→ Hyliox

Privacy Policy

Last updatedJuly 19, 2026

This policy explains what data Hyliox ("we") collects when you use hyliox.studio, why we collect it, and the choices you have. Questions? Write to hello@hyliox.studio.

1. Data we collect

When you create an account we collect your name, email address and, if you provide it, your WhatsApp phone number. When you use the product we store the content you create (briefs, projects, community posts) and basic usage events needed to run the service.

2. How we use it

We use your data to provide the service (your dashboard, your projects, the community), to follow up on your project — including by WhatsApp if you added a number — and to send transactional emails such as sign-in links and receipts. We do not sell your personal data.

3. Cookies

We use a session cookie to keep you signed in, a locale cookie to remember your language, and — if you arrive through an affiliate link (/r/<code>) — a "hyx_ref" attribution cookie that lasts 30 days and only records the referral code. We also use privacy-friendly analytics to measure traffic.

4. Payments

Payments are processed by Stripe. Your card details never touch our servers — we only receive the payment status and the billing information needed for your invoices. Stripe's own privacy policy applies to the payment itself.

5. Service providers

We rely on a small set of processors to run Hyliox: Stripe (payments and affiliate payouts), Resend (transactional email), our hosting and database providers, and AI providers that process the content you submit to product features. Each only receives the data required for its role.

6. Retention & your rights (GDPR)

We keep your data for as long as your account exists, then only what invoicing and accounting laws require. You can request access, correction, export or deletion of your personal data at any time — email hello@hyliox.studio and we will respond within 30 days.

7. Contact

Hyliox — hello@hyliox.studio. If you believe your rights are not respected, you may also lodge a complaint with your local data protection authority.