How IMLOX handles data.

IMLOX is an upstream origin-data trust and traceability operations platform. This Privacy Policy explains what information we collect, how we use it, and how we handle customer and user data when teams use IMLOX.

What We Collect

We may collect the following categories of information:

• Account information such as names, email addresses, login details, and team membership information.
• Operational data uploaded or entered into IMLOX, including supplier, producer, farm, plot, shipment, and supporting evidence records.
• Contact and workflow data such as assignment ownership, review activity, approval history, and uploaded documents.
• Technical data such as browser type, device information, log data, and product usage events needed to operate and secure the service.
• Inquiry data submitted through contact forms, demo requests, or support conversations.

How We Use Information

We use information to:

• Provide, maintain, and improve IMLOX.
• Authenticate users and manage access to workspaces, roles, and records.
• Support field intake, review workflows, traceability records, shipment readiness, and export outputs.
• Respond to demo requests, support questions, and business inquiries.
• Protect the platform, investigate abuse, and maintain service reliability and security.
• Meet legal, regulatory, or contractual obligations where applicable.

Customer Data

IMLOX is designed to handle customer operational data. In most cases, customers determine what supplier, field, plot, shipment, evidence, and related business data is uploaded into the platform. Customers remain responsible for ensuring they have the right to provide that data and for configuring their internal workflows appropriately.

How We Share Information

We do not sell customer data. We may share information only in limited cases, such as:

• With infrastructure, hosting, storage, communications, or support vendors that help us operate IMLOX.
• With service providers acting on our instructions and subject to confidentiality and security obligations.
• When required by law, regulation, legal process, or to protect rights, safety, or the platform.
• As part of a merger, acquisition, or similar corporate transaction, subject to appropriate protections.

Data Retention

We retain information for as long as needed to provide the service, maintain security and auditability, comply with legal obligations, resolve disputes, and enforce agreements. Customers may also have platform-level retention or deletion requirements based on their operational and regulatory context.

Security

We use administrative, technical, and organizational measures intended to protect data against unauthorized access, disclosure, loss, or misuse. No system can be guaranteed to be completely secure, and customers should configure access, workflows, and operational controls carefully.

International Use

IMLOX may be used by teams working across multiple jurisdictions. Customers are responsible for understanding their own local requirements regarding personal data, operational records, and origin-data handling.

Your Choices

Depending on your relationship with IMLOX and applicable law, you may have rights relating to access, correction, deletion, or restriction of certain personal information. To make a request, contact us using the email below.

Updates

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above. Continued use of IMLOX after changes take effect means the updated policy will apply.

Contact

For privacy-related questions, contact hello@imlox.com.