Privacy Policy

This Privacy Policy explains how KELYXA LTD ("Kelyxa", "we", "us") collects, uses, discloses, and safeguards personal data when you use the Platform. It applies to buyers, contributors, and visitors alike, and to every feature of the Platform, including account registration, the cart and checkout, the points and earnings wallets, listing uploads, and support communications.

This Policy should be read together with our Cookie Policy, which explains in more detail the cookies and similar technologies we use.

Account data: full name, email address, hashed password (we never store your password in plain text), account type (buyer or contributor — kept as separate records even where the same email is used for both), and account status.

Billing and transaction data: billing name, address, city, postal code, country and phone number; order history, purchased items, prices paid, payment method used (card, points, or a mix), points top-up and payout history, and payment status. Full payment card numbers are never transmitted to or stored by us — they are handled directly by our payment processor.

Content data: for contributors, the files, titles, descriptions, tags, category, price, and (for 3D models) gallery preview images submitted for listing, together with moderation history and sales performance.

Technical and usage data: IP address, browser type and version, device identifiers, pages viewed, referring URLs, cart contents, and timestamps, collected automatically to operate, secure, and improve the Platform.

Communications: any correspondence you send us, such as support requests, refund requests, or copyright notices, and any consent you record (for example, agreeing to these policies at registration or sign-in).

Performance of a contract: to create and administer your account(s), process cart and checkout, manage your points or earnings wallet, deliver purchased downloads, and process payouts.

Legitimate interests: to secure the Platform against fraud and abuse, prevent duplicate-purchase and multi-account circumvention, improve our services, and enforce these policies.

Legal obligation: to comply with tax, accounting, consumer-protection, and other applicable regulatory requirements, including retaining transaction records for the periods required by law.

Consent: where required, for optional communications, and for your acceptance of these policies recorded at registration and sign-in; you can withdraw consent for optional communications at any time.

We do not sell personal data to third parties, and we do not use your data for third-party advertising.

We share data with service providers strictly as needed to operate the Platform: our payment processor (to complete card payments, top-ups, and payouts), hosting and infrastructure providers, our outbound email provider (where configured, to deliver order receipts and account notifications), and, where legally required, regulators or law-enforcement authorities.

In the case of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity, subject to equivalent protections and, where required, prior notice to you.

Where personal data is transferred outside your country of residence, we take steps to ensure an adequate level of protection, such as standard contractual clauses or equivalent safeguards recognized under applicable data protection law.

We retain account, billing, and transaction data for as long as your account remains active and for a reasonable period thereafter to comply with legal, tax, and accounting obligations (typically several years after the relevant transaction) and to resolve disputes. Data no longer required for these purposes is deleted or anonymized.

Uploaded content that is rejected during moderation, or removed following a valid copyright notice, is retained for a limited period for audit purposes and then deleted.

Certain fraud-prevention and moderation checks (for example, flagging a suspicious payment or an upload that closely matches previously rejected content) may be assisted by automated rules. These checks do not produce legal or similarly significant effects without the possibility of human review — you can always contact us via the details on our Contact page to request a manual review of a decision affecting your account.

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us via the details on our Contact page or our data protection contact (info@kelyxa.com). We will respond within the timeframe required by applicable law.

We apply technical and organizational measures — including password hashing, access controls, and encrypted transport — designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Platform is not directed at individuals under the age of 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

We may update this Privacy Policy from time to time. Material changes will be highlighted on the Platform. The 'Last updated' date at the top of this page indicates when it was last revised.