App are stored and uploaded to our servers as part of the associated report.
The App does not access your camera in the background, and does not access your device's contacts, microphone, or GPS location.
We automatically collect certain device information:
- Device type - iPhone, iPad, Android device, or Windows PC
- Operating system version - iOS, Android, or Windows version
- App version - The version of Axess Hive you are using
6. Diagnostic Data
The App does not include any third-party analytics, crash-reporting, or advertising SDKs. We do not automatically collect crash reports, performance metrics, or usage analytics from your device. If you contact support about a problem, we receive only the information you choose to send us.
We want to be clear about what we do NOT collect:
- GPS location data - The App never requests location permission and does not track your physical location. Service locations are entered manually by users. (Photos may contain camera-added location metadata — see "Photos and Images" above.)
- Browsing history - We do not track websites you visit
- Search history - We do not track your searches outside the App
- Financial information - We do not collect payment card or banking information
- Health data - We do not collect any health or fitness information
- Contacts - We do not access your device contacts
- Advertising identifiers - We do not collect data for advertising purposes
We use the information we collect to:
- Provide the Service - Enable you to create, manage, and sync service reports
- Authenticate Users - Verify your identity and manage access to your account
- Sync Data - Synchronize your data between your device and our cloud servers
- Enable Offline Use - Store data locally so you can work without internet connectivity
- Provide Support - Respond to your support requests and troubleshoot issues
- Improve the App - Investigate issues reported by users to improve features and fix bugs
- Ensure Security - Protect against unauthorized access and maintain data integrity
We do NOT use your information for:
- Advertising or marketing to third parties
- Selling to data brokers
- Profiling for purposes unrelated to the service
Data Storage and Security
Local Storage
- All data is stored locally on your device in an encrypted SQLite database
- Data remains on your device even when offline
- Local data is deleted when you uninstall the App
Cloud Storage
When connected to the internet, your data synchronizes to our cloud infrastructure:
- Authentication: AWS Cognito (Amazon Web Services)
- Database: AWS RDS PostgreSQL with AES-256 encryption at rest
- Photo Storage: AWS S3 with AES-256 encryption at rest
- Data Transfer: All data transmitted over TLS 1.2+ encrypted connections
Security Measures
We implement industry-standard security measures including:
- Encryption in transit - TLS 1.2+ for all network communications
- Encryption at rest - AES-256 encryption for stored data
- Access controls - Role-based access limiting data to authorized users
- Private infrastructure - Database servers in private VPC with no public internet access
- Regular backups - Automated daily backups with 7-day retention
- Biometric authentication - Optional Face ID/Touch ID support for device access. Biometric verification is performed entirely by your device's operating system — we never receive or store your biometric data.
Data Retention
| Data Category |
Retention Period |
| Account information |
While your account is active; removed after you or your organization request account deletion |
| Service reports, measurements, checklists |
Business records controlled by your organization; retained per its retention policy (by default, for the duration of our relationship with your organization) |
| Photos |
Retained with the associated service report |
| Login and security records |
While your account is active, and afterward only as needed for security purposes |
| Support correspondence |
As long as needed to resolve and document the request |
| Backups |
Automated daily backups retained for 7 days |
When a deletion request is honored, data is removed from active cloud systems within 30 days; backup copies age out within a further 7 days under the backup schedule above.
Note: Deleting your individual account does not delete business records (service reports, photos) owned or controlled by your organization. Requests to delete those records must come from your organization.
Data Sharing and Disclosure
We Do NOT:
- Sell your personal information to third parties
- Share your data with advertisers
- Use your data for marketing purposes
- Share data with unrelated third parties
Your Data Is Accessible To:
- You - The authenticated user who created the data
- Your Organization - Other authorized users within your organization
- Axess-Corrosion Administrators - For technical support purposes only, with appropriate access controls
We May Disclose Data When Required:
- To comply with legal obligations or valid legal process
- To protect the rights, property, or safety of Axess-Corrosion, our users, or others
- In connection with a merger, acquisition, or sale of assets (with notice to users)
Third-Party Services
Axess Hive uses the following third-party services to operate:
| Service |
Provider |
Purpose |
| AWS Cognito |
Amazon Web Services |
User authentication |
| AWS RDS |
Amazon Web Services |
Cloud database storage |
| AWS S3 |
Amazon Web Services |
Photo and file storage |
These services are operated by Amazon Web Services and are subject to:
We have Data Processing Agreements in place with AWS to ensure your data is handled appropriately.
Your Rights and Choices
You have the right to:
Access Your Data
Request a copy of the personal data we hold about you.
Correct Your Data
Request correction of inaccurate or incomplete data.
Delete Your Data
Request deletion of your account and associated data.
Export Your Data
Request an export of your data in a portable format.
Withdraw Consent
Stop using the App at any time. Note that this may affect your ability to perform job functions if the App is required by your employer.
To exercise these rights, contact:
- Your system administrator (for organization-managed accounts)
- Email: janus@axess.energy
We will respond to requests within 30 days.
Children's Privacy
Axess Hive is a business application not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected data from a child under 18, we will take steps to delete that information.
International Data Transfers
Axess Hive's servers are located in the United States (AWS us-east-2 region), and the App is currently offered only in the United States for use by U.S.-based organizations and their personnel. If your organization arranges for use of the App from outside the United States, personal data will be transferred to, stored, and processed in the United States, and such transfers are governed by our agreement with your organization, which includes appropriate safeguards where required by applicable law. Contact us for more information about transfer safeguards.
California Privacy Rights (CCPA)
If you are a California resident and the CCPA (as amended by the CPRA) applies to us — its applicability depends on statutory thresholds — you have additional rights:
- Right to Know - What personal information we collect and how it's used
- Right to Correct - Request correction of inaccurate personal information
- Right to Delete - Request deletion of your personal information
- Right to Opt-Out - We do not sell or share personal information, so this right does not apply
- Right to Limit Use of Sensitive Personal Information - We do not collect sensitive personal information as defined by the CCPA, so this right does not apply
- Right to Non-Discrimination - We will not discriminate against you for exercising your rights
To exercise your California privacy rights, contact janus@axess.energy.
European Privacy Rights (GDPR)
If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):
Legal Basis - We process your data based on:
- Contract performance (providing the service)
- Legitimate interests (improving the service, security)
- Consent (where specifically requested)
Data Controller / Processor - For field service data, your organization is the data controller and Axess-Corrosion, Inc. acts as its processor. For account, security, and support data, Axess-Corrosion, Inc. is the data controller. (See "Our Role: Your Organization and Us" above.)
Additional Rights:
- Right to access
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to lodge a complaint with a supervisory authority
For GDPR-related inquiries, contact: janus@axess.energy
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make changes:
- We will update the "Last Updated" date at the top of this policy
- For material changes, we will notify you through the App or via email
- Continued use of the App after changes constitutes acceptance of the updated policy
We encourage you to review this Privacy Policy periodically.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Axess-Corrosion, Inc.
- Email (privacy & support): janus@axess.energy
- Website: https://axess.energy
- Address: 2001 Timberloch Place, Suite 500, The Woodlands, TX 77380
For urgent privacy matters, please include "PRIVACY URGENT" in your email subject line.
Apple App Store Privacy Nutrition Labels
Data Linked to You:
- Contact Info (email, name, phone)
- User Content (photos, service reports)
- Identifiers (user ID)
Data Not Linked to You:
- None (the App contains no analytics or crash-reporting SDKs)
Data Used to Track You:
Google Play Data Safety
- Data collected: Contact info, photos, app activity (service reports, login/sync records)
- Data shared: None
- Security practices: Data encrypted in transit and at rest
- Data deletion: Users can request data deletion
This Privacy Policy is effective as of January 20, 2025 and applies to Axess Hive version 1.0.14 and later.
Document Version: 1.4 — Updated July 2026 (controller/processor roles, retention table, international transfer language, CCPA rights, biometric clarification, photo EXIF metadata disclosure; removed diagnostics section — the App contains no analytics or crash-reporting SDKs)