Privacy Policy

This Privacy Policy explains how Nuralis Technologies ("we", "us", "our") collects, uses, and protects personal data in connection with the Polyflux service available at polyflux.io (the "Service"). Nuralis Technologies is registered in the United Arab Emirates, IFZA Business Park, DDP, 001 - 85955, Dubai, UAE (Trade License No. 85955).

1. Data we collect

1.1 Account data

When you create an account we collect:

• Email address — used as your account identifier and for transactional messages (welcome email containing your API key, payment receipts, trial-expiry reminders).
• Authentication identifiers — a Firebase user ID generated when you sign up. If you sign in with Google, the Google account email and display name are passed to us by Google.
• Email verification status — whether you have clicked the verification link we send.

1.2 Subscription & payment data

When you start a free trial or paid subscription we create a customer record at our payment processor, Stripe, Inc. ("Stripe"). Stripe collects and stores your payment-card details directly — we never see or store your card number. We receive from Stripe:

• A Stripe customer ID and subscription ID
• The last four digits and brand of your payment card (for display in the customer portal)
• The country and postal code on file (for tax purposes)
• Subscription status, renewal dates, invoice history

1.3 Usage & technical data

• Server logs — IP address, user-agent, request timestamps, paths, and response codes are written to standard webserver logs and retained for up to 30 days.
• API usage — when you connect to our streaming endpoint, we log the API key used, connection duration, and a "last seen" timestamp so we can detect inactive subscriptions.
• Analytics — we use Google Analytics 4 (Google LLC) and the Reddit Pixel (Reddit, Inc.) to measure traffic, conversion, and ad performance. These tools may set cookies and process pseudonymous identifiers, IP-derived location, and page-view events. You can opt out via your browser settings or extensions like uBlock Origin / Privacy Badger.

1.4 Optional data

• If you join our Signals waitlist, we store the email you provide until the beta launches or you unsubscribe.
• If you contact us by email, we retain the message and your email address for as long as needed to handle the inquiry and any follow-up.

2. How we use your data

• To provide the Service — authenticate you, issue API keys, route the data stream, and bill subscriptions.
• To send transactional emails (welcome, receipts, trial-end notice, important service announcements).
• To detect and prevent fraud, abuse, and security incidents (e.g., key sharing, scraping, payment fraud).
• To measure aggregate funnel performance — sign-ups, trial activations, conversions — and improve the product.
• To meet our legal obligations (tax records, anti-money-laundering checks, responses to lawful requests).

We do not sell your personal data, and we do not use your data to train machine-learning models.

3. Third-party processors

We rely on the following processors to operate the Service:

Processor	Purpose	Data shared
Stripe, Inc. (USA)	Payments & subscription billing	Email, payment-card details (collected directly by Stripe), billing address
Google LLC — Firebase Authentication	Identity provider	Email, password hash (Firebase-managed), Google profile if you sign in with Google
Google LLC — Google Analytics 4	Web analytics	Pseudonymous client ID, IP-derived approximate location, page events
Reddit, Inc. — Reddit Pixel	Advertising attribution	Cookie/device identifier, page events
Resend, Inc. (USA)	Outbound transactional email	Email address, message content
Amazon Web Services (Ireland)	Hosting	Server logs (IP, user-agent), encrypted database
Cloudflare, Inc. (USA)	CDN, DDoS protection	Connection metadata

Each processor handles your data under their own privacy terms. We only share what is necessary for the named purpose.

4. International transfers

We are based in the United Arab Emirates. Some processors named above store data in the European Union and the United States. By using the Service you consent to your data being transferred to those jurisdictions. Where required by law, transfers are covered by Standard Contractual Clauses or equivalent safeguards.

5. Retention

• Account and subscription records: kept while your account is active and for 7 years afterwards (UAE accounting / tax requirements).
• Server access logs: 30 days.
• Analytics events: per provider's default retention (typically 14–26 months).
• Signals waitlist email: until launch or unsubscribe, whichever is first.

6. Your rights

You can request, at any time, that we:

• Provide a copy of the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data (subject to retention obligations above)
• Stop sending you marketing emails (we send very few; transactional emails cannot be opted out of while you have an active subscription)

Send requests to [email protected]. We will respond within 30 days.

7. Cookies

We use a small number of cookies and similar technologies. Strictly-necessary cookies (authentication, fraud prevention) are set without consent because the Service cannot function without them. Analytics and advertising cookies (Google Analytics, Reddit Pixel) are set on first visit; you can block them via your browser or any cookie-blocker extension.

8. Security

We use TLS for all network traffic, encrypted storage at rest, principle-of-least-privilege access controls, and standard security practices. No system is perfectly secure — if you become aware of a vulnerability, please report it to [email protected].

9. Children

Polyflux is not intended for users under 18, and we do not knowingly collect personal data from minors.

10. Changes to this policy

We may update this policy as the Service evolves. Material changes will be communicated by email or by a notice on polyflux.io at least 14 days before they take effect.

11. Contact

Nuralis Technologies
IFZA Business Park, DDP, 001 - 85955
Dubai, United Arab Emirates
Trade License No. 85955
Privacy contact: [email protected]
General contact: [email protected]
Company website: nuralis-technologies.com