OMYNIX

Privacy policy

Last updated: 4 October 2026 · Questions: support@omynix.com

Who we are

Omynix is a hosted server-monitoring service in an invite-only free beta for professionals. The beta is free of charge; during the beta Omynix does not accept payments, donations or sponsorship. The portal, dashboard and hub are operated by Omynix. The Omynix agent and Shield will be published under MIT when the public repository is available; until then you install builds provided by Omynix on your own servers. For your account data and waitlist signup, Omynix is the controller. For the data your servers send to the Omynix platform through the agent, you are the controller and Omynix processes it on your behalf under the Data Processing Agreement. This policy will be reviewed and revised before any paid service or other form of compensation is introduced.

Controller: Kaylen Stroeken (natural person), Belgium · support@omynix.com

Waitlist and early access

When you join the Omynix waitlist, we process:

  • Email address: to send a confirmation link (double opt-in), manage your place on the waitlist, and send a beta invitation if one is issued.
  • Server count bracket: how many Linux servers you roughly operate (1-2, 3-5, 6-15, or 16+), used to judge technical fit.
  • Current tools: free-text notes on tools you use or pay for now (up to 500 characters), used to understand requirements.
  • Language preference: the language used for waitlist emails (currently English).
  • Consent and timestamps: when you consented and when you confirmed the email, as proof of opt-in.

Purpose and legal basis: waitlist management and beta invitations only. Legal basis is consent (GDPR Article 6(1)(a)). We do not sell waitlist data or use it for unrelated marketing. There are no third-party trackers on the waitlist form.

Retention: up to 18 months after your last waitlist contact, or until you unsubscribe or ask for deletion. Signups that stay unconfirmed are removed after 30 days. After you accept an invite and create an account, the account rules below apply.

Your rights: you may access, correct, export or delete this data. Withdraw consent with the unsubscribe link in every waitlist email, with "Leave the waitlist" on your waitlist page, or by mailing support@omynix.com. Every waitlist email includes a List-Unsubscribe header.

What we process

  • Account data: e-mail address and credentials for portal and hub sign-in, used for authentication, security notifications and account recovery.
  • Server telemetry: metrics and metadata (hostname, OS, resource usage) reported by the agents you enroll, stored on your tenant hub operated by Omynix.
  • Shield consensus: when Shield is enabled, attacker source IP addresses and attack classifications observed on your servers are sent to your own hub, which can then block those attackers on all your servers. They are not shared with other customers: sending them to a shared Omynix blocklist is a separate hub setting that is off by default and is not switched on for hubs hosted by Omynix. Source IPs are personal data under the GDPR; the legitimate interest is network defence. Only attacker IPs are shared, never your servers' addresses or content. These attacker IPs are obtained from customer server telemetry, not from the persons themselves; individual notice is impossible in practice (GDPR art. 14(5)(b)) and objections can be sent to support@omynix.com.
  • Technical logs: IP address, user-agent and timestamps in access and security logs, retained for abuse prevention and debugging.

Website audience measurement

We count visits and page views on the public marketing site so we can see interest before and during outreach. This uses only our own server access logs. No third-party analytics, advertising pixels, or tracking cookies are used for this purpose (see Cookies).

  • Data: path, timestamp, truncated or hashed network address, user-agent, and referrer host. Raw visitor IP addresses are not kept for measurement. Aggregate statistics may be built from these logs on our own systems.
  • Legal basis: legitimate interests (GDPR art. 6(1)(f)): running a public information site and measuring reach without advertising profiling.
  • Retention: detailed measurement logs are kept for a short window (about 14 to 30 days), then rotated away. Aggregate weekly counts may be kept longer without identifying individuals.

If we later add a first-party analytics script on our own infrastructure, it will stay cookieless, avoid storing raw IP addresses, and this section will be updated before it goes live.

Retention

Account data is kept while the account exists. Waitlist retention is described under Waitlist and early access. Telemetry retention is configurable in the hub. Shield consensus entries expire automatically when reports stop. Security and access logs are rotated on a bounded schedule.

When your account ends, your hosted tenant data remains available for export for 30 days and is then permanently deleted, including the tenant data volume. Local encrypted backup copies rotate out within approximately 7 days. Off-site backups are not currently used. No tenant data remains after the export window plus that local rotation.

Sharing

We do not sell personal data. Besides the Shield consensus sharing described above, data is only processed by the EU providers needed to run the service:

  • Hetzner Online GmbH (Germany and Finland): hosting and storage for the production host (off-site backup storage not currently used).
  • BIT B.V. / Theory7 (the Netherlands): transactional email for mail.omynix.com (sender support@omynix.com).

All processing stays within the EU; there are no transfers to third countries.

Your rights

You may request access, correction, export or deletion of your personal data, and object to processing. Self-service export and deletion are available in the portal; otherwise mail support@omynix.com. You may also lodge a complaint with the Belgian Data Protection Authority (GBA/APD).

Cookies

The marketing site sets no tracking cookies for audience measurement. The portal and hub use a session cookie for sign-in. After you confirm a waitlist signup, the portal may set an httpOnly cookie that lasts up to 30 days so you can view your waitlist status; it is not used for advertising.

Security and incidents

To report a security incident or a personal data breach, contact support@omynix.com. We notify the Belgian Data Protection Authority within 72 hours where required and inform affected users by email from support@omynix.com. See Terms of service.