Legal
Effective date: 14 July 2026
This Privacy Policy explains how InnInk Limited ("InnInk", "we", "us", "our"), the operator of Vyxelon, collects, uses, and protects personal data.
This policy applies to two groups of people:
For End Customer data, InnInk acts as a data processor on behalf of the Customer, who is the data controller — see our Data Processing Agreement for those terms. This policy describes how we, as the platform operator, handle personal data in both roles.
When a Customer signs up, we collect the business name, the account holder's email address, a securely hashed password, and — once a subscription is created — billing details handled by our payment processor, Stripe (we don't store full card numbers ourselves). We also record usage metrics such as the number of resolved and escalated conversations, used for billing and the analytics dashboard.
When someone messages a Customer's business through Vyxelon, we process the content of that conversation, together with whatever identifying information the channel provides or the person chooses to share — for example, a name and email address entered at the start of a website chat, a WhatsApp phone number, or an email address on an email enquiry. We also store the knowledge base content (FAQs, policies, and corrections) that the Customer supplies to power accurate answers.
Where UK GDPR applies, we rely on the following legal bases:
Some of our sub-processors are based outside the UK, including in the United States. Where personal data is transferred outside the UK, we rely on appropriate safeguards, such as the UK's International Data Transfer Addendum to the EU Standard Contractual Clauses, or the sub-processor's own equivalent certification or adequacy arrangements.
We retain Account data for as long as the account is active, and for a reasonable period afterwards to meet legal, accounting, or dispute-resolution needs. Conversation data is retained for as long as the Customer's account is active, unless deleted earlier by the Customer via their dashboard, or in response to a rights request as described below.
Depending on whether you're a Customer or End Customer, and the law that applies to you, you may have the right to: access the personal data we hold about you; correct inaccurate data; request erasure; restrict or object to processing; request a portable copy of your data; and withdraw consent where processing is based on it.
Customers can export or erase an End Customer's conversation data directly from the Vyxelon dashboard at any time. End Customers who want to exercise these rights should contact the business they spoke with, since that business controls its own customer relationships. If you're not sure which business that is, contact us at hello@vyxelon.com and we'll direct your request accordingly, consistent with our role as a processor.
We use industry-standard technical and organisational measures, including encrypted connections (TLS) to and within the Service, encrypted storage of sensitive credentials, and access controls limiting who inside InnInk can access production data. No method of transmission or storage is perfectly secure, and we can't guarantee absolute security.
Vyxelon is intended for use by businesses and their customers in a commercial context, and isn't directed at children. We don't knowingly collect personal data from children.
We may update this Privacy Policy from time to time. We'll post the updated policy here with a new effective date, and where changes are material we'll make reasonable efforts to notify Customers.
Questions about this policy or how we handle personal data: hello@vyxelon.com. If you're in the UK and unhappy with how we've responded, you can complain to the Information Commissioner's Office.