Privacy Policy

Last updated: 15 September 2026

Who we are

Oblyx is operated by Oblyx Developments Ltd. Oblyx Hub is a simple business operating system for small service businesses, currently offered through guided pilot and trial workspaces.

Information we collect

• Information you submit through the local service enquiry or Hub trial form, such as your name, business name, contact details and notes about what you need help with.
• Basic website analytics information, such as pages visited, device/browser information and public marketing events.
• Workspace information created during guided pilot use, such as customer records, follow-ups, quotes, invoices and product/service records that you or your team enter.
• Technical and security information needed to operate protected Hub dashboard access.
• For Oblyx Voice, assigned-user and business-number details, device and push identifiers, call details, shared business call history, and service and security events needed to provide and protect calling.

How we use information

• To review and respond to local IT service enquiries and Hub pilot or trial requests.
• To prepare, operate and support guided Oblyx Hub workspaces.
• To understand public site usage and improve the service.
• To protect the dashboard, API routes and customer workspaces.
• To keep records needed for support, operations and legal compliance.
• To activate authorised Oblyx Voice devices, route and connect calls, alert assigned phones, show shared business call history and administer the agreed calling service.

Analytics

Optional public-site analytics uses Google Tag Manager and Google Analytics 4 only after you accept analytics cookies. Analytics is denied by default. Events are designed not to include names, email addresses, phone numbers, business names, customer names or free-text form content.

Enquiry form protection

Our enquiry forms use Cloudflare Turnstile to help reduce automated spam. Cloudflare processes technical signals, including IP address, browser information and the site visited, to perform security checks and improve its bot detection. This check operates independently of optional analytics consent. See Cloudflare’s Turnstile privacy notice for details.

Oblyx Voice

Oblyx Voice (OV) is an internet-based business calling service supplied to businesses under an agreed service schedule. The business decides who may use its OV service and which business numbers, users and devices are assigned to it.

Information used for calling

To activate, provide and protect OV, we may handle the business account, assigned user's name, business phone number and internal user or licence identifiers; device and app identifiers, push-notification tokens, activation status and security credentials; caller and destination phone numbers, optional caller names, call direction, timestamps, duration, answer and end outcomes, and technical delivery identifiers.

Call details can appear in the authorised business's shared in-app history and may be seen by other assigned users of that business. We also use service, security and fault information needed to prevent misuse, maintain availability and investigate problems, together with information a person chooses to include in an email or authenticated support request.

OV uses live audio to carry a call. The initial release does not record calls, create transcripts or use call audio for AI answering. App voicemail and connected-call transfer are unavailable in this release.

Roles and lawful bases

For calling information that a business supplies and controls, Oblyx normally acts as that business's processor and uses the information to provide the service under its instructions. The business remains responsible for its own use of staff, customer and caller information and for giving any privacy information it is required to provide.

Oblyx acts as controller where it determines why information is needed for its own account administration, service security, support, compliance and legal obligations. Depending on the activity, we rely on performance of a contract with the individual, compliance with a legal obligation, or the legitimate interests of Oblyx, the customer business and its users in providing, receiving, protecting and supporting the agreed business calling service.

Voice service providers and transfers

Apple carries VoIP push notifications to iPhones. Cloudflare hosts the Control API, security and call-coordination records. OVHcloud hosts the live and standby voice systems in London and Gravelines. Telnyx provides the public telephone network connection for external calls. An eligible Oblyx-to-Oblyx call may remain on the Oblyx network and have no Telnyx carrier leg.

The live OVH systems are in the United Kingdom and France. UK-to-France replication is covered by the UK's adequacy regulations for the EEA. Cloudflare's present Control path is a global service and Telnyx's public documentation states that its primary processing facilities are in the United States. Where personal information is transferred outside the United Kingdom, we use the applicable contractual and other safeguards agreed with the provider, which may include the UK Addendum to the EU Standard Contractual Clauses and relevant adequacy arrangements.

Voice retention

• Shared in-app call history is limited to 90 days and 100 entries.
• Expired mobile push endpoints are deleted when the credential expires.
• Terminal activation and device-credential detail is deleted after 30 days; relevant security and route audit evidence is deleted after 365 days.
• Ordinary London and Gravelines host journals have a 30-day maximum. London's scheduled production backup rotation is within 30 days.
• Support records have a target of 12 months after the support case is closed. We currently apply this through a documented review; Microsoft 365 and My Oblyx do not yet enforce an automatic closure-triggered deletion rule.

Limited records may be kept longer where needed for an active dispute, security incident, legal hold or legal obligation. The reason and review must be documented. The initial release has no voicemail storage; any later voicemail service will have separate published retention terms before it is enabled.

External callers

People can call or receive a call from an OV business without installing the app. Their phone number, optional caller name and the call details described above may be processed and shown to authorised users of that business. The business using OV should give its staff, customers and callers appropriate privacy information about its use of communications records.

Voice support and emergency calls

For an OV support or privacy request, email support@oblyx.co.uk. Do not send passwords, activation codes, payment details or unnecessary sensitive information.

OV depends on power, internet access, a supported device and upstream services. It is not a 24-hour emergency service and must not be used to call 999 or 112.

Sharing information

We do not sell personal information. We may use trusted service providers for hosting, security, analytics and operational support. These providers should only use information as needed to provide their services to Oblyx.

Retention

We keep information only for as long as it is reasonably needed for the purposes above. Trial request and pilot records may be retained while we assess, prepare and support a workspace, and for a reasonable period afterwards for operations and evidence.

Your rights

You may ask us to access, correct or delete your personal information, or to restrict or object to certain uses where applicable. Data portability may apply in some circumstances. These rights depend on the context and any legal or operational reasons we need to keep limited records. An OV request may need to be handled with the customer business where that business is the controller. You may also complain to the UK Information Commissioner's Office.

Contact

For privacy questions, contact Oblyx at support@oblyx.co.uk.