Privacy Policy

Relux Works LLC

Last updated: July 27, 2026

1. Scope

This Privacy Policy explains how Relux Works LLC (“Relux Works”, “we”, “us”, or “our”) processes personal data when you:

  • visit relux.works;
  • use the public API, MCP server, or browser agent tools at api.relux.works;
  • submit or authorize a project inquiry;
  • communicate with us about services, contracts, support, or our products.

A product may have a separate privacy notice when its data flow differs from the one described here. The product-specific notice controls for that product if the two notices conflict.

2. Controller

Relux Works LLC is the controller of the personal data described in this Policy.

Relux Works LLC
Registration number: 999.110.1559507
Tax ID: 03036828
Orbeli Brothers St. 19
Tsaghkadzor, Kotayq 2310, Armenia
Email: privacy@relux.works

3. Personal Data We Process

Project inquiries

When you or an agent acting for you submits a project inquiry, we may receive:

  • your name, company, role, email address, telephone number, messenger handle, or LinkedIn profile;
  • whether the reply route belongs to the decision maker or to an agent responsible for relaying our response;
  • the project description, current product state, desired outcome, platform, constraints, budget, timeline, preferred language, and market;
  • the submitting platform or agent, an inquiry identifier, and confirmation that the draft and reply route were explicitly approved before submission.

The inquiry requires a project summary, explicit approval, and a real external reply route. Without them, the inquiry cannot be submitted. An inquiry is not a contract, purchase, or financial commitment.

Technical and security data

When you access the website or gateway, Cloudflare and our gateway may process:

  • IP address, request time, requested address, HTTP method and status;
  • browser or client user agent, request headers, and protocol information;
  • approximate country derived by Cloudflare, Cloudflare Ray ID, and security signals;
  • authenticated agent client ID, transport type, validation errors, rate-limit outcomes, and delivery status.

The gateway uses IP addresses temporarily to prevent abuse. Our structured inquiry events do not include the inquiry text, email address, telephone number, or messenger handle.

Language preference

The website stores an nf_lang cookie for up to one year after you select a language. It is used only to return you to the selected language. Cloudflare may use additional strictly necessary cookies or similar signals to deliver and protect the website.

We do not use advertising cookies, third-party advertising SDKs, or cross-site behavioral profiling on relux.works.

Business communications and records

If discussions continue, we may process correspondence, meeting notes, proposals, contracts, invoices, payment status, repository access details, and support records. Payment card data is handled by the relevant bank or payment provider and is not stored by Relux Works.

4. Data We Ask You Not to Submit

Do not place passwords, private keys, access tokens, production credentials, complete customer datasets, or source-code secrets in a public project inquiry. Do not include health information, biometric data, political or religious beliefs, or other sensitive personal data unless we have agreed in writing on a necessary and secure process.

Repository access and confidential technical material must be shared only through a separately agreed access-controlled channel.

5. Where Data Comes From

We receive data:

  • directly from you;
  • from an agent or representative acting at your request;
  • from the technical systems that deliver and protect the website and gateway;
  • from later correspondence with you or your organization.

If you provide another person’s contact details, you must be authorized to do so and must ensure that person receives this Policy. Agents must not invent, infer, or substitute contact details.

An AI assistant or connector that you choose may process your conversation before it sends tool arguments to Relux Works. That processing is governed by your agreement with the assistant provider. Relux Works receives the fields included in the tool call, not the rest of a private conversation unless the agent includes it.

6. Why We Process Data

We process personal data to:

  • prepare, evaluate, route, and respond to a project inquiry;
  • take steps requested before entering a contract and administer a later contract;
  • communicate with the decision maker or an authorized relay;
  • secure the website and gateway, prevent spam and misuse, diagnose failures, and maintain service reliability;
  • keep accounting, corporate, and legal records and establish or defend legal claims;
  • remember the language selected on the website;
  • comply with applicable law and lawful requests.

Where GDPR or UK GDPR terminology applies, the legal basis is one or more of:

  • steps taken at your request before a contract, or performance of a contract;
  • our legitimate interests in responding to genuine business inquiries, operating a secure service, preventing abuse, and maintaining necessary business records;
  • compliance with a legal obligation;
  • consent, only where we specifically request it for a separate optional purpose.

The consent_confirmed field records that the user approved transmitting the complete inquiry and reply route. It does not create a contract and is not presented as the only legal basis for every later processing operation.

We do not add inquiry contacts to marketing lists or send newsletters without a separate choice. We do not sell personal data.

7. Service Providers and Other Recipients

Personal data is available only where needed to:

  • authorized Relux Works staff and contractors subject to confidentiality duties;
  • Cloudflare, which delivers and protects the website, runs the gateway, applies network security controls, and stores short-lived Worker logs;
  • Telegram, which carries an accepted inquiry as a message to a private Relux Works team chat so that a person can respond;
  • professional advisers, banks, accounting providers, and contract or support systems when a business relationship requires them;
  • courts, regulators, law enforcement, or other authorities when disclosure is required by law or necessary to protect legal rights.

Cloudflare’s data processing terms are available at cloudflare.com/cloudflare-customer-dpa. Telegram describes its processing at telegram.org/privacy.

We do not share inquiry data with data brokers or advertising networks.

8. International Processing

Relux Works is established in Armenia and works with clients internationally. Data may therefore be processed in Armenia and in countries where Cloudflare, Telegram, or another necessary provider operates.

Cloudflare operates a global network and states that its Data Processing Addendum incorporates the European Commission Standard Contractual Clauses and the UK transfer addendum where they apply. Telegram is a cloud messaging service and describes its companies and international processing in its own privacy policy.

Cloudflare provides contractual transfer terms for its service. The Telegram bot integration does not provide Relux Works with a customer-specific data processing agreement. If your organization or applicable law requires a particular transfer agreement, do not submit confidential project details through the public inquiry gateway. Contact privacy@relux.works first so that we can assess and agree on another channel.

9. Retention

We retain personal data only for as long as needed for the purposes above:

  • the in-memory IP rate-limit window lasts no more than one hour and is not a durable inquiry record;
  • Cloudflare Worker logs are retained for no more than seven days under the current platform limits;
  • the language preference cookie expires after one year;
  • if an inquiry does not lead to an engagement, its Telegram notification and related business correspondence are deleted or anonymized within 24 months after the last meaningful communication;
  • if an inquiry leads to a contract, we retain contract, accounting, project, and legal records for the periods required by applicable law and while reasonably needed to establish, exercise, or defend legal claims.

We may keep a limited record of a privacy request or suppression instruction when needed to demonstrate compliance and avoid contacting the person again.

10. Your Rights

Depending on applicable law, you may ask us to:

  • confirm whether we process your personal data and provide access to it;
  • correct incomplete or inaccurate data;
  • delete data that is no longer required or was processed unlawfully;
  • restrict processing;
  • provide data in a portable format;
  • withdraw consent for an optional activity based on consent;
  • object to processing based on legitimate interests.

You may object at any time to direct marketing. Relux Works does not currently use project inquiry data for direct marketing without a separate choice.

Send a request to privacy@relux.works. We may need to verify your identity and authority before acting. Rights can be limited where an exception under applicable law applies, including the need to retain legal or contractual records.

You may also complain to the data protection authority where you live or work, where applicable. In Armenia, the competent authority is the Personal Data Protection Agency of the Ministry of Justice, which publishes the contact address pdpa@justice.am.

11. Automated Decisions

We do not use personal data from project inquiries to make decisions based solely on automated processing that produce legal or similarly significant effects. An agent may help structure an inquiry, but a person reviews accepted inquiries and decides how to respond. Automated validation and rate limiting can reject malformed or excessive requests but do not create legal or financial obligations.

12. Security

We use measures appropriate to the nature of the data, including encrypted transport, restricted administrative access, secrets management, input validation, rate limits, short-lived technical logs, and data-minimized event logging. No internet transmission or storage system is completely secure. If you believe data has been exposed or misused, contact privacy@relux.works.

13. Children

The website and development services are directed to adults and business representatives. We do not knowingly solicit project inquiries from children. If you believe a child has submitted personal data, contact us so that we can review and delete it where required.

14. Third-Party Sites

The website links to GitHub, LinkedIn, Telegram, and other third-party services. Their privacy practices are governed by their own notices. Relux Works does not control data that you provide directly to those services.

15. Changes

We may update this Policy when our services, providers, or legal obligations change. The current version and its effective date are published on this page. We will provide additional notice before a material new use of personal data where applicable law requires it.

16. Contact

Privacy questions and requests:

Relux Works LLC
Email: privacy@relux.works
Address: Orbeli Brothers St. 19, Tsaghkadzor, Kotayq 2310, Armenia