Privacy Policy

1. Scope and roles

Northern Axis, LLC, doing business as Nordax Digital (collectively, “Nordax Digital,” “we,” “us,” or “our”), operates Nordax OS. Nordax OS is a product of Nordax Digital. This policy applies to visitors, tenant owners, invited tenant users, Nordax Digital clients, and people who communicate with us about the platform.

For account, website, billing, security, and direct business-contact information, Nordax Digital generally acts as the business or controller. For customer, prospect, employee, appointment, job, invoice, and similar information a tenant places in Nordax OS, the tenant generally determines the purpose and means of processing and Nordax Digital acts as its processor or service provider.

2. Information we process

• Account and identity data, including names, business contact information, roles, authentication identifiers, and account preferences.
• Tenant business data, including customers, leads, appointments, jobs, files, messages, quotes, proposals, contracts, invoices, reviews, and operational records.
• Payment and subscription information. Payment card details are handled by Stripe; Nordax OS generally receives transaction identifiers, amounts, status, and limited billing metadata.
• Connected-service data authorized by a user, such as Google Calendar events, Google Analytics and Ads data, Business Profile information, Meta data, and other enabled integrations.
• Communications data, including transactional email and SMS content, delivery status, opt-in or opt-out records, support requests, and contact-form submissions.
• Technical and security data, including device, browser, IP address, request logs, timestamps, diagnostic events, and records used to prevent abuse.

Tenants decide what information they enter into the platform and must only collect and use information they are authorized to process.

3. How information is used

• Provide, secure, maintain, personalize, and support Nordax OS and enabled modules.
• Authenticate users, enforce tenant isolation and permissions, and prevent fraud or unauthorized access.
• Process requested transactions, send operational notices, and deliver tenant-directed communications.
• Connect authorized third-party services and perform actions a user requests through those services.
• Measure reliability, troubleshoot problems, improve user-facing functionality, and meet legal obligations.
• Communicate about an account, service request, security event, agreement, invoice, or material platform change.

4. Google user data

When a user connects Google services, Nordax OS accesses only the scopes presented during authorization and uses that information to provide the connected features the user selects. Depending on the connection, this may include calendar availability and events, analytics properties and reports, advertising account data, Search Console data, or Business Profile information.

Nordax Digital does not sell Google user data, use it for targeted advertising, or use it to train a generalized artificial-intelligence model. Users can disconnect Google services in Nordax OS or revoke access through their Google Account.

The use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. How information is shared

Nordax Digital may disclose information to the tenant responsible for the account, to people that tenant authorizes, and to service providers needed to operate enabled features. Current categories and providers are described in the Subprocessor Notice.

Information may also be disclosed when reasonably necessary to comply with law, protect rights or safety, investigate abuse, complete a corporate transaction subject to appropriate safeguards, or follow a tenant’s lawful instructions. Nordax Digital does not sell personal information or share it for cross-context behavioral advertising.

6. Retention and account status

Information is retained for the period needed to provide the service, maintain security and audit records, satisfy contractual and legal requirements, resolve disputes, and support legitimate business operations. Retention periods vary by record type and tenant configuration.

If a subscription is paused or unpaid, paid operations may be disabled while retained records remain available on a read-only basis where required by the agreement or applicable law. Nordax Digital does not treat nonpayment alone as an instruction to immediately delete tenant data. After termination, data may be exported, retained, or deleted according to the agreement, tenant instructions, backup cycles, and legal obligations.

7. Choices and rights

Users may update account information, manage connected services, control eligible notification settings, or request access, correction, deletion, or export by contacting us. Requests involving data controlled by a tenant may be referred to that tenant.

Nordax OS honors applicable suppression, unsubscribe, and Do Not Contact indicators. Marketing choices do not prevent essential account, security, billing, or transaction messages where those messages are permitted by law.

8. Security, transfers, and children

Nordax Digital uses administrative, technical, and organizational safeguards designed to protect information, including access controls, tenant scoping, encryption in transit, provider security controls, logging, and incident-response procedures. No system can guarantee absolute security.

Information may be processed in the United States and other places where authorized providers operate, subject to contractual and legal safeguards where required. Nordax OS is intended for business users and is not directed to children under 13.

9. Updates

We may update this policy to reflect changes in the platform, law, or our practices. Material changes will be posted here and may require renewed in-platform acceptance before continued use of affected features.