Privacy Policy

This Privacy Policy describes how Virexis (“Virexis,” “we,” “us,” or “our”) collects, uses, and shares information in connection with the Atlas platform, our websites at virexis.ioand its subdomains, and related services (collectively, the “Services”). By using the Services, you agree to the practices described here.

Information we collect

We collect the following categories of information:

• Account information. When you create an account or are invited to one, we collect your name, email address, and authentication identifiers. Authentication is handled by our identity provider, Clerk.
• Information from third-party sign-in.If you sign in using a third-party provider such as Google, we receive basic profile information from that provider as described in the “Google user data” section below.
• Customer content. Atlas processes data you and your organization submit to the platform — including device identities, certificates, configurations, telemetry, and logs — on your behalf and under your control.
• Usage and device information. We collect logs, approximate location derived from IP address, browser and device information, and how you interact with the Services, to operate, secure, and improve them.
• Cookies.We and our providers use strictly necessary cookies for authentication and session management. See “Cookies and similar technologies” below.

How we use information

• Provide, maintain, and secure the Services.
• Authenticate users and manage access and permissions.
• Communicate with you about your account, security, and updates.
• Monitor, debug, and improve reliability and performance.
• Detect, prevent, and respond to fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our agreements.

Google user data

If you choose to sign in with Google, we request only your basic profile (name, email address, and profile picture). We use this information solely to create and authenticate your Atlas account and to associate your activity with your identity within your organization. Virexis’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not sell Google user data, use it for advertising, or share it with third parties except as needed to provide the Services or as required by law.

How we share information

We do not sell personal information. We share information only:

• With service providers that process data on our behalf under contract — for example, our identity provider (Clerk) and our infrastructure and hosting providers.
• Within your organization, as governed by the roles and permissions your administrators configure.
• For legal reasons, when required to comply with law, respond to lawful requests, or protect the rights, safety, and security of Virexis, our users, or the public.
• In a business transfer, such as a merger, acquisition, or sale of assets, subject to this policy.

Cookies and similar technologies

We use strictly necessary cookies to keep you signed in and to protect against fraud and abuse. We do not use third-party advertising cookies. You can control cookies through your browser settings, but disabling necessary cookies may prevent you from signing in.

Data retention

We retain personal information for as long as your account is active or as needed to provide the Services, and thereafter as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Customer content is retained according to your organization’s settings and our agreement with your organization.

Security

Security is central to how Atlas is built. We apply measures including encryption in transit, certificate-based device identity, least-privilege access controls, audit logging, and encrypted backups. No method of transmission or storage is completely secure, but we work to protect your information and continually improve our safeguards.

Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. To exercise these rights, contact us at hello@virexis.io. If your data is managed by an organization’s administrator, we may direct your request to that organization.

International data transfers

We operate infrastructure that may process and store information in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

Children

The Services are not directed to children under 16, and we do not knowingly collect personal information from them.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate.

Contact us

If you have questions about this policy or our privacy practices, contact us at hello@virexis.io.