Privacy Policy

Introduction

This Privacy Policy applies to all services provided by Zylix Group. By using our services, you agree to the collection and use of your personal data as described in this policy.

Publisher Information

Company: Zylix Group I/S
Address: Agersnapsvej 3, kl. DK7100 Vejle, Denmark
CVR: DK45894479
Email: support@zylix.net

Data Collection

This information is used to provide and maintain our services, secure accounts, detect abuse, and improve user experience.

Legal Basis

We process your personal data under the following legal bases of the GDPR:

• Performance of a contract (Art. 6(1)(b)): to create and manage your account, deliver and maintain the services you purchase, and process payments.
• Legal obligation (Art. 6(1)(c)): to keep financial and billing records as required by Danish bookkeeping law.
• Legitimate interests (Art. 6(1)(f)): to secure accounts, prevent fraud and abuse, and keep our platform reliable.
• Consent (Art. 6(1)(a)): where you choose to provide optional information. You may withdraw consent at any time.

Cookies

We only use strictly necessary cookies required for the operation of our website. These may include authentication tokens used to maintain secure account access.

Data Retention & Deletion

You may request account deletion at any time through your dashboard or by contacting support at support@zylix.net. Upon deletion, your personal data will be removed within 30 days, except where retention is required by law.

We retain the following data for legal and regulatory purposes:

• Financial and billing records are retained for 5 years in accordance with Danish bookkeeping law and deleted thereafter.
• Security and abuse logs may be retained for up to 12 months.
• Any data necessary to resolve active disputes or enforce our Terms will be retained until the matter is resolved.

Data Security

We implement appropriate technical and organizational measures to protect your data. This includes encrypted data transmission, hashed password storage, and two-factor authentication for staff systems.

General Data Protection Regulation (EU - GDPR)

Your Rights

In accordance with the GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten"), subject to any retention required by law.
• Restrict our processing of your data in certain circumstances.
• Data portability — receive the data you provided in a structured, commonly used, machine-readable format.
• Object to processing based on our legitimate interests.
• Withdraw consent at any time, where processing is based on consent.

You can exercise these rights via your account dashboard or by contacting us at support@zylix.net. We will respond within one month, as required by the GDPR.

Data Deletion

You may request deletion of your account and associated personal data at any time. We may retain certain information where required by law, or where necessary to resolve disputes, enforce our Terms, or ensure platform security.

You also have the right to lodge a complaint with the Danish Data Protection Authority (Datatilsynet) if you believe your personal data is being processed unlawfully. Datatilsynet can be contacted at datatilsynet.dk.

Breach Notification

In the event of a personal data breach, we will notify the Danish Data Protection Authority (Datatilsynet) within 72 hours of becoming aware of the breach. Affected users will be notified without undue delay via email where the breach is likely to result in a high risk to their rights and freedoms. Further updates will be provided through our website or dashboard.

Third-Party Services

We use Stripe, Inc. as our Merchant of Record for payment processing. Stripe handles all payment data on our behalf and is subject to their own privacy policy at stripe.com/privacy. We do not store your full payment card details.

As Stripe is a US-based company, your payment data may be processed outside the EEA. Such transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission.

Besides Stripe, we rely on the following categories of service providers (sub-processors), who process personal data on our behalf under appropriate data-processing agreements:

• Cloudflare — website delivery, security, and DDoS protection (processes IP addresses and request logs).
• Hosting & infrastructure providers — the data centers where your game servers are provisioned.
• Email provider — to send account, security, and support communications.

A current list of our sub-processors is available on request at support@zylix.net.

Our policies do not apply to any other external websites or services linked to our platform. Users must review and accept those services' own privacy policies and terms.

Communication

We do not send marketing emails. You may receive essential service-related communications, including account, security, or operational updates, via email or dashboard notifications.

We also publish general announcements and operational updates on our website and on our Discord server. If you choose to join our Discord, your use of that platform is governed by Discord's own privacy policy and terms, and any information you share there is processed by Discord as its own controller.

Contact

If you have questions about this Privacy Policy, need support, or wish to request account changes or cancellations, you can reach us at support@zylix.net. For community assistance or announcements, you're also welcome to join our Discord server.