1. Scope

This Privacy Policy applies to:

  • The Altnyx ECS SaaS platform and mobile applications.
  • Our marketing website at altnyx.com and any subdomains.
  • Communications you have with our sales, support, and implementation teams.

It does not apply to third-party services you connect to via the Altnyx integration layer. Those services have their own privacy policies.

Altnyx ECS processes operational data — batch records, quality data, financial records — on behalf of our enterprise customers under a Data Processing Agreement. That data is customer data, not personal data collected by Altnyx for its own purposes.


2. Data we collect

Account and contact data

When you create an account or contact us, we collect name, work email, job title, company name, and phone number.

Usage and telemetry data

We collect log data about how you interact with the platform — pages visited, features used, errors encountered, session duration — to improve the product and diagnose issues.

Device and browser data

IP address, browser type and version, operating system, and referring URL collected automatically when you access our web properties.

Customer operational data

Data entered by enterprise customers (batch records, formulas, supplier information, financial records) is processed on their behalf and governed by our Data Processing Agreement, not this policy.

Communications

Emails, support tickets, and demo call recordings (with your consent) are retained to service your account.


3. How we use data

PurposeLegal basis (GDPR)
Provide and maintain the ECS platformContract performance
Send onboarding, product, and support communicationsContract performance / Legitimate interest
Diagnose errors and improve performanceLegitimate interest
Security monitoring and fraud preventionLegitimate interest
Billing and invoicingContract performance / Legal obligation
Product marketing and case studies (with consent)Consent
Legal complianceLegal obligation

We do not sell personal data to third parties.


4. Data sharing

We share data only in the following circumstances:

Sub-processors

We use third-party sub-processors (cloud hosting, monitoring, email delivery, payment processing) under data processing agreements. A current sub-processor list is available on request.

Legal requirements

We may disclose data if required to do so by law, court order, or government authority, or to protect the rights and safety of Altnyx, our customers, or the public.

Business transfers

If Altnyx is acquired, merges with another entity, or transfers substantially all of its assets, customer data may be transferred as part of that transaction. We will notify affected customers in advance.

With your consent

We share data in other circumstances only with your explicit consent.


5. Data retention

CategoryRetention period
Account dataDuration of contract + 2 years
Usage logs13 months
Support communications3 years from resolution
Financial records7 years (statutory minimum)
Marketing consent recordsUntil consent withdrawn + 3 years

Customer operational data (processed on your behalf) is retained according to your organisation's data retention schedule and deleted within 90 days of contract termination on written request.


6. Security

We implement technical and organisational measures proportionate to the risk:

  • Encryption in transit (TLS 1.2+) and at rest (AES-256).
  • Role-based access controls and multi-factor authentication enforcement.
  • Penetration testing and vulnerability scanning on a regular cadence.
  • SOC 2 Type II programme in progress.
  • Incident response plan with customer notification within 72 hours of a personal data breach.

No transmission over the internet is completely secure. We cannot guarantee absolute security of data transmitted to us.


7. Your rights

Depending on your jurisdiction, you may have the following rights:

  • Access — request a copy of personal data we hold about you.
  • Correction — ask us to correct inaccurate or incomplete data.
  • Erasure — request deletion of your personal data where we have no legal obligation to retain it.
  • Portability — receive your data in a structured, machine-readable format.
  • Restriction — ask us to restrict processing in certain circumstances.
  • Objection — object to processing based on legitimate interest.
  • Withdraw consent — withdraw any consent previously given without affecting prior processing.

Submit requests to privacy@altnyx.com. We will respond within 30 days. We may ask you to verify your identity before acting on a request. If you are dissatisfied, you have the right to lodge a complaint with your local data protection authority.


8. Cookies

Our website uses a small number of cookies. For full details see our Cookie Policy.

CategoryExamplesPurpose
Strictly necessarySession, CSRF tokenRequired for the platform to function. Cannot be disabled.
FunctionalaltnyxTheme (localStorage)Remembers UI preferences such as light/dark mode.
Analytics_ga, _gidAggregate usage stats to improve the product. Can be disabled.

You can manage cookie preferences via the cookie banner on your first visit, or by adjusting your browser settings. Disabling analytics cookies will not affect your access to the platform.


9. Children

Altnyx ECS is an enterprise B2B platform not directed at children under 16. We do not knowingly collect personal data from children. If we become aware that we have inadvertently done so, we will delete it promptly.


10. Changes to this policy

We may update this policy from time to time. When we make material changes, we will notify platform users via an in-app notice and update the "Last updated" date at the top of this page. Continued use of the platform after the effective date constitutes acceptance of the revised policy.


11. Contact

For privacy questions, requests, or concerns:

We aim to acknowledge all privacy requests within 5 business days.