Privacy Policy

This Privacy Policy explains how Oxiom collects, uses, protects, and manages personal and business data processed through Oxiom Invoice Processing.

Data We Collect

Oxiom collects account information, contact details, authentication data, usage logs, support communications, and invoice-related business records that customers choose to upload or process through the platform. Depending on configuration, uploaded records may include vendor details, payment references, approver comments, and operational metadata needed to route, validate, store, and audit invoice workflows.

How We Use Data

We use personal and business data to provide the service, secure customer accounts, operate workflows, deliver support, improve product performance, meet legal obligations, and communicate important service updates. Where permitted by law, limited account and usage information may also be used to analyze service adoption, prevent abuse, and develop new platform features.

Data Sharing

Oxiom does not sell personal information. We may disclose data to trusted service providers, infrastructure partners, professional advisers, and public authorities when necessary to deliver the service, comply with legal obligations, or protect rights and safety.

Data Retention

We retain account, operational, and invoice-related data for as long as needed to deliver the contracted service, maintain security records, satisfy audit needs, resolve disputes, and comply with applicable law. Customers can configure certain retention periods and deletion workflows subject to contractual and regulatory requirements.

Your Rights Under GDPR and CCPA

Subject to applicable law, individuals may have rights to access, correct, delete, restrict, object to, or port personal data, as well as rights related to automated decision-making, non-discrimination, and authorized-agent requests. Requests can be submitted through our contact channels and may require identity or authority verification.

Cookies

Oxiom uses essential cookies and similar technologies to maintain secure sessions, preserve preferences, support performance monitoring, and understand how the platform is used.

Security

We maintain administrative, technical, and organizational safeguards designed to protect personal and business data against unauthorized access, loss, misuse, alteration, and disclosure, including encryption, access controls, logging, and incident-response practices.

Contact

Questions about this Privacy Policy, your privacy rights, or Oxiom data practices may be directed to compliance@oxiom.ai or through the Oxiom contact page.