Privacy Policy
How Nylix collects, uses and looks after personal information, on this website and in the messages you send us.
Last updated: 1 September 2026
Who we are
Nylix is a software studio. We build websites, web applications, management systems, CRMs and AI systems for businesses. This policy covers nylixai.com and the ways you can reach us from it: the forms on this site, email, phone, WhatsApp and the chat widget.
For the purposes of data protection law, Nylix is the controller of the personal information described below. Our registered address is at the end of this page, and our team works remotely.
Two things this policy does not cover. Nylix Bots, at bots.nylixai.com, is a separate application with its own privacy policy. And when we build a system for a client, we handle the personal information inside it on that client's instructions, as their processor, so their privacy policy governs it rather than this one.
What we collect
We collect what you choose to give us, plus the small amount of technical information that comes with any web request. There is no advertising or analytics tracking on this site.
- Contact and consultation forms
- Your name, email address, company and message. A consultation request also carries the location, date and time you say you prefer. We store the page you submitted from, the language you were reading in, and your browser's user agent string.
- Job applications
- Your full name and email address, plus whichever of phone number, location, years of experience, CV link, LinkedIn profile and portfolio link the role asks for, and your answers to any questions attached to that role.
- Email, phone and WhatsApp
- If you contact us directly we keep your message, the address or number you sent it from, and our reply, so whoever picks the conversation up has the history.
- The chat widget
- The Nylix Bots widget on this site records what you type into it so we can answer you. It is loaded from api.bots.nylixai.com and runs on every page.
- Server logs
- Our hosting provider records the usual request data, including IP addresses, for security and reliability. We do not combine it with anything else or use it to identify you.
Why we use it
We use personal information for a short list of purposes, and each one has a legal basis under the GDPR and Egypt's Personal Data Protection Law.
- To answer you
- Replying to an enquiry, preparing a quote, scheduling a consultation. The basis is taking steps at your request before entering a contract, and our legitimate interest in responding to people who write to us.
- To consider your application
- Assessing whether you are right for a role, and contacting you about it. The basis is taking steps at your request before entering a contract.
- To run and protect the site
- Keeping the site available, and catching spam and abuse. The basis is our legitimate interest in a service that works and is not being attacked.
- To meet our obligations
- Keeping records where the law requires us to. The basis is compliance with a legal obligation.
WhatsApp and chat messages
You can reach us on WhatsApp, and we use WhatsApp Business to reply. Messaging us first, or giving us your number and asking us to get in touch, is how you opt in. We use it to answer your enquiry and to follow up on the work you asked about, and for nothing else.
We do not send marketing or promotional messages on WhatsApp unless you have asked for them. We do not sell, rent or share WhatsApp contact details for anyone else's marketing, and we do not use them to build advertising audiences.
Messages sent over WhatsApp pass through Meta Platforms, which handles them under WhatsApp's own privacy policy. We store the conversation and your number in our internal system, so the person answering you can see what has already been said.
To stop hearing from us, reply STOP on WhatsApp, or write to the email address at the end of this page. We will stop, and you do not need to give a reason.
Where your information is held
Our providers are based in the United States and store data on servers there and in the European Union. Our own team is in Egypt. Personal information you give us may therefore be transferred outside the country you are in, including outside the European Economic Area.
Where that happens we rely on the standard contractual clauses and the transfer safeguards in our providers' own terms, and we do not move personal information anywhere those safeguards do not reach.
How long we keep it
We keep personal information for as long as it is needed for the purpose we collected it for, and then we delete it. Where the period depends on circumstances, the criteria are set out below.
- Enquiries and consultation requests
- Kept for 24 months after our last contact with you, so a conversation that resumes can be picked up where it stopped.
- Job applications
- Kept for 12 months after the role is decided, so we can come back to you if something similar opens. Ask us and we will delete yours sooner.
- WhatsApp and chat conversations
- Kept for 24 months after the last message in the thread.
- Client records
- Kept for as long as we are working together, and afterwards for the period our contract and the tax and accounting rules that apply to us require.
Your rights
Wherever you live, you can ask us what we hold about you and what we have done with it. Write to us and we will answer within 30 days. We do not charge for any of this, and we will not ask you for more information than we need to be sure it is really you.
- Access and portability
- A copy of the personal information we hold about you, in a form you can take somewhere else.
- Correction
- Anything wrong or out of date put right.
- Deletion
- Your information erased, where we have no continuing reason and no legal duty to keep it.
- Objection and restriction
- Ask us to stop using your information, or to limit how we use it, where we are relying on our legitimate interest.
- Withdrawing consent
- Where we rely on your consent you can withdraw it at any time. That does not make what we did beforehand unlawful.
- Complaining
- In the European Economic Area or the United Kingdom you can complain to your national data protection authority. In Egypt, to the Personal Data Protection Centre. We would rather you came to us first, but it is your right either way.
Keeping it safe
The database is reached only from our own servers, never from your browser: the key that opens it is not in any page you download. Traffic to and from this site is encrypted. Access to the internal system is limited to the people at Nylix whose work needs it.
No system is perfect and we will not pretend otherwise. If a breach affects your personal information and puts you at risk, we will tell you and the relevant authority within the time the law allows.
Children
This site is for businesses and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has sent us something, write to us and we will delete it.
Changes to this policy
If we change how we handle personal information we will update this page and change the date at the top of it. Where a change actually affects you we will do more than that: we will contact the people whose information it affects.
How to contact us
Questions about this policy, or about anything we hold, go to the email address below. If you would rather write to us on paper, our registered address is there too.