Privacy Policy
Data We Collect
Account data: Email address, display name, and authentication credentials provided during account creation via Athex.
Session data: Session tokens, authentication event timestamps, IP address at time of authentication, and device information collected during login. This data is stored in Cloudflare KV with domain-scoped session cookies.
Usage analytics: Application feature usage, page views, interaction events, and error reports. Analytics data is collected in aggregate and is not linked to individual user identities except where required for security monitoring.
Static data provided by clients: Spreadsheets, exports, screenshots, and other content provided to Becchio Group for incorporation into applications. This data is handled as described in Section 2.3 of the Terms of Service.
Communications: Email content, meeting notes, and other correspondence between you and Becchio Group team members.
How We Store Data
- Authentication and session data is stored in Cloudflare KV, encrypted at rest, with session cookies scoped to the relevant domain (
.cximmersive.comfor enterprise applications;.andareno.comfor consumer applications) - Authentik user records are stored on Becchio Group's self-hosted Authentik instance at
sso.becchiogroup.com, which is operated on infrastructure controlled by Becchio Group LLC - Client-provided data is stored within the application infrastructure designated for that client
- All data is transmitted over HTTPS. Session cookies are set with
HttpOnlyandSecureflags.
Who Has Access
Access to personal data stored in Becchio Group systems is restricted to:
- Becchio Group administrators with a legitimate operational need
- Security personnel for the purpose of incident response and compliance monitoring
- No third parties, except as required by law or as described in Section 7 of the Terms of Service
Becchio Group does not sell, rent, or broker personal data to any third party.
Data Retention
| Data Type | Retention Period |
|---|---|
| Account data (active users) | Duration of account + 30 days post-deletion request |
| Session data and logs | 90 days from session creation |
| Usage analytics | 12 months in aggregate form |
| Client-provided static data | Duration of engagement + 90 days |
| Communications and correspondence | Duration of engagement + 2 years |
Following the retention period, data is deleted from live systems. Backup copies are purged on the next backup rotation cycle following the retention expiration.
Your Rights
Depending on your jurisdiction, you may have the following rights with respect to your personal data:
- Access: Request a copy of the personal data Becchio Group holds about you
- Correction: Request correction of inaccurate personal data
- Deletion: Request deletion of your personal data, subject to Becchio Group's legitimate legal and operational obligations
- Portability: Request your personal data in a structured, machine-readable format
- Objection: Object to certain processing activities
- Restriction: Request that Becchio Group restrict processing of your data in certain circumstances
To exercise these rights, contact Becchio Group at clay@cximmersive.com. Becchio Group will respond to verified requests within 30 days. Requests may be denied where fulfillment would require Becchio Group to violate applicable law or its legitimate operational obligations.
Cookie Policy
Session cookies: Set by Athex on successful authentication. These cookies are HttpOnly, Secure, and scoped to the relevant domain. They expire upon session end or after 7 days of inactivity, whichever comes first. Session cookies are necessary for the operation of authenticated applications and cannot be declined by users who require authenticated access.
No third-party tracking cookies: Becchio Group does not use third-party advertising cookies, tracking pixels, or cross-site analytics. Usage analytics described above are collected first-party.
Contact
For questions about this Privacy Policy or to exercise your data rights:
- Email: clay@cximmersive.com
- Website: becchiogroup.com
- Full Terms: becchiogroup.com/terms
For legal correspondence, address to: Clay Talley, CEO, Becchio Group LLC.