Privacy Policy
Last updated: February 2026
Introduction
NoxSoft Inc. ("Nox," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI operations platform and related services.
Information We Collect
Account Information
When you create an account, we collect your name and passkey credentials. Email is optional and only collected when associated with an organization. We use WebAuthn/passkey authentication—we never store passwords.
Organizational Data
When you connect integrations, we access data from your connected tools (Slack, GitHub, etc.) solely to provide Nox's operational services. This data is processed in real-time and stored securely with encryption at rest.
Usage Data
We collect information about how you interact with Nox, including conversation logs, feature usage patterns, and performance metrics. This data helps us improve the service and is never sold to third parties.
Voice Data
If you use Nox's voice interface, calls are transcribed and stored for service delivery and compliance purposes. Transcriptions are encrypted and accessible only to authorized members of your organization.
How We Use Your Information
- To provide and maintain the Nox platform
- To process your requests and execute operational tasks
- To improve our AI models and service quality
- To send service-related communications
- To detect and prevent fraud or abuse
- To comply with legal obligations
Data Sharing
We do not sell your personal information. We share data only in these cases:
- Service providers: Cloud infrastructure (AWS/GCP), AI model providers (Anthropic), and essential service partners
- Nexus Network: If enabled, anonymized organizational capabilities are shared with the Digital Davos network. No personal or identifying data is shared without explicit consent
- Legal requirements: When required by law, subpoena, or court order
Data Security
We implement industry-standard security measures including:
- AES-256 encryption at rest
- TLS 1.3 encryption in transit
- Enterprise security controls
- Regular security audits and penetration testing
- Role-based access controls
- Comprehensive audit logging
Data Retention
We retain your data for as long as your account is active or as needed to provide services. You can request data deletion at any time. Upon account deletion, we remove personal data within 30 days, except where retention is required by law.
Your Rights
Depending on your jurisdiction, you may have the right to:
- Access, correct, or delete your personal data
- Port your data to another service
- Opt out of data processing for marketing
- Restrict certain data processing activities
- Withdraw consent for data processing
International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses where applicable.
Children's Privacy
Nox is not intended for use by children under 16. We do not knowingly collect personal information from children under 16.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification at least 30 days before they take effect.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at privacy@noxsoft.net.