Privacy Notice and Notice at Collection

This Privacy Notice explains how RelixQ handles personal information when you visit, create an account, use the Service, communicate with support, or interact with RelixQ as a business contact. It does not govern information processed solely on a customer's behalf under a data-processing agreement.

Questions and privacy requests may be sent to privacy@relixq.com. The applicable RelixQ contracting entity acts as controller or business for the activities described here.

At or before account creation, RelixQ may collect the categories below for the stated purposes. RelixQ does not sell personal information. If RelixQ introduces advertising-based sharing that is treated as sale or sharing under applicable law, this Notice and the required controls will be updated before that activity begins.

• Identifiers and account data, such as name, email, organization, authentication-provider identifiers, IP address, and user agent, to create and secure accounts;
• Commercial and subscription information to administer plans, billing, trials, and customer relationships;
• Internet and service activity, such as sign-ins, feature use, audit events, diagnostics, and support interactions, to operate, secure, troubleshoot, and improve the Service;
• Professional information, roles, and organization membership to administer enterprise access and permissions; and
• Customer-provided repository, asset, finding, and integration metadata that may contain personal information, to provide security assessment and reporting features.

RelixQ receives information directly from you and your organization, from identity and repository providers you connect, from systems you authorize RelixQ to assess, from service telemetry, and from vendors supporting authentication, hosting, billing, communications, and security.

RelixQ uses personal information to provide and support the Service, authenticate users, prevent abuse, maintain audit evidence, fulfill contracts, communicate operational messages, improve reliability, comply with law, and establish or defend legal claims.

Where applicable law requires a legal basis, processing may rely on performance of a contract, legitimate interests in operating and securing the Service, compliance with legal obligations, or consent for a specific optional purpose. RelixQ does not treat acceptance of the Terms as consent for unrelated optional processing.

RelixQ may disclose personal information to service providers and subprocessors that support hosting, databases, authentication, email, monitoring, customer support, billing, and security; to integrations you direct RelixQ to use; to professional advisers; during a corporate transaction subject to appropriate safeguards; or when required to protect rights, safety, or comply with law.

Service providers may use personal information only to perform contracted services and must protect it under applicable agreements. A current subprocessor list should be made available through RelixQ's trust or privacy materials.

RelixQ and its providers may process information in countries other than your own. Where required, RelixQ uses recognized transfer mechanisms and supplementary safeguards. Enterprise customers may request applicable transfer terms through a data-processing addendum.

RelixQ retains personal information only as long as reasonably necessary for the purposes described, including account operation, security, contractual commitments, dispute resolution, legal compliance, and documented backup cycles. Agreement-acceptance evidence and security audit records may be retained for the applicable limitation period, subject to legal and privacy requirements.

Customer-controlled content is deleted or returned according to account settings, the applicable plan or agreement, and documented retention schedules.

RelixQ uses administrative, technical, and organizational safeguards designed to protect personal information, including access controls, encryption where appropriate, audit logging, tenant isolation, vulnerability management, and incident response. No security measure eliminates all risk.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, withdraw consent for optional processing, and appeal or complain to a regulator. RelixQ will verify requests and may retain information where legally permitted or required.

Operational email needed to administer or secure an account is not marketing. Marketing preferences can be changed at any time using the unsubscribe link or account settings.

RelixQ may use technologies necessary for authentication, security, preferences, and core service operation. Optional analytics or advertising technologies, if used, must be described in a separate cookie notice and presented with any consent controls required by law.

The Service is intended for business and professional users and is not directed to children. RelixQ does not knowingly collect personal information from children in violation of applicable law.

RelixQ may update this Notice to reflect product, legal, or operational changes. Material changes will be communicated as required, and the version and effective date will remain available.

Contact privacy@relixq.com for privacy questions or requests. Contact security@relixq.com to report a security concern.