Privacy Policy

Effective July 12, 2026 · Axon, a Castillo & Co LLC company · castillop92@gmail.com

Axon is a CRM and lead-intelligence platform for local service businesses, operated by Castillo & Co LLC (“Axon,” “we,” “us”). This policy explains what data we handle, where it comes from, and the choices you have. We've written it to be read — if anything is unclear, email us and we'll answer plainly.

The two kinds of data we handle

1. Account data. Information our customers give us to run their workspace: name, business name, email address, login credentials (passwords are stored only as salted hashes), team member details, and the CRM records they create — notes, tasks, quotes, invoices, expenses, and messages.

2. Property and contact records.The lead lists at the heart of the product. These are assembled from public and licensed sources: county appraisal records (such as the Harris County Appraisal District), US Census statistics, NOAA/National Weather Service storm reports, building-permit records, and — when a customer enables a data provider — licensed property-data and contact-append services. These records can include a property's characteristics, its owner's name, and, where appended, contact details such as a phone number or email address.

How we use data

• To operate the service: score properties, populate lead lists, send the messages our customers compose, generate quotes and invoices, and produce reports.
• To run the business: process subscription payments, provide support, and send transactional emails such as verification and password-reset links.
• We do not sell our customers' CRM data, run ads on it, or share one customer's records with another. Every workspace is isolated by account.

Service providers we rely on

We use a small set of processors, each only for its job: Stripe (subscription billing and, for customers who enable it, invoice payments), Resend (transactional email), Twilio (SMS our customers send and receive), Anthropic (extracting fields from receipt photos our customers upload), and — when a customer configures them — property-data and contact-append providers. Each receives only the data needed to perform its function.

If you're a homeowner in an Axon customer's records

Axon's property records originate in public sources — the same appraisal rolls, permits, and storm reports available to anyone. Where a contact detail has been appended, it came from a licensed data provider. If you'd like to know what an Axon-managed list holds about your property, correct it, or have your contact details suppressed from Axon-managed enrichment, email us at castillop92@gmail.com and we will respond within 30 days. Residents of Texas and other states with consumer privacy laws (including the Texas Data Privacy and Security Act) may exercise their rights under those laws through the same address.

Our customers are independent businesses and are responsible for how they contact people — including compliance with telemarketing laws such as the Telephone Consumer Protection Act and the National Do-Not-Call Registry. Our Terms of Service require it.

Cookies and local storage

The app stores a login token in your browser's local storage to keep you signed in. We don't use advertising cookies or cross-site trackers.

Security and retention

Data is encrypted in transit, passwords are hashed, one-time links (verification, password reset) are stored only as hashes and expire quickly, and workspace data is scoped to your account at the query level. We keep your data while your account is active; you can export everything to CSV at any time, and you can request deletion of your workspace by email — we'll complete it within 30 days, minus records we must keep for tax or legal reasons.

Changes and contact

If we change this policy in a way that matters, we'll note it here with a new effective date and tell active customers by email. Questions, requests, complaints: castillop92@gmail.com.