Privacy Policy

Effective Date: April 1, 2026

1. Introduction

Caerus Enterprises Inc. ("Layrix", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose information when you use the Layrix platform, including the LLLL compliance analysis skill, LLLL Guard CLI, Human Expert Review service, Layrix Academy, and the website at layrix.ai (collectively, the "Service").

We operate under the Personal Information Protection and Electronic Documents Act (PIPEDA) and the British Columbia Personal Information Protection Act (BC PIPA). This policy reflects our obligations under both statutes.

2. Information We Collect

2.1 Registration Information

When you register for a Layrix account, we collect your email address. This is the only personal information required for registration. We do not collect names, phone numbers, or physical addresses during the registration process.

2.2 Local Compliance Data

LLLL operates locally within your Claude Code environment. Compliance analysis — including security scanning, license checks, data-flow mapping, and regulatory alignment — is performed entirely on your local machine. No compliance data, source code, analysis results, or project files are transmitted to Layrix servers. LLLL Guard likewise runs locally and does not transmit scan results externally.

2.3 Browser Local Storage

The Layrix website stores a theme preference (layrix-theme) in your browser's localStorage to persist your light/dark mode selection. This data is stored locally in your browser and is not transmitted to our servers. No personal information is stored in localStorage.

2.4 Human Expert Review Service

If you submit a request for Human Expert Review, the content of your review request — which may include project descriptions, compliance questions, and related materials you choose to share — is transmitted to and accessible by the Layrix review team. We treat all review request materials as confidential and use them solely for the purpose of delivering the requested review service.

2.5 Layrix Academy

If you use Layrix Academy, we collect standard learning platform data including course enrollment, progress tracking, and completion status. This data is associated with your registered email address.

3. How We Use Information

We use the information we collect for the following purposes:

Account management: to create and maintain your account, authenticate access, and manage your registration.
Service delivery: to provide the features you have requested, including full findings visibility for registered users and Human Expert Review services.
Communication: to send service-related notifications, respond to support requests, and provide updates about material changes to the Service or these policies.
Improvement: to analyze aggregate, anonymized usage patterns to improve the Service. We do not use individual compliance analysis data for this purpose, as it never leaves your machine.

We do not sell, rent, or trade your personal information to third parties. We do not use your information for advertising purposes.

4. Data Storage

Registration data (email addresses and account metadata) is stored in Cloudflare D1, a serverless SQL database. Data is encrypted at rest and in transit.

Compliance analysis data generated by LLLL and Guard never leaves your local machine. Layrix does not store, process, or have access to your compliance scan results, source code, or project files.

5. Third-Party Services

We use the following third-party service providers to operate the Service:

Cloudflare: website hosting, DNS, CDN, and database services (Cloudflare D1). Cloudflare's privacy policy is available at cloudflare.com/privacypolicy.
Resend: transactional email delivery for account-related communications. Resend's privacy policy is available at resend.com/legal/privacy-policy.
Stripe: payment processing for future paid services. Stripe's privacy policy is available at stripe.com/privacy. Layrix does not store credit card numbers or payment credentials; all payment data is handled directly by Stripe.

We select third-party providers that maintain appropriate privacy and security standards. We share only the minimum information necessary for each provider to perform its function.

6. Your Rights under PIPEDA and BC PIPA

Under Canadian federal and British Columbia provincial privacy legislation, you have the following rights:

Access: You may request access to the personal information we hold about you. We will respond to access requests within 30 days.
Correction: You may request correction of any personal information that is inaccurate or incomplete.
Deletion: You may request deletion of your personal information. Upon request, we will delete your account and associated data, subject to any legal retention obligations.
Withdrawal of consent: You may withdraw your consent to the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions.
Complaint: If you believe your privacy rights have been violated, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca or the Office of the Information and Privacy Commissioner for British Columbia (OIPC) at oipc.bc.ca.

To exercise any of these rights, contact us at info@layrix.ai.

7. Children's Privacy

The Service is not directed at individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at info@layrix.ai.

8. Data Retention

We retain your account data (email address and account metadata) for as long as your account remains active. If you request account deletion, we will delete your personal information within 30 days, except where retention is required by law.

Human Expert Review engagement materials are retained for the duration of the engagement plus 12 months for quality assurance and dispute resolution purposes, after which they are securely deleted.

Layrix Academy progress data is retained while your account is active and deleted upon account deletion.

9. Security

We implement appropriate technical and organizational measures to protect your personal information, including:

Encryption in transit using TLS (Transport Layer Security) for all communications with our servers.
Encryption at rest for stored data in Cloudflare D1.
Access controls limiting access to personal information to authorized personnel who require it for service delivery.
Regular review of our security practices and third-party provider security posture.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users or by posting a prominent notice on the website. The "Effective Date" at the top of this page indicates when the policy was last revised. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Caerus Enterprises Inc.
1045 Howe St, Vancouver, BC V6Z 2A9, Canada
Email: info@layrix.ai