Privacy Policy

1. Who We Are

UnikFlux is operated by UnikFlux Technologies Unipessoal Lda, a company registered in Portugal. We provide a suite of free web applications and premium business modules accessible at unikflux.com.

We are the data controller for personal data collected through this website and its services. Our lead supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD), Portugal.

2. What Personal Data We Collect

We collect only the data necessary to provide our services. The categories of data we process are:

Account information — when you register for a UnikFlux account we collect your name, email address, and the name of your company or organisation. This information is provided by you directly.

Contact form submissions — if you contact us through our website we collect your name, email address, and the content of your message.

Technical and security data — our servers automatically record your IP address with each request. We use this to enforce rate limits, detect abuse, and maintain security. Standard server access logs (request path, HTTP status code, timestamp) are also retained for operational purposes.

Authentication events — we log successful and failed login attempts, including the IP address and timestamp, to protect accounts against unauthorised access.

3. Why We Collect It — Lawful Bases

We process personal data only where we have a valid lawful basis under EU GDPR Article 6:

• Performance of a contract (Art. 6(1)(b)): Account data (name, email, company) is necessary to create and operate your UnikFlux account and to deliver the services you have requested.
• Legitimate interests (Art. 6(1)(f)): IP address logging, rate limiting, server logs, and authentication event logging are carried out to protect the security and integrity of our platform. These interests are not overridden by your fundamental rights, as the data involved is limited and retained only briefly.
• Consent (Art. 6(1)(a)): Where we place non-essential cookies or browser storage, we rely on your prior consent. See our Cookie Policy for details.

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

4. How Long We Keep Your Data

• Account data: Retained for as long as your account is active. If you request deletion or your account is closed, we will erase your personal data within a reasonable period, except where we are required by law to retain it.
• Server access logs: Retained for up to 12 months for security and operational purposes, then deleted.
• Authentication events: Retained for 90 days and then automatically purged.
• Contact form messages: Retained for as long as necessary to respond to your enquiry and for a reasonable follow-up period, then deleted.

5. Who We Share Your Data With

We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

• Email service provider: We use a transactional email provider to send account-related emails (e.g. password resets, notifications). They process your email address solely to deliver these messages on our behalf and are bound by a data processing agreement.
• Hosting provider: Our servers are operated by a hosting provider in Germany (EU). They provide infrastructure only and do not access your data except as required for maintenance.
• Cloudflare Turnstile: The contact form uses Cloudflare Turnstile for spam protection. Cloudflare may process your IP address and browser signals to distinguish human visitors from bots. See Cloudflare's Privacy Policy.
• Legal obligations: We may disclose data where required by applicable law, court order, or to protect the rights, safety, or property of UnikFlux, our users, or the public.

6. International Transfers

All of our servers are located in Germany, within the European Union. We do not transfer your personal data to countries outside the European Economic Area (EEA).

Where our service providers (such as our email provider or Cloudflare) may process data, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses or an adequacy decision recognised by the European Commission.

7. Your Rights Under GDPR

If you are based in the European Economic Area (EEA), the United Kingdom, or another jurisdiction with equivalent data protection rights, you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may ask us to correct inaccurate or incomplete data.
• Right to erasure: You may ask us to delete your personal data where it is no longer necessary, where you withdraw consent, or where processing is unlawful.
• Right to restrict processing: You may ask us to limit how we use your data in certain circumstances.
• Right to data portability: Where processing is based on your consent or a contract and carried out by automated means, you may request your data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds.
• Right to withdraw consent: Where we rely on consent as the lawful basis, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. Our lead authority is the CNPD (Portugal) — see cnpd.pt. You may also contact the authority in your country of residence.

To exercise any of these rights, please contact us via our contact form. We will respond within one month as required by GDPR.

8. Cookies

We use a minimal set of cookies. We do not use advertising cookies or behavioural tracking. For full details of every cookie and browser storage entry we set — including your choices and how to manage them — please read our Cookie Policy.

9. Children

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected data from a child under 16, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we do, we will update the date at the top of this page. For material changes, we will notify registered users via email or by displaying a prominent notice on the website.

Your continued use of UnikFlux after a change is posted constitutes your acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or about how we handle your personal data, please contact us via our contact form. We aim to respond within five business days.