Privacy notice
This notice explains how PWR Brands LLC (“Axiari”, “we”) handles personal data on axiari.com and app.axiari.com. It is written for people in the European Economic Area, the United Kingdom and elsewhere. It is version 2026-11-12.
Who we are
PWR Brands LLC, 16192 Coastal Hwy, Lewes, DE 19958, USA. Email hello@axiari.com.
When a business customer orders a check, that business is the controller of the applicant’s data and Axiari is the processor. When a renter or candidate buys their own report, Axiari is the controller. Didit processes identity documents, face images and screening results for us, as a sub-processor when we are the processor, and as our processor when we are the controller.
What we collect
- Account data: name, email, password hash, company name, country and, if you give it, a VAT number.
- Check data: the applicant’s name and email, the result of the check, a minimised summary, and the decision we receive from Didit.
- Consent records: the time and version of the biometric consent, and a hash of the IP address. We do not keep the raw IP address in the consent record.
- Payment data: Stripe processes the card. We store the amount, currency, order id and Stripe reference. We do not store the card number.
Biometric data
The verification includes a face capture so Didit can compare a live person with the document portrait. That is biometric data. We ask for explicit consent before the capture starts. Didit performs the capture and the comparison. We do not build a face search product of our own, and we do not use the images to train models.
Why we use it
For consumer reports, the legal bases are contract (to deliver the report you bought) and explicit consent for biometrics (GDPR Article 9(2)(a)). For business checks, we process on the instructions of the business customer. Sanctions screening supports the customer’s legal obligations where they have them, and our own obligation not to present an uncleared watchlist match to a landlord or employer.
How long we keep it
- Didit is instructed to keep session data for 30 days. That setting is made in the Didit console.
- Tenant and guarantor reports: 6 months, then deleted.
- Employee reports: 90 days, then deleted.
- Consumer reports: 12 months, then deleted.
A deletion removes the name, email, decision and summary from our database. Credit ledger rows stay, without the applicant’s identity, so the account balance can still be explained.
Who else receives it
Didit (identity verification, European Union processing), Stripe (payments), the email provider that sends from hello@axiari.com, and Netlify (hosting and the database). See the Didit disclosure. We do not sell personal data.
International transfers
PWR Brands LLC is in the United States. The application database is hosted in the European Union. Didit processes verification data in the European Union. Where a transfer outside the EEA needs a safeguard, we use the European Commission’s standard contractual clauses.
Your rights
You can ask for access, correction, deletion, restriction, or a copy of your data, and you can object to processing that is based on legitimate interests. You can withdraw biometric consent before capture. If we are the processor, we will pass the request to the business customer, who is the controller, within a reasonable time. Email hello@axiari.com. You can also complain to a supervisory authority. If you are in the EEA, that is the authority in your country of residence.
Children
The checks are for adults. A document that shows the holder is under 18 is not treated as an approved result.