Start free

Privacy policy

Last updated: 10-04-2026 · Calgar Tech LLC (Maryland, USA), operating Eolix at eolix.app

Eolix validates software inventories: you upload (or connect) a list of installed software, and we return lifecycle, version, and vulnerability evidence about it. This page says what we store to do that, what we never do with it, and how to get data removed.

What we collect

• Account data — your name, work email, and a salted password hash (we cannot read your password). Organization name and team member roles.
• Customer content — the software inventories you upload or pull through a connector: product names, versions, publishers, install counts, and the program/environment labels you assign. Plus the scan results, overrides, watchlists, and policies built on them.
• Billing data — handled by our payment processor (Stripe). Card numbers never touch Eolix servers; we store only the subscription state and the processor's customer reference.
• Technical logs — sign-ins, administrative actions, and API calls are recorded in your organization's own audit trail (visible to your admins), plus short-lived operational logs for abuse prevention.

What we never do

• No advertising trackers and no third-party analytics cookies — on this site or inside the product. These public pages ship zero JavaScript.
• We never sell or rent your data, and we never use one customer's inventory to market to another.
• Your inventory is never published. The only cross-customer data Eolix maintains is PUBLIC software lifecycle facts (versions, dates, advisories) — never who runs what.

How validation uses your rows

To research a product's lifecycle, Eolix sends the product name and version string alone to its research providers (public lifecycle datasets, package registries, and AI research services). No device names, usernames, install counts, organization identifiers, or file contents accompany those lookups.

Connector credentials

Intune and Jamf Pro credentials you save are encrypted at rest, write-only (never displayed back, not even to you), locked to the host you saved, and removable in Settings at any time. When connector access was included with a One-Time Audit, the stored credentials are deleted automatically once the audit's re-run window closes.

Subprocessors

We use a small set of service providers, by category: cloud hosting and storage (United States), payment processing, AI research providers (receiving product name + version only, as above), and transactional email delivery. Each processes data only to provide its service to us.

Security

TLS in transit; secrets and credentials encrypted at rest; organization data isolated per tenant and every query scoped to your organization; optional multi-factor authentication; signed webhooks; rate limiting; and a per-organization audit trail of administrative actions.

Retention and deletion

Scans and inventories stay until you delete them or your organization account closes. Demo sessions expire after one hour. To remove your account and its data, email [email protected] from your account address — we confirm, then delete within 30 days (residual copies in encrypted backups age out on backup rotation).

Your choices

Export your data anytime (CSV and Excel exports are built in). Update account details in Settings. Ask us anything about this policy — or object to a practice — at [email protected].

Scope notes

Eolix is a business tool and not directed at children under 16. When this policy changes, the date above moves and material changes are flagged to account admins in-app.