Privacy Policy

Overview

This Privacy Policy explains how Quelixa Technologies ("Quelixa", "we", "us") handles personal data when you visit our website, evaluate our products, or use the Quelixa Cloud platform (the "Services").

For the data your business stores inside its own Quelixa workspace, you are the controller and we act as your processor — those terms are governed by our Data Processing Addendum.

Information we collect

You provide

• Account & contact data — name, work email, company, role.
• Billing data — plan, billing contact and payment references (card data is handled by our payment processor, not stored by us).
• Communications — messages you send via forms, support or the AI concierge.

Collected automatically

• Usage & device data — pages viewed, features used, IP address, browser and similar diagnostics.
• Cookies — see Cookies below.

How we use data

• Provide, secure, maintain and improve the Services.
• Provision and operate your hosted workspace, backups and upgrades.
• Process payments and manage subscriptions.
• Respond to enquiries and provide support.
• Send service, security and (where permitted) product communications.
• Detect, prevent and investigate abuse, fraud and security incidents.
• Comply with legal obligations.

Legal bases

Where the GDPR or similar laws apply, we rely on: performance of a contract (to deliver the Services), legitimate interests (to secure and improve them), consent (for optional cookies and marketing, withdrawable at any time), and legal obligation (e.g. tax and accounting records).

Sharing & subprocessors

We do not sell personal data. We share it only with vetted service providers that help us run the Services under contract — for example cloud hosting and infrastructure, payment processing, email delivery, analytics and the AI models powering Nova.

We may also disclose data where required by law, to protect rights and safety, or as part of a corporate transaction (with notice where required).

Data retention

We keep personal data only as long as needed for the purposes above, then delete or anonymise it. Account and billing records are retained for the life of the relationship plus any period required by law. Workspace content is retained and deleted per your instructions and the DPA.

Security

Every customer runs in an isolated workspace with its own database. We apply encryption in transit, least-privilege access, daily backups, monitoring and regular review. No system is perfectly secure, but we work continuously to protect your data — see our status page for live platform health.

International transfers

We may process data in countries other than yours. Where we transfer personal data internationally, we use appropriate safeguards such as Standard Contractual Clauses or an equivalent recognised mechanism.

Your rights

Subject to your local laws, you may have the right to access, correct, delete, port, or restrict the processing of your personal data, and to object or withdraw consent.

To exercise any of these, email privacy@quelixa.com. You may also have the right to complain to your local data-protection authority.

Cookies

We use strictly necessary cookies to run the site and keep you signed in, plus optional analytics cookies to understand usage. You can control non-essential cookies through your browser or our cookie controls where available.

Children

The Services are for businesses and are not directed to children. We do not knowingly collect personal data from anyone under 16.

Changes to this policy

We may update this policy from time to time. Material changes will be posted here with a new "last updated" date and, where appropriate, notified to you directly.