Privacy Policy

SyntaxilitY ("we", "us", "our") operates AxilJS and the axiljs.dev website. This Privacy Policy describes how we handle information in connection with:

• Visits to axiljs.dev and its documentation pages.
• Use of the AxilJS CLI and npm packages under the @axiljs scope.
• Interactions with our GitHub repository at github.com/SyntaxilitY/AxilJS.
• Any future services including AxilJS Cloud, AxilJS Studio, or the AxilJS registry.

We collect different categories of data depending on how you interact with our Services:

We do not collect:

• Source code from your AxilJS projects.
• API keys, secrets, or environment variables you configure in your applications.
• Database contents or query results from your applications.
• Personal data of end-users of applications built with AxilJS.
• Biometric data, health data, or financial information of any kind.

We use the data we collect for the following purposes:

• Operating and improving the axiljs.dev documentation website.
• Understanding which documentation pages are most and least useful.
• Diagnosing and fixing technical issues with the website.
• Responding to GitHub issues, pull requests, and feature requests.
• Responding to direct contact and feedback submissions.
• Producing aggregated, anonymized usage statistics.
• Complying with applicable legal obligations.

The axiljs.dev website and AxilJS infrastructure may use the following third-party services:

Each third-party service operates under its own privacy policy. We choose services that align with privacy-first practices where possible.

The axiljs.dev website uses minimal cookies:

• Theme preference cookie — stores your light/dark mode choice. Stored locally, never transmitted to our servers.
• Analytics — we use Vercel Analytics, which is privacy-first and requires no cookie consent banner under most regulations.
• We do not use advertising cookies, third-party trackers, or session recording tools.

Specifically:

• @axiljs/core — processes HTTP requests entirely within your server. No request data is sent to SyntaxilitY.
• @axiljs/orm — communicates only with your configured database. No query data is sent to SyntaxilitY.
• @axiljs/auth — JWT signing and password hashing happen locally. Keys and tokens stay on your infrastructure.
• @axiljs/ai — communicates with the AI provider you configure (OpenAI, Anthropic, Ollama, etc.). SyntaxilitY is not in this data path.
• @axiljs/cli — the "axil run", "axil build", and "axil deploy" commands run locally. No telemetry is collected by default.
• All other @axiljs packages — operate entirely within your infrastructure boundary.

Future CLI versions may include optional, opt-in, anonymized telemetry. This will always be clearly disclosed and easily disabled.

We implement reasonable technical and organizational measures to protect the limited data we collect:

• The axiljs.dev website is served over HTTPS with TLS encryption.
• Access to any collected data is restricted to SyntaxilitY team members on a need-to-know basis.
• We use reputable hosting and infrastructure providers with their own security certifications.
• We regularly review our data practices and third-party dependencies.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

If you discover a security vulnerability in AxilJS or axiljs.dev, please report it responsibly via our GitHub repository rather than disclosing it publicly.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to access — request a copy of personal data we hold about you.
• Right to rectification — request correction of inaccurate personal data.
• Right to erasure — request deletion of your personal data ("right to be forgotten").
• Right to restriction — request that we restrict processing of your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, please contact us via GitHub. We will respond within 30 days.

AxilJS is a developer framework intended for use by adults and professional developers. Our Services are not directed at children under the age of 13 (or under 16 in the European Union).

We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete such information.

AxilJS is an international open-source project. The limited data we collect via axiljs.dev may be processed in countries where our hosting providers operate — primarily the United States and the European Union.

By using the Services, you consent to the transfer of your data to these locations. We rely on our hosting providers' compliance frameworks (including Standard Contractual Clauses for EU data transfers) to ensure appropriate safeguards are in place.

We may update this Privacy Policy from time to time. When we make changes:

• We will update the "Last updated" date at the top of this page.
• Material changes will be announced in the AxilJS GitHub repository.
• For significant changes affecting your rights, we will provide prominent notice on axiljs.dev.

Your continued use of the Services after changes take effect constitutes your acceptance of the updated Privacy Policy.

For privacy-related requests, questions, or concerns, please contact us: