Privacy Policy

The short version: AJNEXA is a digital business — we sell downloadable products, creative services and AMS, our AI marketing software, worldwide. No shipping addresses, no warehouses, and no more data than we actually need. We collect what it takes to create your account, process your order, deliver your files, run the analyses you ask AMS for, and (only if you opt in) send you our newsletter. AMS works by sending what you submit to third-party AI providers — the section on AI processing below says exactly what leaves our servers, to whom, and what never does. Your reports are kept for as long as your tier allows, then erased automatically. We never sell your personal data. You can ask us at any time to see, correct or delete what we hold, and — if you are in the EU/EEA or UK — you can complain to your data protection authority. Just write to support@ajnexa.com.

Table of Contents

Who we are — the data controller

ajnexa.com and the AMS application at ams.ajnexa.com are operated by AJNEXA, based in Marrakech, Morocco. AJNEXA is the data controller responsible for the personal data described in this policy — meaning we decide what data is collected and why, on both. We sell digital products — AI prompt packs, Notion templates, Canva templates, ad creative packs and ebooks — productized creative services, and AMS, a subscription to AI marketing analysis software, to customers worldwide, including in the EU/EEA and the UK. Because everything we sell is delivered digitally, we do not collect shipping addresses or handle physical deliveries. For anything related to this policy, or to exercise your rights, contact us at support@ajnexa.com.

What we collect

We keep data collection to the minimum needed to run the store. Depending on how you use the site, this includes:

Account details. When you create an account we store your name, email address and an encrypted password, so you can sign in and access your download library.
Order information. When you buy something we record what you purchased, the billing details you provide, the date and amount of the transaction, and your download activity for that order. We never see or store your full card number — payment details go directly to our payment processor.
Newsletter sign-ups. If you subscribe through one of our forms (powered by Contact Form 7), we store the name and email address you give us, solely to send you the emails you asked for.
Support messages. When you email us, we keep your message and our replies so we can help you and keep a record of what was agreed.
Your AMS account. Signing up for AMS stores your email address and an encrypted password, your tier and subscription dates, and counters of what you have used — how many analyses you ran this month and how much processing they consumed. These counters are how your allowance is enforced and how billing is checked.
What you submit to AMS, and what it produces. To run an analysis you give us a page address or a topic, optionally the context of your project, and we retrieve the content of the page being analysed. We store that alongside the report AMS generates, so you can find it again in your account. Both are deleted automatically at the end of the retention period for your tier — see How long we keep your data.
Technical and security data. Our servers and security layer (Cloudflare) automatically log data such as your IP address, browser and device type, and access times, to keep the site secure and prevent fraud and abuse.
Analytics. If you consent to analytics cookies, we use analytics tools to understand how visitors use the site — pages viewed, approximate location, device and browser type. This data is aggregated and is not used to identify you personally.

Why we process your data, and our legal basis

Under the GDPR and equivalent laws, every use of your personal data needs a legal basis. Here is what we do with your data and why we are allowed to:

What data	Why we process it	Legal basis
Account details; order and billing information	To create your account, process your order, deliver your files and keep them available, and handle refunds	Performance of a contract with you
AMS account, subscription dates and usage counters	To open your account, enforce the monthly allowance of your tier, and bill you correctly	Performance of a contract with you
What you submit to AMS (address, topic, project context) and the content of the page analysed	To produce the report you asked for — which requires sending it to third-party AI providers	Performance of a contract with you
Order and invoice records	To meet our accounting, tax and bookkeeping obligations	Legal obligation
Newsletter name and email	To send you the newsletter and product updates you signed up for	Consent (withdrawable at any time)
Analytics and other non-essential cookies	To understand how the site is used and improve it	Consent (withdrawable at any time)
Technical and security logs	To keep the store secure and prevent fraud and abuse	Legitimate interest in a secure, working store
Support messages; aggregated usage insights	To answer your questions, provide support and improve our products and service	Legitimate interest in helping and improving

Where we rely on legitimate interest, we have weighed it against your rights and privacy. You can object to that processing at any time (see Your rights below). We do not sell, rent or trade your personal data. Ever.

AI processing in AMS — what leaves our servers

This is the part of AMS you should read closely, because it is the one place where what you write travels beyond us. AMS produces its reports by sending your request to AI models operated by other companies. We route those requests through OpenRouter, which forwards them to the provider of the model you selected. Each provider then processes the request under its own terms.

What we send. Only what the analysis needs: the page address or topic you entered, the project context you chose to add, the content of the page being analysed, and the instructions of the tool you are running.
What we never send. Your password, your payment details (which never pass through AMS at all), your name or account identifiers, your store order history, and anything belonging to another customer. The AI provider receives your question, not your identity.
Paid models. We route them exclusively to providers that do not train on the data sent to them, and we allow no provider that publishes submitted content to public datasets. If the model you chose is unavailable, we never silently move you to a free model.
Free models — the trade-off, stated plainly. Some models are offered at no cost by their providers, to every tier, and are marked as free where you choose them. In exchange for that, what you submit to them may be used by those providers to train their own models. Choose a paid model for anything confidential. The choice is yours on every analysis, and it is shown before you run it.

Some AMS tools also reach out to public sources to gather material for your report. When they do, what leaves our servers is only the address or the search term you gave — never your identity, your account or your orders:

The page you asked us to analyse is fetched by our own server, exactly as a browser would fetch it.
Google PageSpeed Insights receives the address of the page when you run a performance audit, so that Google can measure it.
Search results come through a search instance we host ourselves, which relays the query to public search engines.
Public discussion sources — Hacker News, Reddit and Bluesky — receive the search term when you run a social listening analysis, through their public interfaces.

These providers are located in various countries, including the United States. See International data transfers below. If you would like to know which model providers were involved in a specific report, ask us — each analysis records the model it used.

How long we keep your data

We keep personal data only as long as we need it:

Account data — for as long as your account exists. Close your account and we remove it, keeping only what the law requires. Deleting your AMS account removes your analyses with it.
AMS reports — for the retention period of your tier, then erased automatically: Free, 7 days; Standard, 90 days; Advanced and Premium, no automatic expiry — your reports stay until you delete them or close your account. When a report expires, three things are erased: the report itself, the address you analysed and the topic you submitted. What remains is the billing line — date, tier, credits used — because accounting requires it. This runs as an automated daily task, not on request.
Order and invoice records — for the statutory accounting period, which is around 7 years; the exact period is set by the applicable local law.
Newsletter data — until you unsubscribe or ask us to remove it, whichever comes first.
Support emails — around 24 months after your query is resolved, unless they relate to an order we must keep for accounting.
Analytics data — for the retention period configured with our analytics provider, after which it is deleted or kept only in aggregated form.

Who we share data with

We share your data only with the service providers (processors) that make the store run, and only what each of them needs to do its job:

Hosting provider — hosts the website and its database on our behalf.
Payment processor — handles your payment and receives the details needed to complete the transaction securely. We never store your full card details on our servers.
Email / SMTP delivery provider — processes your email address to send order confirmations, download links and — if you subscribed — our newsletter.
Analytics provider — measures how the site is used, where you have consented to analytics cookies.
OpenRouter and the AI model providers behind it — receive what you submit to AMS, in order to generate your report. This is described in full in the section on AI processing above.
Google (PageSpeed Insights) — receives the address of a page when you run a performance audit on it.
Cloudflare — acts as our content delivery network and security layer, filtering malicious traffic and helping the site load quickly.

Each provider is bound to process your data only on our instructions and to protect it. A current list of the specific providers we use is available on request at support@ajnexa.com.

Social media platforms and the Pinterest API

We publish our own marketing content on social platforms, including a Pinterest business account (AJNEXA2026). To publish and schedule Pins to our own boards, we use the Pinterest API through a self-hosted scheduling tool that we run ourselves on our own server.

What our Pinterest integration does. It reads and writes only the content of our own Pinterest business account — our boards, our Pins, and the statistics Pinterest reports on them. What it publishes is marketing material we created ourselves: product images, titles, descriptions, and links back to ajnexa.com.
What it does not do. It does not collect, store or process the personal data of Pinterest users. It does not access anyone else’s account, boards or profile. It does not send any customer, order or visitor data from ajnexa.com to Pinterest, and it does not combine anything from Pinterest with the account or order data described elsewhere in this policy. We do not use it for advertising or audience targeting, and we do not sell, rent or share Pinterest data with anyone.
Data Pinterest holds about you. If you see, save or click one of our Pins, that interaction takes place on Pinterest’s own platform and is governed by Pinterest’s Privacy Policy, not by this one. The only information that reaches us is aggregated, non-identifying statistics — for example how many times a given Pin was shown or clicked. We cannot tell who you are from it.
Access credentials. The access token that lets our tool publish to our Pinterest account is held on our own server and used for that purpose only. It is revoked when the integration is disconnected. We keep no copy of Pinterest user data, because we never receive any.

The same principle applies to the other platforms where we publish our own content — Instagram, TikTok, X and Facebook: we post marketing material there, and any interaction you have on those platforms is governed by that platform’s own privacy policy.

International data transfers

AJNEXA operates from Morocco, which is outside the European Economic Area (EEA) and is not covered by an EU adequacy decision. This means that when you buy from us, subscribe to AMS or contact us, personal data reaching AJNEXA is transferred outside the EEA (and, for UK customers, outside the UK). Some of our processors may also store or process data in other countries.

This applies to AMS in a way worth stating plainly: running an analysis sends your request to AI providers that are mostly located in the United States, and, depending on the model you choose, possibly elsewhere. Where such transfers happen, we rely on appropriate safeguards — in particular the European Commission’s Standard Contractual Clauses (SCCs) with the processors concerned, where those processors offer them — so that your data continues to be protected to an equivalent standard. If you would rather your content did not leave a given jurisdiction, choose your model accordingly or ask us before subscribing; you can ask us at any time for more detail about the safeguards in place.

Cookies

Like most online stores, we use cookies — small text files stored in your browser. Some are strictly necessary to keep you signed in, remember your cart and make checkout work; others are only set if you consent. The AMS application uses two cookies, both strictly necessary: one keeps you signed in, the other remembers the language you picked. It sets no analytics or advertising cookies. We explain each category, how long cookies last, and how to change or withdraw your consent, in our dedicated Cookie Policy.

Automated decision-making and AI-generated content

We do not carry out automated decision-making or profiling that produces legal effects for you or similarly significantly affects you. We do not profile you, score you, or let a machine decide anything about you. Your orders, refunds and any support you receive are handled by real people.

AMS is a different matter and we would rather be explicit about it: the reports it produces are generated by AI models, automatically, without a human reviewing them before you see them. That is the product working as intended, and it is not a decision taken about you — it is a document produced for you, from material you chose to submit. Treat it as a recommendation to check, not a verdict: AI models can be confidently wrong, and any figure in a report should be verified before you act on it.

Children

Our store and services are not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

Your rights

You are in control of your data. Subject to the conditions in applicable law, you have the right to:

Access — ask for a copy of the personal data we hold about you.
Rectification — ask us to correct anything that is inaccurate or incomplete.
Erasure — ask us to delete your personal data (we may need to keep minimal order records where the law requires it).
Restriction — ask us to pause our use of your data while a concern is resolved.
Portability — receive the data you gave us in a common, machine-readable format, or have it sent to another provider.
Objection — object to processing based on our legitimate interests, including any direct marketing.
Withdraw consent — where we rely on your consent (the newsletter, non-essential cookies), withdraw it at any time. This does not affect the lawfulness of what we did before you withdrew it.
Complain to a supervisory authority. If you are in the EU/EEA, you can lodge a complaint with the data protection authority in your country; if you are in the UK, with the Information Commissioner’s Office (ICO). We would appreciate the chance to address your concern first, but this is your right regardless.

How to exercise your rights

To exercise any of these rights, email us at support@ajnexa.com. We will respond within 30 days. There is no charge, and a real person will handle your request. You can also unsubscribe from the newsletter with one click via the link in any email.

Contact

Questions about this policy or about your data? Write to support@ajnexa.com — a real person will answer.

Last updated: 5 August 2026