Privacy Policy

1. Who We Are

Elyxis is an AI interoperability and integration platform.

2. Information We Collect

2.1 Information You Provide

• First name and last name
• Email address
• Company or team name, if provided
• Your use case and current technology stack, if provided
• Other contact details you choose to provide
• Account details and login information
• Communications (support requests, feedback, messages)
• Early access form responses
• Billing information (processed primarily by payment providers; we do not receive full payment card numbers through the beta access-request form).

2.2 Information Collected Automatically

• IP address
• Device and browser information
• Usage activity and interaction with the Service
• Cookies and session data
• Logs, error reports, and performance metrics

2.3 Information You Submit to the Platform

In the course of using Elyxis, you may submit:

• Pipelines, configurations, and JSON schemas
• Transports, middlewares, and feature metadata
• Integration details such as topic names, endpoints, and identifiers

We treat this as Your Data and process it to operate the Service on your behalf.

3. How We Use Information

We use your information for the following purposes:

• Provide and operate the Service: account creation, authentication, pipeline execution, routing, and core platform functionality.
• Improve and develop the Service: debugging, analytics, performance optimization, and feature development.
• Communicate with you: account updates, early access announcements, and responses to support requests.
• Ensure security: fraud detection, abuse prevention, and protection of the Service.
• Comply with legal obligations and enforce our rights.

Where required, we process information based on contract, legitimate interests, consent, or legal obligation.

Optional website analytics is subject to the separate choice described below. Submitting an access request or accepting the Terms does not enable analytics or subscribe you to marketing emails. We use your request details to assess your application and send related confirmations, invitations, and service communications.

4. How We Share Information

We do not sell your personal data.

We may share information in the following situations:

• Service Providers: with trusted third parties that perform services on our behalf (cloud hosting, analytics, email delivery, support tools, payment processing).
• Legal Requirements: when required to comply with laws, regulations, legal processes, or governmental requests.
• Business Transfers: in connection with a merger, acquisition, financing, or sale of assets involving Elyxis.
• With Your Consent: when you explicitly authorize us to share data.

We may also share aggregated or anonymized data that does not reasonably identify you.

5. Cookies & Tracking Technology

Essential storage and authentication

We use cookies and browser storage for authentication through Stytch, security, and preferences such as theme and sidebar layout. Authentication may also involve SDK events and device or browser metadata. These functions are separate from optional Google Analytics.

Optional Google Analytics

When configured on this website, Google Analytics 4 loads only after you accept analytics. Our integration sends page views for the home, Terms, and Privacy pages, plus a successful beta-request event after the server accepts a request. A repeat request can count as another event; it does not mean another person has been invited to the beta.

Page measurements contain the page origin and path, a fixed page title, and an external referring site’s origin when available. We omit query strings, URL fragments, and the rest of the referring URL. The beta-request event contains a fixed form label rather than your submitted answers. Our integration does not send page views for documentation, sign-in, OAuth callbacks, or private workspace routes, and does not supply names, email addresses, signup form contents, user IDs, or workspace identifiers to Google.

Google also receives cookie identifiers and standard browser, device, and session information, and processes network information such as your IP address to provide its service. Our integration disables Google signals and advertising personalization and keeps advertising consent denied. Google may process information outside Canada. See how Google uses information from partner sites.

Your analytics choice

Analytics uses first-party cookies named _ga and _ga_ followed by the stream identifier, configured with a maximum lifetime of 180 days. We store your accept or reject choice in browser storage under elyxis-cookie-consent for up to 180 days, then ask again. If browser storage is unavailable, your choice may only last for the current page session. No Google Analytics script is loaded by our integration before acceptance or when you reject analytics on a fresh visit. Rejecting analytics does not prevent you from requesting beta access or signing in. You can withdraw consent at any time using Cookie settings. Rejecting stops further collection by our integration and removes accessible Google Analytics cookies from this site; it does not delete information already sent to Google. This choice controls optional Google Analytics, rather than essential authentication or security processing. Browser settings can also clear storage, but blocking essential storage may affect sign-in.

Beta requests and email

When you submit a beta request, Google reCAPTCHA processes a security assessment to help detect automated abuse. This security processing is separate from optional analytics. We use Resend to manage beta-request contacts and deliver related emails. Request details such as your name, email, company, and use case are processed for those purposes separately from Google Analytics. Click tracking is enabled for our sending domain, so email links may pass through Resend to record clicks. Email open tracking is disabled. Email click tracking is separate from your website analytics preference.

6. International Data Transfers

Your data may be stored or processed in the regions where we or our infrastructure providers operate. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

7. Data Retention

We retain information as long as necessary to provide the Service, meet legal obligations, resolve disputes, and maintain business records. When information is no longer needed, we will take reasonable steps to delete or anonymize it, where appropriate.

The 180-day cookie and preference lifetimes above are not a promise that all personal information or analytics reports are deleted after 180 days. Stored request records and provider-held data have separate retention periods based on their purpose and applicable obligations. Contact us about retention or deletion requests.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you,
• Correct inaccurate or incomplete information,
• Request deletion of certain data,
• Request data portability,
• Object to certain processing activities,
• Withdraw consent where processing is based on consent,
• Request restriction of processing in certain cases.

To exercise these rights, contact us at privacy@elyxis.io. We may need to verify your identity before responding. You may also have the right to lodge a complaint with your local data protection authority.

9. Children's Privacy

Elyxis is intended for adults who meet the eligibility requirements in our Terms of Service. We do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us so we can take appropriate action.

10. Security

We use reasonable administrative, technical, and organizational measures to help protect your data. However, no online service is completely secure. You are responsible for maintaining the security of your account, passwords, API keys, and secrets.

11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice (for example, by updating the "Last Updated" date, or by sending email or in-product notifications). Where a new purpose or change requires consent under applicable law, we will seek it. Updating this Policy or continuing to use the Service does not replace your separate choice about optional analytics.

13. Contact Us

For questions or concerns about this Privacy Policy or our data practices, contact Elyxis at privacy@elyxis.io.