Privacy Policy

Rhenyx is the AI Business Management System. Today its AI agents run go-to-market through two products, Marketing and Sales CRM, covering lead management, outreach, campaign execution, pipeline, and paid media — across the tools teams already use. The two products are built to work together.

Rhenyx is operated by Rhenyx Technology Private Limited, a company registered in India (CIN U58202HR2026PTC146509).

When this policy refers to “Rhenyx,” “we,” “our,” or “us,” it means Rhenyx Technology Private Limited and its products, including Marketing and Sales CRM.

When this policy refers to “you” or “your,” it means any individual who visits our website, signs up for an account, uses our platform, or otherwise interacts with Rhenyx.

We collect information in three ways: information you give us directly, information generated by your use of our platform, and information collected automatically when you visit our website.

Information you provide to us

Account information

When you create a Rhenyx account, we collect your name, your work email address, and a password, and we confirm your email address with a one-time code. This is the core information needed to create and manage your account. When you sign up, we also note your browser's time zone, so that dates such as the end of the 7-day free trial of Marketing follow your local time.

Billing and payment information

If you purchase a paid plan, we collect billing details including your name, billing address, and payment method. Payment card data is processed directly by our third-party payment processor and is not stored on our servers.

Profile and configuration data

Information you enter when setting up your workspace — including your company website and business summary, your ideal customer profile (ICP) definition, brand profile details, campaign settings, and connected integration credentials — is stored as part of your account.

Communications

If you contact us by email or through a form on our website, we retain a record of that communication and your contact details.

Demo and sales inquiries

If you book a demo, send the contact form, or ask for pricing on our website, we collect what you enter: your name, email address, and phone number, and, if you add them, your organization and a note on what you want to solve. The demo and contact forms also ask which product you are interested in, and a pricing request can include the plan configuration you chose on the pricing page. We also record which part of our site you used, and the IP address and browser the request came from.

Your request is saved in our Sales CRM so our team can follow up. We email the team to let them know, and we send you a confirmation email. Each form passes through an automated check that screens out bots. The demo itself is a 20-minute walkthrough on sample data, so you do not need to share any of your own data for it.

Website assistant

Questions you ask the Rhenyx Assistant on our website are used only to answer you and are not stored by Rhenyx. See The website assistant for what is sent and what is kept.

Information generated through platform use

When you use Marketing or Sales CRM, our platform processes and stores operational data created by your activity. This includes:

• Leads you source, import, or enrich through the platform
• Campaign content, sequences, and performance data
• CRM records, contact interactions, and pipeline activity
• Ad campaign data connected through integrated platforms
• Emails and LinkedIn messages sent and received through the mailboxes and accounts you connect
• Lead and deal scores, prospect research, and message drafts the agents produce
• A log of the actions agents take on your behalf

This data belongs to you. We process it to operate the platform on your behalf and do not use it for any purpose outside of delivering and improving the service.

Information collected automatically

When you visit our website or use our platform, we automatically collect certain technical information, including:

• IP address and approximate geographic location
• Browser type and version
• Operating system
• Pages visited and time spent on each
• Referring URL (the page that linked you to ours)
• Device type and screen resolution
• Session timestamps and click paths

This information is used to maintain platform performance, diagnose technical issues, and understand how our website and product are being used in aggregate. On our website, it comes mainly from Google Analytics and our attribution cookies, described under Cookies and tracking technologies.

We use the information we collect for the following purposes:

To provide and operate the platform

The primary use of your data is to deliver the Marketing and Sales CRM services — setting up your account, running your campaigns, managing your leads, and ensuring the platform works as expected.

To personalize your experience

We use your ideal customer profile, brand profile, and campaign history to tailor what the agents do for you — including which buyers they look for, how leads are scored, and how each message is written.

To respond to your requests

We use what you send through our website forms to arrange your demo, answer your question, or prepare pricing. We use what you ask the website assistant only to answer you.

To communicate with you

We use your contact information to send product updates, onboarding guidance, support responses, and — where you've opted in — marketing communications about Rhenyx products. You can opt out of marketing emails at any time.

To process payments

Billing information is used to process subscription payments, issue invoices, and manage plan upgrades or cancellations.

To improve our products

We analyze aggregated, anonymized usage data to understand how our platform is used, identify areas for improvement, and prioritize product development. This analysis does not involve reviewing individual customer content.

To ensure security and prevent fraud

We monitor platform activity to detect unusual behavior, protect against unauthorized access, and ensure the integrity of your account and data. On our website, we screen forms and the website assistant for spam and abuse.

To respond to legal obligations

In limited circumstances, we may be required to use or disclose information in response to a legal obligation, such as a court order or regulatory requirement.

We do not sell your personal data. We do not share your data with third parties for their own marketing purposes. The circumstances under which we share data are limited and described below.

Service providers

We work with a limited number of third-party service providers who help us operate the platform. These providers have access only to the data necessary to perform their specific function and are contractually required to keep it confidential.

Service providers we work with include:

• Cloud infrastructure and hosting — for storing and serving your data
• AI model providers — for powering the agents in Marketing and Sales CRM and answering questions in the website assistant
• Payment processing — for handling subscription billing
• Analytics (Google Analytics) — for understanding how our website is used, in aggregate
• Account connection services — for connecting your mailbox and LinkedIn account to Marketing
• Bot protection — for screening sign-ups and website form submissions for bots and spam
• Customer support tooling — for managing support communications
• Email delivery — for sending transactional and product notifications, including form confirmations

Integration partners

Marketing and Sales CRM allow you to connect third-party tools — including lead data providers, email execution platforms, CRM systems, and ad platforms — directly within the platform. When you establish these connections, data may flow between our products and the connected platform according to the integration's design.

The data practices of third-party integration partners are governed by their own privacy policies. We encourage you to review those policies when configuring integrations. See the Third-party integrations section for more detail.

Business transfers

If Rhenyx is involved in a merger, acquisition, asset sale, or similar transaction, your data may be transferred as part of that transaction. If this occurs, we will notify you before your data becomes subject to a different privacy policy.

Legal requirements

We may disclose your information if we believe in good faith that doing so is necessary to comply with a legal obligation, enforce our Terms of Service, protect the rights or safety of Rhenyx or others, or respond to a verified government or law enforcement request.

Our products are designed to connect with external platforms to extend their functionality. Current integration categories include:

• Lead sourcing and enrichment providers (e.g., Apollo, Lusha, Cognism)
• Email campaign execution platforms (e.g., Instantly, Smartlead, Lemlist)
• Your own mailbox — Gmail, Outlook, or IMAP for AutoGTM sending, and Gmail or Outlook for the Sales CRM inbox
• Your LinkedIn account, for LinkedIn Agent outreach
• Paid advertising platforms (e.g., Google Ads, Meta Ads, LinkedIn Ads)
• CRM systems (e.g., HubSpot)

When you connect a third-party integration, you are authorizing a data exchange between our products and that platform. The scope of that exchange depends on the integration and is described during the connection setup process.

You can disconnect any integration at any time from within your account settings.

Our website has an AI assistant, the Rhenyx Assistant, which you can open from Ask Rhenyx on any page. It answers questions about Rhenyx, our products, pricing, and getting started. Here is what happens to the information you share with it.

What is sent to answer you

To answer, we send your messages, and any screenshot or voice clip you choose to add, to an AI model provider. We also send the page you are on — its address on our site, its title, and its visible text — so the answer can refer to it. Screenshots are re-saved in your browser, and made smaller if needed, before they are sent, which removes hidden file details such as location data. Voice clips are turned into text, which you can review before you send it.

What we keep

Rhenyx does not store your conversation, screenshots, or voice clips on its servers. The text of the conversation is kept in your own browser tab, in session storage and without screenshots, so it stays with you from page to page. It is cleared when you close the tab.

Limits and the work email check

To keep the assistant available and free of spam, we limit how many messages each visitor, and the site as a whole, can send. We count messages by IP address, in server memory only, and the counts reset each day.

After 10 messages in a day, we ask for a work email to continue. We check its format, that it is not a personal or temporary address, and that its domain receives mail, but we do not store it. We only remember, in server memory and for that day, that you passed the check. Your browser tab keeps the email so you are not asked again, and it is never sent to the AI model provider.

What are cookies?

Cookies are small text files placed on your device when you visit a website. Your browser's local storage and session storage work in a similar way, so we describe all three here. We use them to keep you signed in, remember your preferences, and understand how people find and use our website.

Types of cookies we use

Essential cookies

In Marketing and Sales CRM, sign-in cookies and your browser's local storage keep you signed in and let the apps work. You cannot opt out of them without signing out of the apps. On our website, when you use the website assistant, a cookie named rhx_chat holds a short chat session for up to two hours after a quick automatic bot check, so the assistant can't be misused by automated traffic. It contains no personal details.

Analytics cookies

Our website uses Google Analytics 4 to understand how visitors find and use it. Google Analytics sets its own cookies (their names begin with _ga) and collects information such as the pages you visit, how long you stay, your browser and device, and your approximate location. It runs on our public pages, including the sign-in and sign-up pages, but not inside Marketing and Sales CRM once you are signed in.

Alongside page views, our website sends Google Analytics four events of its own:

• cta_click — when a main button is clicked, with its label, where it leads, and where it sits on the page
• generate_lead — when a demo, contact, or pricing form is sent, with the name of the form and the page it was sent from
• chatbot_open — when the website assistant is opened
• pricing_view — when the pricing page is viewed

None of these events include anything you type into a form or the assistant.

Preference and functional storage

These items stay in your browser and make the site work the way you left it:

• rhenyx.site.theme.v2 (local storage) — your light, dark, or system theme choice on our website
• rhx.site-chat.v1 (session storage) — your conversation with the website assistant, text only, until you close the tab
• rhx.site-chat.contact (session storage) — the work email you gave the assistant, if you reached the check, until you close the tab

Marketing and Sales CRM remember similar display choices, such as your theme and sidebar layout, in local storage.

Attribution cookies

When you arrive on our website, we set two first-party cookies that record how you found us:

• rhx_ft (first touch) — set on your first visit and not changed after that
• rhx_lt (last touch) — updated whenever you arrive from a campaign link or from another website

Each holds the campaign tags in the link you followed (UTM parameters), the domain of the website that referred you, the page you landed on, and the date. They last 90 days and do not contain your name or email address. We do not use cookies to track your activity across unrelated websites.

Managing cookies

You can control cookies and browser storage in these ways:

• Through your browser settings — most browsers allow you to view, delete, and block cookies and site data. Blocking all cookies may affect the functionality of some parts of our website and will stop you staying signed in to Marketing and Sales CRM.
• Through Google's opt-out — Google offers a browser add-on that stops Google Analytics from collecting data on the websites you visit.
• By closing the tab — this clears your conversation with the website assistant.

Where your data is stored

Rhenyx stores data with reputable cloud infrastructure providers. Your data is stored in secure data centers and is not transferred or stored in geographic locations without adequate data protection standards in place.

How we protect your data

We take the security of your data seriously and implement appropriate technical and organizational measures to protect it. Our Security page describes them in full. They include:

Encryption

Data transmitted between your browser and our platform is encrypted in transit using industry-standard TLS (Transport Layer Security). Stored data is encrypted at rest by our hosting provider, and credentials for your connected integrations are also encrypted by Rhenyx with AES-256-GCM before they are stored.

Access controls

Access to customer data within Rhenyx is restricted to personnel who need it to perform their role. We enforce role-based access controls and regularly review who has access to what. Within your workspace, administrators manage user roles and permissions, and single sign-on (SSO) is available on Enterprise.

Credential security

API credentials and authentication tokens for third-party integrations are stored in encrypted form and are never exposed in plaintext inside the platform.

Infrastructure security

Our hosting infrastructure is maintained with regular security patches and monitored for anomalous activity.

We retain your data for as long as your account is active or as long as necessary to provide the service. When you close your account, we begin the process of deleting your data from our active systems.

Specific retention considerations:

• Account data — retained for the duration of your account, then deleted within 60 days of account closure, unless retention is required by law
• Platform operational data (leads, campaigns, CRM records) — deleted within 60 days of account closure unless earlier deletion is requested
• Billing records — retained for the period required by applicable financial and tax regulations
• Support communications — retained for up to 24 months after a support case is closed
• Anonymized usage analytics — may be retained indefinitely in aggregate, non-identifiable form
• Website assistant conversations — not stored by Rhenyx; kept in your browser tab until you close it
• Demo, contact, and pricing requests — kept in our Sales CRM so our team can follow up with you
• Attribution cookies (rhx_ft and rhx_lt) — expire 90 days after they were last set

You can request deletion of your data at any time — see Your rights and choices.

Regardless of where you are located, you have meaningful rights over your personal data. We are committed to honoring those rights.

• Right to access

  You have the right to request a copy of the personal data we hold about you. We will provide this in a commonly used, readable format.

• Right to correction

  If any of the information we hold about you is inaccurate or incomplete, you have the right to request that we correct it.

• Right to deletion

  You have the right to request that we delete your personal data. Upon a valid deletion request, we will remove your data from our active systems within 30 days, subject to any data we are legally required to retain.

• Right to restrict processing

  You have the right to ask us to limit how we use your data in certain circumstances — for example, if you contest its accuracy or object to our use of it.

• Right to data portability

  You have the right to receive your personal data in a structured, machine-readable format and to transfer it to another service.

• Right to object

  You have the right to object to our processing of your personal data where that processing is based on our legitimate interests. You also have the right to opt out of direct marketing communications at any time.

• Right to withdraw consent

  Where we rely on your consent to process data (for example, for marketing emails), you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

How to exercise your rights

To exercise any of these rights, contact us at privacy@rhenyx.com. We will respond to all requests within 30 days. In some cases, we may need to verify your identity before processing a request.

We will not charge a fee for reasonable requests. If a request is manifestly unfounded or excessive, we reserve the right to decline it or charge a reasonable administrative fee.

Rhenyx products are designed for business use and are intended for individuals who are 18 years of age or older. We do not knowingly collect personal data from anyone under 18.

If we become aware that we have inadvertently collected data from a minor, we will take prompt steps to delete it. If you believe a minor has submitted information to us, please contact us at privacy@rhenyx.com.

Our website and platform may contain links to third-party websites, integration partner pages, or external resources. These links are provided for convenience and do not imply endorsement.

Rhenyx is not responsible for the privacy practices or content of any third-party website. When you leave our platform via a link, you are subject to the privacy policy of the destination site.

We may update this Privacy Policy from time to time as our products evolve, our practices change, or legal requirements shift. When we make changes, we will:

• Update the "Last updated" date at the top of this page
• Post the revised policy on this page
• Notify you by email or in-app notification if the changes are material

We encourage you to review this page periodically. Continued use of Rhenyx products after a policy update constitutes your acceptance of the revised terms.

If you have concerns about a change, contact us at privacy@rhenyx.com before continuing to use the platform.

If you have questions, concerns, or requests related to this Privacy Policy or the way we handle your data, you can reach us through the following channels:

We aim to respond to all privacy-related inquiries within 5 business days.

This Privacy Policy applies to all Rhenyx websites, products, and services, including Marketing and Sales CRM. It does not override any data processing agreements (DPAs) entered into with enterprise customers, which govern data processing terms for those specific relationships.

Read this policy alongside our Terms of Service, which govern your use of Rhenyx, and our Security page, which explains how we protect your data.