PHAx Privacy Statement
Version 1.0 · Last updated in September 2026
This statement explains what personal data Arborion Global Private Limited (Arborion Global, we, us) processes when you use PHAx, why, and the rights you have. It covers the PHAx desktop application for Windows and macOS, the PHAx licence service, and Arborion accounts used to sign in to PHAx. We handle personal data in keeping with the India Digital Personal Data Protection Act and, where it applies, the General Data Protection Regulation. How we handle data from visitors to this website is explained separately in our Privacy Policy.
Arborion Global Private Limited, 4th Floor, Hiranandani Circle, Hiranandani Business Park, Chitalsar Manpada, Ghodbunder Road, Thane 400607, Maharashtra, India, is the controller of the personal data described here. You can reach us at info@arborionglobal.com or on +91 9099487340.
1. The short version
- Your studies stay with you. Studies, worksheets, drawings, team names, recommendations and risk rankings stay on your computer and in the storage you choose. PHAx never sends them to us.
- No tracking. PHAx has no analytics, advertising or usage tracking.
- We never see your password. Arborion accounts are run for us by Microsoft Entra External ID, and Microsoft handles passwords and password resets.
- We process only what sign-in and licensing need: your e-mail and name, a hash of your computer's hardware identifier, the computer's name, operating system and PHAx version, and request logs.
2. What we process, and why
| Data | When | Why (legal basis) |
|---|---|---|
| Name, organisation, e-mail and billing details of the licence holder | When you buy a licence or ask for a trial | To issue and manage the licence and invoice you (contract, and legal obligation for tax records) |
| Your Arborion account: e-mail, display name and sign-in activity | When you create the account, sign in or reset your password | To sign you in securely. Microsoft handles your password, and we receive a signed confirmation of your e-mail and name (contract, and legitimate interest in secure sign-in) |
| Your e-mail and name as a PHAx user on a licence | When your organisation or we add you | To apply your organisation's licence to you (contract, and legitimate interest of your organisation) |
| Sign-in records: time of sign-in and device sessions | At sign-in and each licence check | Account security and seat control (legitimate interest) |
| A one-way hash of the computer's hardware identifier, never the identifier itself | At sign-in and each licence check | To tie a seat to one computer and enforce the number of seats (contract, and legitimate interest in preventing unlicensed use) |
| Computer name, operating system and PHAx version | At sign-in and each licence check | So you and we can recognise your activated computers, and to support you (contract and legitimate interest) |
| IP address and time of each request | At sign-in and each licence check (server logs) | Security, abuse prevention and fault finding (legitimate interest) |
| A licence key, where one is used instead of accounts | At activation and each licence check | To check the licence is valid (contract) |
| Anything you send us | When you contact support, for example a log file you choose to send | To answer you (contract and legitimate interest) |
PHAx checks the licence when you sign in and then at least every seven days while in use.
3. Data kept only on your computer
PHAx keeps these on your computer only. They are not sent to us.
- Your studies and project files.
- A licence record: your e-mail address, a device session (or licence key), the signed licence lease and when it was last checked. It never contains your password.
- Your settings and personal spelling dictionary.
- A diagnostics log of hangs and errors, holding program traces and not study content. It reaches us only if you choose to send it.
If your organisation uses the optional Power Automate exchange, PHAx writes action summaries to a folder your organisation chooses, usually in its own Microsoft 365. That data stays under your organisation's control and we have no access to it.
4. Service providers and sharing
Microsoft Azure hosts the licence service, and Microsoft Entra External ID runs Arborion accounts and the sign-in page. Microsoft acts as our processor under the Microsoft Products and Services Data Protection Addendum. We also use trusted providers for e-mail and invoicing, who process data only on our instructions.
We do not sell personal data. We disclose it only where the law requires it.
5. Cookies
The PHAx application uses no cookies. The Arborion sign-in page, run by Microsoft, uses cookies that are strictly necessary for signing in and keeping sign-in secure.
6. International transfers
The licence service and Arborion accounts are hosted in Microsoft Azure, which may process data outside your country. Where personal data is transferred across borders we use lawful transfer mechanisms, such as standard contractual clauses where they are required, so it stays protected to the standard described here.
7. How long we keep data
- Licence, user and activation records are kept for the Licence Term and afterwards for as long as the law requires us to keep business and accounting records.
- Server request logs are kept only for a limited period for security and fault finding.
- Support correspondence is kept for as long as we need it to deal with your request.
- An Arborion account is kept until you or your organisation ask us to delete it, or until it has no active licence and is no longer needed.
After that we delete the data or make it anonymous.
8. Security
- All communication with the licence service and the sign-in page is encrypted (HTTPS).
- Device sessions and licence keys are stored only as one-way hashes.
- Licences are digitally signed, so they cannot be forged or copied to another computer.
- Access to licence records is restricted to authorised Arborion Global staff.
9. Your rights
Depending on where you live you may have the right to ask for a copy of the personal data we hold about you, to have it corrected or deleted, to object to or restrict how we use it, to receive it in a portable form, to withdraw a consent you have given, and to complain to your data protection authority. To exercise any of these rights please write to us at info@arborionglobal.com and we will respond within the time the law allows. Deleting your account or activation records ends access to PHAx on those computers.
10. Children
PHAx is professional engineering software. It is not directed at children, and we do not knowingly process children's data.
11. Changes
We will publish any change on this page with a new version number and date. PHAx shows the new version before you continue using it.
12. How to contact us
Email info@arborionglobal.com, call +91 9099487340, or write to Arborion Global Private Limited, 4th Floor, Hiranandani Circle, Hiranandani Business Park, Chitalsar Manpada, Ghodbunder Road, Thane 400607, Maharashtra, India.
See also the PHAx Terms of Use and the PHAx page.