Transparency & Trust

Privacy Policy

Last updated: September 8, 2026 • Published by Vylex Technologies

1. Overview & Architecture

Vylex builds AI powered apps with foundational respect for data autonomy, developer privacy, and zero telemetry bloat. Atlas is designed from the ground up as a client-first, privacy-centric scientific intelligence and technical reasoning workspace.

We believe that developers, scientists, and engineers should retain absolute control over their code, research hypotheses, and computational queries. Unlike conventional AI platforms that harvest user prompts for centralized retraining, Atlas operates with strict boundaries between your workspace and external models.

2. Client-Side Key Storage & Credentials

Zero Server Storage for Personal API Keys

When you provide an OpenRouter API key in Atlas, it is stored locally in your web browser via localStorage. It is never persisted into a Vylex database, logged in application servers, or transmitted to any third party other than OpenRouter itself during inference requests.

You can verify, update, or clear your stored credentials at any time in the Settings menu or by clearing your browser site data.

3. Workspace Sessions & Chat History

All chat messages, generated code artifacts, LaTeX derivations, and investigation histories are stored directly on your local device:

Local Persistence: Conversations remain in your browser's IndexedDB / local memory.
Export Control: You can export full conversations into Markdown or JSON formats with one click.
Immediate Deletion: Deleting a session in the Atlas sidebar immediately removes it from your local browser storage.

4. Third-Party Intelligence & Data Tool Providers

To perform calculations, retrieve real-time data, and execute multi-model inference, Atlas connects to deterministic external APIs:

OpenRouter: When you submit a prompt, text and attachments are transmitted via secure HTTPS to OpenRouter to fulfill your requested model inference. Requests are governed by OpenRouter's privacy policy.
OpenStreetMap (Nominatim): Location and place lookups are routed through OpenStreetMap's open geographic database without transmitting personal identifiers.
Image & Media Services (Unsplash / Pixabay): Visual searches request public domain photos directly based solely on user search terms.
Live Utility Endpoints: Weather, cryptocurrency quotes, currency conversions, and math solving use public APIs without cookies or user tracking.

5. South African POPIA & International Compliance

Vylex Technologies operates in full compliance with the Protection of Personal Information Act (POPIA) of South Africa and adheres to general principles of international standards including GDPR:

No Telemetry Selling: We do not sell, rent, monetize, or broker personal information.
No Advertising Cookies: Atlas contains zero third-party advertising trackers, pixel beacons, or tracking cookies.
Right to Erasure: Because your data resides on your device, clearing your browser storage permanently erases all session telemetry.

6. Contact & Governance

For inquiries regarding data security, institutional deployment, or privacy policies, reach out to the Vylex Technologies engineering team:

Vylex Technologies Legal & Security

Email: hello@vylex.co.za • Website: vylex.co.za