Privacy
Privacy policy
Last updated: 2026-10-11
Who we are
ilinxa edge is operated by ilinxa, based in Türkiye. This policy explains what data the service collects, how it is used, and how long it is kept. Questions go to edge_support@ilinxa.com.
What we collect
- Account data: email address, a password hash, your name or username, and optional profile fields. If you sign in with Google or GitHub, the identifier of that account.
- Session data: refresh tokens, browser or device description, and IP address.
- Credentials you create: API tokens and agent connections, stored hashed.
- Activity records: an audit log of actions (what, who, IP address, browser) and in-app notifications.
- Content you add: project data, uploaded files, and email send history (recipient, subject, delivery status and the message as sent).
- Form submissions that visitors send to forms you publish.
- Technical data: error reports and rate-limit counters keyed by IP address.
Why we use it
We use this data to run the service: to sign you in, to store and serve your projects, to deliver the email you ask us to send, to keep the service secure and show you an audit trail, and to find and fix errors. We do not sell your data and we do not use it for advertising.
How long we keep it
| Data | How long |
|---|---|
| Account details | Until you delete your account, then removed after a 24-hour grace period. |
| Sign-in sessions (refresh token, device, IP address) | A session stops working after 30 days or when you sign out; its record (IP address and device) is removed when your account is deleted. |
| API tokens and agent connections (stored hashed) | Until you revoke them. |
| Audit log and notifications | Audit records are kept for 365 days and notifications for 90 days; both are removed sooner when your account is deleted. |
| Approval requests for irreversible actions | 7 days (decided requests are removed a day after the decision). |
| Project content and uploaded files | Until you delete the project, then removed after a 24-hour grace period. |
| Email send log | We store the recipient, subject, delivery status, and the message as sent; the message body is erased 30 days after delivery. |
| Form submissions from your visitors | Form submissions are kept for the retention period you set on each form (up to 365 days); if you set none, until you delete the form or the project. |
| Rate-limit counters (IP address) | Minutes. |
| Error details (server logs) | Written only to our own server logs, which rotate automatically and keep roughly the last 30 MB per service; never sent to a third party. |
| Backups | Encrypted database backups are kept on a rolling basis (the 30 most recent platform backups and the 24 most recent backups of each project database). |
Your choices
You can edit your profile, revoke tokens and agent connections, and delete your account or any project from within the product. To ask for a copy of your data or for help with a deletion, email edge_support@ilinxa.com.
Security
Passwords are stored as argon2id hashes. Tokens and connection secrets are stored hashed. Traffic uses HTTPS, and database backups are encrypted. No system is perfectly secure; report a concern to edge_support@ilinxa.com.
AI agents and MCP
When you connect an AI agent, the connection acts as you within the permissions you grant, and nothing more. Its actions are recorded in the audit log. Content the agent reads is passed to the AI service you chose to connect, under that service's own terms. You can revoke a connection at any time. See the guide.
Changes to this policy
If we change this policy, we will update the date at the top of this page.
Contact
Questions about this policy: edge_support@ilinxa.com.