Legal

Privacy Policy

Last updated  ยท  May 2025

Privacy Policy

Last Updated: May 2, 2026  ·  Effective Date: May 2, 2026

1. Introduction & Scope

Lost Boy Graphics ("Company," "we," "us," or "our") operates the Axelis platform, accessible at axelis.ai and through associated mobile and desktop applications (collectively, the "Service"). Axelis is an AI-powered personal assistant platform designed to help entrepreneurs and small business operators manage social media, run advertising campaigns, generate content, and integrate with third-party productivity services.

This Privacy Policy explains what information we collect, how we use and share it, your rights regarding your data, and how to contact us with privacy-related inquiries. This policy applies to all users of the Axelis platform worldwide, with supplemental disclosures for users in the European Economic Area (EEA), United Kingdom, and California.

By creating an Axelis account or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, you should not use the Service.

Data Controller: Lost Boy Graphics, owned and operated by Elijah Green, is the data controller responsible for your personal information. Contact: elijahgreen@lostboygraphics.com

2. Information We Collect

2.1 Account Information

When you create an Axelis account, we collect:

  • Full name and display name
  • Email address
  • Password (stored as a hashed value โ€” we never store your plaintext password)
  • Profile photo (if provided)
  • Billing information (credit card data is handled directly by Stripe and is not stored on our servers โ€” we store only a Stripe customer ID and last-four digits for display purposes)
  • Subscription tier and purchase history
  • Business name, industry, and self-reported user role (if provided during onboarding)

2.2 Usage Data

We automatically collect information about how you interact with the Service:

  • Log data including IP address, browser type, operating system, referring URLs, pages visited, and time stamps
  • Device identifiers and mobile advertising IDs (when applicable)
  • Feature usage metrics (which tools you use, frequency, duration)
  • Error logs and crash reports
  • Session identifiers and authentication tokens
  • Performance diagnostics

2.3 Conversation & AI Interaction Data

When you interact with the Axelis AI assistant, we collect and store:

  • Messages you send to the AI assistant (prompts, instructions, queries)
  • AI-generated responses returned to you
  • Memory entries that you explicitly instruct the assistant to remember
  • Preferences you configure for your AI assistant's personality and behavior
  • Conversation history, including timestamps and session identifiers
  • Generated content (images, video clips, ad copy) associated with your account

Important: Conversation data sent to Anthropic (Claude API) or OpenAI is subject to those providers' own data handling terms. We recommend reviewing Anthropic's Privacy Policy and OpenAI's Privacy Policy. We have data processing agreements in place with these providers that restrict use of your data to service delivery only.

2.4 Connected Third-Party Account Data

When you connect external accounts to Axelis, we collect and store OAuth tokens and the following data necessary to perform the requested integrations:

Connected Service Data We Access
Twitter / X Profile info, read/write access to tweets, direct message permissions (if granted), analytics data
Instagram / Meta Business profile info, media posting, comment management, insights/analytics
LinkedIn Profile data, posts, company page management (if authorized), analytics
TikTok Profile info, content posting, video analytics
Facebook Pages, ad accounts, post management, Meta Ads data, insights
Google Suite (Gmail) Email read/send/search permissions (scope-limited to what you authorize)
Google Calendar Calendar events, free/busy status, event creation/modification
Google Drive File access, creation, and modification within scopes you approve
Google Contacts Contact list read/write for CRM and communication features
Google Tasks Task lists, task creation and completion tracking
Spotify Playlist access, currently playing track, library data for content inspiration features

We access only the scopes necessary to deliver the features you use. You may revoke any connected account at any time from your account settings, which will delete the associated OAuth tokens from our systems.

2.5 Content You Generate or Upload

This includes images, videos, ad creative, written copy, templates, and any other files you upload, create, or generate through the Service.

2.6 Communications

If you contact us directly via email or support channels, we retain records of those communications including your contact details and message content.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Providing and Improving the Service

  • Creating and managing your account
  • Processing your requests and delivering AI-generated responses and content
  • Executing integrations with connected third-party accounts on your behalf
  • Scheduling and publishing social media content per your instructions
  • Running advertising campaigns configured through the platform
  • Personalizing your AI assistant based on stored memories and preferences
  • Diagnosing and fixing technical issues
  • Improving our AI models, features, and user experience (using aggregated, de-identified data)

3.2 Billing & Account Management

  • Processing subscription payments through Stripe
  • Sending billing confirmations, receipts, and renewal notices
  • Managing plan upgrades, downgrades, and cancellations

3.3 Communications

  • Sending product updates, feature announcements, and service-related notices (these cannot be opted out of as they are essential to the Service)
  • Sending marketing emails (only with your consent; you may unsubscribe at any time)
  • Responding to your support requests

3.4 Safety, Security, and Legal Compliance

  • Detecting and preventing fraud, abuse, and violations of our Acceptable Use Policy
  • Enforcing our Terms of Service
  • Complying with applicable laws and responding to lawful legal requests
  • Protecting the rights, property, and safety of Lost Boy Graphics, our users, and the public

3.5 Analytics and Research

We analyze aggregated, de-identified usage patterns to understand how the Service is used and to make data-informed product decisions. This aggregated data does not identify you personally.

5. Third-Party Services & Data Sharing

We do not sell your personal information. We share data only as described below:

5.1 AI Inference Providers

  • Anthropic (Claude API): Your conversation messages are transmitted to Anthropic's API to generate AI responses. Anthropic processes this data under their API terms. We have data processing agreements in place restricting use to inference only.
  • OpenAI: Selected features may use OpenAI's API for specific tasks (image analysis, specialized models). Data transmitted is governed by our data processing agreement with OpenAI.

5.2 Content Generation Providers

  • Replicate: Used for image and video generation tasks. Image prompts and outputs may transit Replicate's infrastructure.
  • RunwayML: Used for AI video generation features. Content prompts are transmitted to RunwayML's API.

5.3 Infrastructure & Database

  • Supabase: Our primary database and authentication backend. Your account data, conversation history, and generated content are stored in Supabase's hosted PostgreSQL environment. Supabase is GDPR-compliant and offers data residency in the EU on request.

5.4 Payments

  • Stripe: All payment processing is handled by Stripe. We do not receive or store full credit card numbers. Stripe's privacy policy governs payment data: stripe.com/privacy

5.5 Social & Productivity Platforms

When you connect social media or Google accounts, your data is shared with those platforms as necessary to fulfill your requested actions (posting content, reading calendar events, etc.). Each platform's own privacy policy governs their use of that data.

5.6 Analytics

We may use analytics tools (including Google Analytics) to understand aggregate usage patterns. These tools may collect IP addresses and usage behavior. We configure these tools to anonymize IP addresses where possible.

5.7 Legal Requirements

We may disclose your information if required to do so by law, court order, subpoena, or government regulation, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of Lost Boy Graphics, our users, or the public.

5.8 Business Transfers

If Lost Boy Graphics is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will provide notice before your personal information becomes subject to a materially different privacy policy.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. Specific retention periods:

  • Account data: Retained for the duration of your account plus 30 days after deletion (to allow account recovery) and then permanently deleted, except where we are required by law to retain records longer.
  • Conversation history: Retained per your plan's history limits and deleted when you clear your history or delete your account.
  • Generated content: Retained until you delete it or your account is deleted.
  • Connected account tokens: Deleted immediately upon disconnection or within 30 days of account deletion.
  • Billing records: Retained for 7 years to comply with tax and financial regulations.
  • Support communications: Retained for 3 years.
  • Security and audit logs: Retained for 90 days.

Following the applicable retention period, data is permanently deleted or irreversibly anonymized.

7. Data Security

We implement commercially reasonable technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

  • TLS 1.2 or higher encryption for all data in transit
  • AES-256 encryption for data at rest in our Supabase database
  • Secure, hashed password storage using industry-standard algorithms
  • Encrypted storage of third-party OAuth tokens
  • Role-based access controls limiting employee access to personal data
  • Regular security assessments and monitoring

Despite these measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at elijahgreen@lostboygraphics.com.

8. Your Rights

Depending on your jurisdiction, you have rights with respect to your personal data. We honor these rights for all users regardless of location:

8.1 Right of Access

You may request a copy of the personal data we hold about you. Most of your data is accessible directly from your account dashboard. For a complete data export, email elijahgreen@lostboygraphics.com with the subject line "Data Access Request."

8.2 Right to Rectification

You may update or correct inaccurate personal information at any time through your account settings. For information you cannot update yourself, contact us.

8.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your account and all associated personal data. Deletion requests will be processed within 30 days. Some information may be retained where required by law (e.g., billing records). See our Data Deletion Policy for full details and the deletion request form.

8.4 Right to Data Portability

You may request your conversation history, memories, and generated content in a machine-readable format (JSON or CSV). Submit requests to elijahgreen@lostboygraphics.com.

8.5 Right to Restrict Processing

Under certain circumstances, you may request that we restrict the processing of your personal data while a dispute is being resolved.

8.6 Right to Object

You may object to processing based on our legitimate interests (e.g., analytics, marketing). To object, contact us or use the unsubscribe link in any marketing email.

8.7 Withdrawal of Consent

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

8.8 Exercising Your Rights

To exercise any of these rights, email us at elijahgreen@lostboygraphics.com with "Privacy Rights Request" in the subject line. We will respond within 30 days (or 45 days for complex requests, with notice). We may need to verify your identity before processing your request.

If you are located in the EEA, you have the right to lodge a complaint with your local data protection authority if you believe we have not adequately addressed your concerns.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with additional rights.

9.1 Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information as defined by the CCPA: identifiers (name, email, IP address), commercial information (subscription and billing records), internet or other electronic network activity (usage logs), geolocation data (approximate, from IP address), and inferences drawn from your usage to create a profile for the purpose of personalizing your AI assistant.

9.2 Right to Know

You have the right to request disclosure of the categories of personal information we collect, the purposes for which we use it, and the categories of third parties with whom we share it. This Privacy Policy constitutes that disclosure.

9.3 Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions. See Section 8.3 and our Data Deletion Policy.

9.4 Right to Opt-Out of Sale or Sharing

We do not sell personal information as defined by the CCPA, and we do not share personal information for cross-context behavioral advertising purposes.

9.5 Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights.

9.6 Submitting Requests

California residents may submit rights requests by emailing elijahgreen@lostboygraphics.com with "California Privacy Request" in the subject line.

10. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to operate the Service. For a detailed explanation of the cookies we use, please see our Cookie Policy. Essential cookies required for authentication and security cannot be disabled. You may opt out of analytics and non-essential cookies through your browser settings or our cookie preference center.

11. Children's Privacy

The Axelis platform is not directed to individuals under the age of 13, and we do not knowingly collect personal information from children under 13. Users must be at least 13 years old to create an account. Users between the ages of 13 and 18 must have the consent of a parent or legal guardian.

If we learn that we have inadvertently collected personal information from a child under 13, we will promptly delete that information. If you believe we have collected data from a child under 13, please contact us at elijahgreen@lostboygraphics.com.

12. International Data Transfers

Lost Boy Graphics is based in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those in your home country.

For transfers of personal data from the EEA, UK, or Switzerland to the United States, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) adopted by the European Commission. For more information about these safeguards, contact us.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will notify you by email (using the address associated with your account) and/or by posting a prominent notice on the Service at least 14 days before the changes take effect. The updated policy will be identified by a revised "Last Updated" date at the top of this page.

Your continued use of the Service after the effective date of the revised policy constitutes your acceptance of the changes.

14. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:

We aim to respond to all privacy inquiries within 5 business days and to resolve substantive requests within 30 days.