Privacy Policy
How YLAÜXI handles data on your instance. Effective 2026.
Your data stays on your deployment
YLAÜXI is a self-hosted operating system. Customer production data on self-hosted tiers resides on infrastructure you control. Managed-tier subscribers may have production data on dedicated VPS environments operated for your account — still segregated per customer, not commingled in a shared multi-tenant application database.
This policy covers ylauxi.com marketing, billing, and support systems operated by YLAÜXI LLC. Data inside your instance is administered by you; our DPA applies when we process personal data on your behalf.
Data controller
YLAÜXI LLC (Delaware, United States). Privacy requests: privacy@ylauxi.com. Registered office details available on request at the same address.
What we collect
On ylauxi.com we collect information you submit through contact forms, Prestige applications, and careers inquiries: name, email, company, and message content. Billing for subscription tiers is processed through Stripe. Payment card data is handled by Stripe, not stored on YLAÜXI application servers.
How we use it
We use submitted information to respond to inquiries, review applications, provision instances, and operate billing. We do not sell personal information. We use email only for account, support, and product communications you expect from an infrastructure vendor.
Data portability & retention
Full export paths are available inside your operating system under Settings. You control retention policies on self hosted deployments. Managed tier backups follow the schedule in your tier agreement.
On the managed YLAÜXI platform, requesting account deletion under Settings → Danger Zone erases your personal data and ends dashboard and site access immediately. Financial and legal records we're required to keep — income records, signed contracts, generated invoices — are retained for 7 years (the standard IRS recordkeeping window) and then purged automatically. Export your data first if you want a copy; the export tool is in the same Settings area.
AI processing
When you enable AI features, prompts and related content may be transmitted to subprocessors such as Anthropic (Claude) and Higgsfield (MUSE) as listed in our Sub-processors page and DPA. See the AI Disclosure for feature scope, limitations, and your review obligations. We do not use DPA-covered instance data to train public AI models.
California privacy (CCPA/CPRA)
We do not sell or share personal information for cross-context behavioral advertising. California residents may request access, deletion, or correction of personal information we hold from marketing and billing systems. Submit requests to privacy@ylauxi.com.
Security
Managed tiers run on dedicated environments with TLS, access controls, and backup procedures. Self hosted deployments inherit the security posture of infrastructure you control. SOC 2 Type II certification is on our roadmap for managed hosting — we do not represent that certification exists today.
Your rights
You may request access, correction, or deletion of personal data we hold from marketing and billing systems by contacting us. Instance data is under your administrative control.
Data processing agreement
Subscribers who process personal data of their own customers on a YLAÜXI instance are governed by our Data Processing Agreement. It defines controller and processor roles, sub-processors, international transfers, and deletion on termination.
Contact
Privacy requests: Contact page or hello@ylauxi.com.
User Service Agreement AI Disclosure MUSE Terms Privacy Policy Data Processing Agreement Cookie Policy Terms of Service Acceptable Use Refund Policy Service Level Agreement Accessibility Sub-processors