Privacy Notice
Version privacy-2026-11-14. Last updated 14 November 2026.
This notice explains what personal data ExFyx collects through this website (exfyx.com), why, and what you can do about it. It covers the website and the early-access list only. The ExFyx product has its own terms for customers.
Who we are
ExFyx is responsible for (the “controller” of) the personal data described here. For anything about your data, email privacy@exfyx.com. We reply within 30 days.
Early-access signups
When you join the early-access list, we store:
| Data | Why |
|---|---|
| Your email address | To contact you about early access and your invitation. |
| When you signed up, and the version of this notice you agreed to | To show when and to what you consented. |
| Your country (worked out by Cloudflare from your connection; we never store your IP address) | To plan the rollout by region. |
| Whether you also asked for product updates | So we only send updates to people who asked for them. |
Legal basis: your consent, which you give by ticking the box on the form (GDPR Article 6(1)(a); section 6 of India’s Digital Personal Data Protection Act, 2023). Product updates need a second, separate tick and are off unless you choose them.
How long we keep it: until early access ends and invitations have gone out, and no longer than 24 months after you sign up, unless you become a customer. If you withdraw consent or ask us to delete it, we delete it within 30 days.
Cookies and similar technologies
On your first visit we ask for your choice. Optional technologies stay off until you choose:
- Accept all switches them on.
- Reject all keeps them off. It is just as easy as accepting.
- Manage preferences lets you decide for each category.
You can change your mind at any time with , which is also linked at the bottom of every page.
We ask again after 12 months, or sooner if we add something new that needs your consent. If your browser sends a Global Privacy Control signal, we treat it as “Reject all”.
| Name | Category | What it does | Kept for |
|---|---|---|---|
exfyx-consent (local storage, not a cookie) | Strictly necessary | Remembers your cookie choice so we don’t ask on every visit. | 12 months, or until you clear your browser data |
| Cloudflare Web Analytics | Analytics (optional, off unless you accept) | Counts page views and load speed: pages viewed, the referring site, browser and device type, and country. It sets no cookies, doesn’t fingerprint, and doesn’t identify you. | Nothing is stored on your device. Totals are kept by Cloudflare for up to 6 months. |
This website sets no cookies at all. It doesn’t use advertising or social media trackers.
Fonts and scripts are served from exfyx.com itself, so loading the page doesn’t send your data to Google or other font or script hosts.
Who processes the data for us
Cloudflare, Inc. hosts this website, runs the database that holds the early-access list, and provides the optional analytics. Like any web host, Cloudflare handles your IP address to deliver the site and protect it from attacks. It acts on our instructions under its data processing agreement.
Cloudflare may process data in countries other than yours, including the United States. Those transfers are covered by the EU Standard Contractual Clauses and Cloudflare’s Data Privacy Framework certification.
We don’t sell your data or share it with advertisers.
Your rights
You can ask us to:
- show you the data we hold about you, or give you a copy;
- correct it;
- delete it;
- stop sending product updates;
- withdraw your consent at any time.
Withdrawing consent doesn’t affect what we did before. Email privacy@exfyx.com from the address you signed up with. Every product update also has an unsubscribe link.
If you’re unhappy with how we handle your data, you can complain to your local data protection authority. In India, that’s the Data Protection Board of India. We’d appreciate the chance to fix it first.
Security
The site is served only over HTTPS, with HSTS. The early-access list is stored in a database that only ExFyx staff who need it can reach.
Children
This website is for businesses and isn’t meant for anyone under 18. We don’t knowingly collect children’s data. If you think we have, email us and we’ll delete it.
Changes
If we change this notice, we’ll update the version and date at the top. If a change affects what you agreed to, we’ll ask for your consent again before relying on it.