Legal and operating boundary

Privacy Policy

How Saxum handles public enquiries, scoped case data and service records.

1. Scope and operator

Saxum is an operating brand of Safwan Soliman, based in Ontario, Canada. This policy describes Saxum’s handling of information submitted through this website and information processed during a separately agreed engagement. The website is not intended for unrestricted uploads of regulated or highly sensitive material.

2. Information collected through public forms

Public forms may collect your name, work email, organization, role, selected product, deadline and the description you choose to provide. Do not include passwords, API keys, MFA codes, consumer lists, tax files, health information, laboratory result files, bank credentials or other regulated records.

3. Engagement data

Case data is requested only after scope, authority, transfer method and retention expectations are agreed. The exact categories depend on the product. Saxum seeks the minimum information needed to reproduce the problem, prepare the agreed deliverable and preserve its evidence trail.

4. Use of information

Information is used to respond to enquiries, assess product fit, perform contracted work, maintain security and quality records, comply with legal obligations and improve documented workflows. Saxum does not sell personal information.

5. Service providers

Hosting, form processing, secure transfer, email and payment providers may process limited information for their stated function. Production deployment must be configured so those providers match the published operating model.

6. Retention and deletion

Public enquiries are retained only as reasonably necessary for follow-up and business records. Engagement retention is defined in the applicable statement of work or operating schedule. A request to correct or delete contact information can be submitted through the contact page, subject to lawful recordkeeping obligations.

7. Security

Saxum uses administrative and technical controls appropriate to the scoped service, but no system is completely secure. Customers remain responsible for securing their systems, credentials and authorized submissions.

8. International processing

Depending on the selected service providers and engagement, information may be processed in more than one jurisdiction. Any material engagement-specific restrictions should be agreed before transfer.

9. Updates

This policy may be updated as the website, service providers and operating model change. The effective date below identifies the current public version.

Effective date: 31 July 2026. Questions or privacy requests may be submitted through the contact form. Do not send sensitive case material through that form.