Privacy

Privacy policy.

How we collect, use and protect personal data.

Last updated 29 July 2026. This policy explains how we handle personal data when you use axlrx.ai or contact us.

1. Who we are

AXLRx™ is a proprietary product of MoatRx Consulting, a consulting firm based in Pune, India. MoatRx Consulting is the controller of the personal data described in this policy, which means we decide why and how it is used.

You can reach us about anything in this policy at hello@axlrx.ai.

2. What this policy covers

It covers the axlrx.ai website, the forms on it, and the email correspondence that follows from them. If you engage us for commissioned work, the handling of data you share during that engagement is governed by the agreement we sign with you, which sits alongside this policy.

3. What we collect

Information you give us. When you submit the contact or commission form, or email us, we collect your name, work email address, employer, job title where you provide it, and whatever you write in the message. The commission form also asks for details of the asset you want covered, such as the product, mechanism, indication and geography. Treat those fields as you would any external correspondence, and do not send us confidential clinical or commercial information through a web form.

Information collected automatically. When you visit the site we collect standard technical and usage data through Google Analytics 4: pages viewed, time on page, referring site, approximate location derived from your IP address, and device and browser type. We do not use this to identify you personally, and we run no advertising or profiling cookies.

We do not collect special category data and we do not want it. Nothing on this site asks about health, and you should not send us patient-identifiable information.

4. Why we use it, and our lawful basis

For visitors in the UK and the EEA, this sets out our lawful basis under Article 6 of the UK GDPR and the EU GDPR.

  • To reply to your enquiry and scope possible work. Basis: steps taken at your request before entering a contract, and our legitimate interest in responding to business enquiries.
  • To deliver a commissioned brief and administer the engagement. Basis: performance of a contract.
  • To keep records of enquiries and engagements. Basis: our legitimate interest in running the business and resolving disputes, and legal obligation where Indian tax and accounting law requires retention.
  • To measure how the site is used and improve it. Basis: consent for the cookies themselves, and legitimate interests in the resulting aggregate analysis. See section 5.
  • To send you an occasional update about new briefs, only if you ask for it. Basis: consent, which you can withdraw at any time.

We do not sell personal data, we do not share it with data brokers, and we do not use it to make automated decisions that produce legal or similarly significant effects.

5. Cookies and analytics

We use Google Analytics 4 on every page. It sets cookies in your browser to distinguish one visit from another and to measure how the site is used.

Where your local law requires your consent before these cookies are set, we are putting a consent control in place. Until it is live, you can stop Google Analytics running by using your browser's cookie controls, by browsing in a private window, or by installing Google's Analytics opt-out browser add-on. We set no advertising, retargeting or profiling cookies of any kind.

6. Who we share it with

We share personal data only with the service providers that run our infrastructure, and only so far as they need it to provide that service to us. They act on our instructions and may not use your data for their own purposes.

  • Cloudflare, which provides hosting and content delivery for axlrx.ai and our content management system.
  • Directus, the content management software running our own instance at cms.axlrx.ai.
  • FormSubmit, which delivers contact form submissions to our inbox.
  • Google Analytics, for site usage measurement.
  • Our business email provider, for correspondence with you.

We may also disclose data where the law requires it, or to establish or defend a legal claim.

7. Where your data goes

We operate from India, so personal data you send us is transferred to and processed in India. Our service providers may also process data in other countries, including the United States.

India is not covered by a UK or EU adequacy decision. If you are in the UK or the EEA and you want details of the basis on which your data is transferred, or you want a data transfer agreement in place before you share personal data with us, email hello@axlrx.ai and we will arrange it.

8. How long we keep it

Enquiries that do not lead to an engagement are kept for 24 months from our last contact with you, then deleted. Records relating to a commissioned engagement are kept for as long as the engagement is live, and afterwards for the period required by Indian tax and accounting law. Analytics data is retained on Google's standard retention setting for the property.

9. Your rights

If you are in the UK or the EEA, you have the right to access your personal data, to have it corrected, to have it erased, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent where our use relies on consent. Withdrawing consent does not affect anything we did before you withdrew it.

If you are in India, the Digital Personal Data Protection Act 2023 gives you the right to access a summary of your personal data and how it is processed, to have it corrected, completed, updated or erased, to nominate another person to exercise your rights if you die or become incapacitated, and to have a grievance addressed.

To exercise any of these, email hello@axlrx.ai. We respond within one month. We will not charge you, and we will not treat you differently for asking.

10. Complaints

If you are unhappy with how we have handled your data, tell us first and we will try to put it right. You also have the right to complain to a regulator: the Information Commissioner's Office in the UK, your national supervisory authority in the EEA, or the Data Protection Board of India.

11. Children

This is a business-to-business service. It is not directed at children and we do not knowingly collect data from anyone under 18.

12. Changes to this policy

When we change this policy we update the date at the top. Where a change materially affects how we use data you have already given us, we will tell you directly.

13. Contact

Email hello@axlrx.ai, or use our contact page. Our terms of use cover the site and its content.