# Privacy Policy

**Last Updated: July 25, 2026**

## Introduction

Oxiom ("we," "us," "our," or "Company") operates the Oxiom One platform and Oxiom Invoice Processing application ("Service"). We are committed to protecting your privacy and ensuring you have a positive experience on our platform.

This Privacy Policy explains our practices regarding the collection, use, disclosure, and safeguarding of information.

## 1. Information We Collect

### Personal Information
- Name, email address, phone number
- Company name and title
- Payment and billing information
- Account preferences and settings

### Invoice Data
- Vendor names and contact information
- Invoice numbers, dates, and amounts
- Invoice attachments (PDFs, images)
- GL codes, cost centers, and project information
- Approval and payment history

### Technical Information
- IP address and device information
- Browser type and version
- Pages visited and time spent
- Links clicked and features used
- Error logs and system performance data

## 2. How We Use Your Information

We use collected information to:
- Deliver and improve the Service
- Process invoices and manage workflows
- Generate reports and analytics
- Authenticate users and maintain security
- Communicate with you about your account
- Comply with legal obligations
- Prevent fraud and detect abuse

## 3. Data Storage and Security

We implement industry-standard security measures including:
- Encryption in transit (TLS/SSL)
- Encryption at rest (AES-256)
- Access controls and authentication
- Regular security audits
- Intrusion detection and monitoring
- Secure data centers with physical security

## 4. Data Retention

Invoice data and account information are retained according to:
- Your subscription agreement
- Your configured retention policies
- Legal and compliance requirements
- Your explicit deletion requests

Deleted data may be retained in backups for 30 days.

## 5. Data Sharing

We do not sell or rent your personal data. We may share information with:
- Service providers and subprocessors (e.g., cloud hosting, analytics)
- ERP and accounting systems (when you authorize integrations)
- Law enforcement when legally required
- Legal advisors for compliance matters

## 6. Your Rights

Depending on your location, you have rights to:
- Access your personal data
- Correct inaccurate data
- Delete your data
- Receive data in portable format
- Opt out of marketing communications
- Restrict processing

## 7. International Data Transfers

Oxiom operates globally. Your information may be transferred to, stored in, and processed in countries other than your country of residence, which may have different data protection laws.

## 8. GDPR Compliance

For EU and UK residents: We comply with the General Data Protection Regulation (GDPR). We have a Data Processing Agreement (DPA) available for enterprise customers.

## 9. Contact Us

For privacy inquiries:
- Email: oximindia@gmail.com
- Mail: Oxiom, Inc., [Address]
- Phone: +1 (555) 014-9028

## 10. Changes to This Policy

We may update this policy periodically. Continued use of the Service after changes indicates acceptance of the updated policy.