VILAX Privacy Policy
Effective 22 September 2026, updated 19 October 2026
This policy explains how VILAX processes data on the website me.vilax.ai, in the VILAX and VILAX Team mobile apps for iPhone and iPad, and when VILAX is connected to ChatGPT and Codex through OAuth and the Model Context Protocol (MCP). Personal data is processed in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).
Data controller: VILAX L.L.C-FZ, Meydan Free Zone, business license No. 2654484.01, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates.
If your company works with VILAX in another country, your account is served on the VILAX website of that country and is governed by the privacy policy published there.
What data we use
After you sign in, we process your account identifier and contact details, the projects and locations you have been granted, and the metrics you request. Which financial and operational data you can see is defined by your VILAX permissions and checked on every request.
For security and diagnostics we keep limited technical events: user and OAuth client identifiers, the name of the tool called, time, duration, result and trace ID. Access tokens, passwords and full financial responses are not written to routine technical logs.
Purposes and sharing
Data is used to sign you in, run your requests, enforce access rights, prevent abuse, provide support and improve reliability. When you use VILAX from ChatGPT or Codex, the answer to your request is passed to the connected OpenAI client so that the model you chose can respond. Infrastructure providers process data only to the extent needed to run VILAX. We do not sell personal data.
VILAX mobile apps
The apps show the same VILAX as the website and additionally process:
- Sign in with Apple: a private Apple identifier and, if you allow it, your name and email;
- a push-notification token for your device, only if you allow notifications;
- voice, only when you tap the microphone button to ask the AI Coordinator a question: the recording is sent to our transcription provider (Groq), and VILAX does not store it;
- camera photos, only when you choose to take a photo and attach it;
- Face ID sign-in: biometrics stay on your device, VILAX stores only the public part of your sign-in key.
Questions to the AI Coordinator, together with the metrics needed to answer them, are processed by our AI provider (Anthropic). The apps use no advertising identifiers and do not track you across other companies' apps or websites. You can delete your account in the app: Settings → Account → Delete account. Deletion is completed after a 30-day grace period, during which you can cancel the request.
Your control
You can revoke access in your VILAX or OpenAI connection settings. An administrator can change project and location permissions; a new restriction applies from the next request. To access, correct or delete your data, write to support@vilax.ai. Under the PDPL you may also request restriction or portability of your data, object to processing and withdraw consent. Deletion requests are handled subject to mandatory record-keeping and security requirements.
Retention and security
Data is kept as long as needed to provide the service, meet contractual and legal obligations, resolve disputes and protect the system. We use access control by role, encrypted connections, audit trails and server-side OAuth and permission checks. Some providers may process data outside the UAE under appropriate safeguards.
Children
VILAX is a business tool and is not directed to children under 16.
Contact
Privacy questions: support@vilax.ai. VILAX L.L.C-FZ, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates.