INYXA EASYPICK PRIVACY POLICY

Last Updated: April 2026

This Privacy Policy describes how INYXA LLC ("INYXA", "we", "us") handles information in connection with our software applications and cloud services.

1. OUR ROLE IN DATA PROTECTION

Our responsibilities depend on your deployment model: 

  • For INYXA-Hosted Services (SaaS): We act as a Data Processor (under GDPR) and a Service Provider (under CCPA/CPRA). We process User Data solely on your behalf. 
  • For Customer-Hosted Products (On-Premise/EasyPick): We act as a Software Provider. You (the Customer) are the sole Controller and Processor of your User Data. INYXA does not have access to, store, or see your User Data in on-premise environments, except for the technical Usage Data described in Section 3.

2. INFORMATION WE COLLECT

Account Information: Names, business emails, and billing details provided during procurement. 

User Data (SaaS Only): Information you or your Authorized Parties upload to our hosted environment. 

Technical Usage Data: To verify license compliance (per Section 11.10 of our License Agreement), our software may transmit anonymized technical metrics, including license keys, IP addresses, and resource utilization, and unique device identifiers (e.g., IDFV or Android ID) for mobile installations. 

Mobile Device Information (Mobile Only): When using our mobile application, we may collect information about the device type, operating system version, and application-level crash logs to ensure compatibility and software stability. Inyxa does not collect GPS location data. 

Camera & Photos: If you choose to upload images, the app requires access to your camera or photo library. These images are transmitted directly to your designated environment (SaaS or On-Prem) and are not stored or viewed by INYXA. 

Location Data (GPS): If Geofencing is enabled by your administrator, the app may collect your GPS location while the app is in use to verify your presence within a designated work zone. INYXA does not track your location history; location data is used locally or sent to your Company's instance for policy enforcement. 

Biometrics: We may use device-level biometrics (FaceID/TouchID) for secure login. INYXA never receives or stores your biometric data. 

 3. DATA RETENTION

Account Data: We retain business contact info for the duration of our contract and for up to 7 years thereafter for tax and legal compliance. 

SaaS User Data: Upon termination of a SaaS Agreement, we delete or return User Data within 60 days, unless a different period is specified in your SOW. 

On-Premise Data: Because we do not host this data, we have no retention period for it. You are responsible for your own data retention and deletion schedules. 

4. COOKIE DISCLOSURE

We believe in a "Privacy First" web experience. 

No Third-Party Cookies: We do not use third-party cookies, tracking pixels, or cross-contextual advertising scripts. 

First-Party Essential Cookies: We use only strictly necessary first-party cookies to manage your secure login session and maintain your preferences. These cookies do not track you across other websites. 

Web Version: Strictly necessary first-party cookies only. 

Mobile Version: We do not use cookies. We use secure mobile identifiers to maintain your session. 

 5. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)

Notice at Collection: We collect Identifiers, Commercial Info, and Geolocation Data (when enabled). We do not "sell" or "share" personal information. 

Your Rights: California residents may request access to, deletion of, or correction of their personal information by emailing legal@INYXA.com. 

 

6. EUROPEAN UNION RIGHTS (GDPR)

Legal Basis: We process data to perform our contract with you or based on our legitimate interest in software security. 

Data Transfers: Data is processed in the US. For EU/EEA residents, we utilize Standard Contractual Clauses (SCCs) to ensure a level of protection equivalent to that in the EEA. 

Supervisory Authority: You have the right to lodge a complaint with your local Data Protection Authority within the EEA or the Information Commissioner's Office (ICO) in the UK. 

Mobile & Third-Party Devices: For mobile versions of the Product, the Customer or User is solely responsible for the physical security of the device, including the use of passcodes and device-level encryption. Inyxais not responsible for User Data cached on a device that is lost, stolen, or compromised due to "jailbreaking" or the removal of manufacturer security controls. 

 7. SECURITY RESPONSIBILITY

SaaS: We implement commercially reasonable technical and organizational measures to protect your data. 

On-Premise & Mobile: The Company is solely responsible for the security of the devices used to access the Product. This includes managing device-level encryption, passcodes, and ensuring devices are not "jailbroken" or "rooted." INYXA is not responsible for data loss resulting from stolen or compromised hardware.