Last updated: 15 October 2026
This policy explains what personal data BlueAgency d.o.o. (Xolius) (“Zoliax”, “we”), Hilme Krke 90, 71320 Donja Vogošća, Bosnia and Herzegovina, handles when you use zoliax.com, and what your rights are. Questions: [email protected].
1. Two roles
Your account and our website. For your sign-in details, your subscription and visits to this website, we decide how the data is used (we are the controller).
Your workspace. For what you and your team put into a workspace, such as projects, clients, invoices and payroll, your company decides; we only process it on its behalf to run the service (we are the processor), and we never use it for anything else.
2. What we collect
- Account: name, email address, password (stored only as a secure hash), two-step login settings, language.
- Billing: plan, billing country, invoices. Card and payment details go to Paddle, never to us.
- Use and security: sign-in times, IP address, device and browser, an audit log of important actions in your workspace, and error logs.
- Messages you send us, such as support requests.
3. Why we use it
- To run your account and workspace (our agreement with you).
- To bill your subscription and keep records the law requires (legal obligation).
- To keep Zoliax secure, prevent abuse and fix problems (legitimate interest).
- To send you emails about your account and the service. Product news only if you ask for it, and you can stop it any time.
4. Who else handles data
- Paddle.com, our reseller and Merchant of Record, for checkout, payments, tax and invoices.
- Our hosting provider, for the servers that run Zoliax and its backups.
- Services you choose to connect, such as Google, Microsoft 365 or Slack, only when you connect them and only for what you turn on.
- AI providers (Anthropic or OpenAI) only when you use the AI Assistant, and only for the request you make.
We do not sell personal data, and we do not use it for advertising.
5. How long we keep it
Account and workspace data: while your account exists; after you delete it, copies in backups are removed as the backups rotate. Invoices and billing records: as long as tax law requires. Security logs: only as long as needed to keep the service secure.
6. Security
Each customer has a separate database. Connections are encrypted, personal files in Payroll are stored encrypted, roles decide who sees what, and two-step login is available for everyone.
7. Your rights
You can ask to see, correct, export or delete your personal data, object to its use or ask us to limit it, and complain to a data protection authority. If your data is in a workspace, ask that workspace’s owner first; we help them answer. Write to [email protected].
8. Cookies
We use only the cookies needed to sign you in, keep you signed in and remember your settings such as language and theme. We do not use advertising cookies.
9. Changes
If we change this policy in a way that matters, we tell you by email or in the app.