Privacy Policy

Last updated: March 2026

Introduction

Energy FW Ltd ("we", "us", or "our") operates Scalix Prime and the website at prime.scalix.world. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use the interactive demo, or deploy Scalix Prime in your infrastructure.

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, and applicable data protection laws.

Information We Collect

Self-Hosted and On-Premise Deployments

For self-hosted or on-premise deployments of Scalix Prime:

• No Data Collection: Your data never leaves your infrastructure. The engine runs entirely within your environment.
• Complete Control: You maintain full ownership and control of all data stored in the graph-relational engine.
• Offline Operation: Scalix Prime functions completely offline without any external data transmission.
• Optional Telemetry: Basic usage metrics for product improvement are opt-in only and disabled by default.

Website and Early Access Form

When you visit our website or submit our early access form, we collect:

• Account Information: Name, email address, company name, role, and use case interest.
• Technical Data: IP address, browser type, and access logs for security purposes.
• Optional Message: Any additional information you choose to provide.

We do not collect any data beyond what you voluntarily provide through the form.

Cloud-Hosted Service (Future)

For our managed cloud service (when available), we will collect:

• Account Information: Name, email, company details, and billing information.
• Usage Data: API requests, query metrics, error rates, and storage utilisation.
• Technical Data: IP addresses, device information, browser type, and access logs.
• Request Metadata: Timestamps, request/response sizes, and query types. We do not store the content of your data or query results.

How We Use Your Information

We use collected information for:

• Contacting you about Scalix Prime early access availability and product updates.
• Providing and maintaining the Scalix Prime service.
• Processing transactions and sending billing notifications (cloud service).
• Monitoring platform performance and optimising infrastructure.
• Detecting, preventing, and addressing technical issues and security threats.
• Responding to support requests and customer enquiries.
• Improving our products and developing new features.
• Complying with legal obligations and enforcing our terms.

We will never sell, rent, or share your personal data with third parties for marketing purposes.

Data Security

We implement industry-standard security measures to protect your data:

• Encryption: AES-256 encryption at rest and TLS 1.3 for data in transit.
• Access Controls: Role-based access control (RBAC) with property-level granularity. Multi-factor authentication (MFA) for all internal systems.
• Data Isolation: Complete tenant isolation in multi-tenant deployments. Each client pod has physically isolated storage.
• Audit Logging: Comprehensive audit trails for all data access and modifications.
• WAL Integrity: CRC32 checksums on all write-ahead log entries to detect and prevent data corruption.
• Regular Assessments: Periodic security reviews and vulnerability assessments.

Data Retention

We retain your information only as long as necessary for the purposes outlined in this policy:

• Early Access Data: Retained until you request its deletion or until the early access programme concludes.
• Account Data: Retained while your account is active, plus 90 days after closure to allow for reactivation.
• Usage Metrics: Aggregated for 24 months; detailed logs retained for 90 days.
• Billing Records: Retained for 7 years for tax and legal compliance.

You may request deletion of your data at any time by contacting us.

Data Sharing and Disclosure

We do not sell your data. We may share information only in these limited circumstances:

• Service Providers: Third-party vendors who assist in operations (hosting, payment processing) under strict confidentiality agreements.
• Legal Requirements: When required by law, subpoena, or to protect our rights.
• Business Transfers: In connection with mergers, acquisitions, or asset sales, with prior notice to you.
• With Your Consent: When you explicitly authorise us to share specific information.

Cookies

Our website does not use any third-party tracking or analytics tools. We do not use Google Analytics, Facebook Pixel, or any similar services. The only cookies we may use are essential functional cookies required for the website to operate correctly.

Your Rights (GDPR)

Under the GDPR and applicable UK data protection laws, you have the right to:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data ("right to be forgotten").
• Right to Restrict Processing: Limit how we use your data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Opt out of certain data processing activities.
• Right to Withdraw Consent: Revoke previously granted permissions at any time.

To exercise any of these rights, please contact us using the details below.

International Data Transfers

For cloud-hosted services, your data may be processed in data centres located globally. We ensure adequate safeguards are in place for international transfers, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Data Processing Agreements (DPAs) with all service providers.
• Compliance with regional data protection regulations (GDPR, UK Data Protection Act 2018).

For self-hosted and on-premise deployments: All data remains within your designated jurisdiction and infrastructure. No data is transmitted externally.

Children's Privacy

Scalix Prime is designed for enterprise and professional use. We do not knowingly collect information from children under 13 (or 16 in the EU/UK). If we become aware of such collection, we will promptly delete the information.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via:

• Email notification to your registered address.
• Prominent notice on our website.

Continued use of Scalix Prime after changes indicates acceptance of the updated policy.

Contact

For privacy-related questions, concerns, or to exercise your rights, contact us: