Privacy Policy
This Privacy Policy describes how NOXS AI SOLUTIONS, INC. ("NOXS", "we", "us", or "our") collects, uses, discloses, and protects Personal Data in connection with our software, services, and websites. We are committed to transparency about our data practices and ensuring your ability to make informed choices regarding your information.
Introduction and Scope
NOXS AI SOLUTIONS, INC. operates the noxs.ai website and an administrative platform that provides our core service (collectively referred to as the "Services" or "Websites"). Our official product name is Noxs.ai.
As used in this Privacy Policy, "Personal Data" refers to information that can be directly or indirectly associated with a specific person or entity, such as a name, email address, or usage data that identifies an individual.
1. Types of Information We Collect
We collect different types of Personal Data depending on your interaction with our Services:
1.1 Data Collected from End Users of the NOXS Service ("Service Data")
This data concerns individuals, specifically employees of our customers, who use our core NOXS AI software. We collect Service Data to provide, support, and improve the functionality of our AI solution.
Based on our customer's instructions (for our on-premise version where the customer is the Data Controller), or when NOXS is the Data Controller (for our cloud version), we may collect the following:
- Identifiers: Full name, email address, and messenger IDs.
- Usage and Interaction Data: Within the product, we log requests, their time, content, and the responses generated. We have access to messenger correspondence (within project-specific threads where the bot is added), project documentation from Confluence, code from GitLab, and other documents uploaded by the client. We do not specifically isolate or collect other personal data beyond what is inherently present in these interactions and documents.
- Access Data: Information used for authentication, such as names and email addresses. This also includes metadata of a user’s activity on third-party services integrated with our product.
Important Note on Product Versions: NOXS offers two versions of its product:
- Cloud Version: In this version, NOXS acts as the Data Controller for End User data.
- On-Premise Version: When the product is deployed on-premise, the customer is the Data Controller, and NOXS only has regulated access to the data stored by the client.
1.2 Data Collected from Visitors to our Websites ("Website Data")
We may collect:
- Identifying and Contact Data: When you contact us for information or demo requests, we collect details such as your name, email address, and potentially phone number.
- Traffic and Location Data: This includes information about your navigation on our website, such as IP address, device type, geo-location, and pages visited.
- Commercial Information: Data reflecting your interest in our products and services.
- Automatically Collected Data: This includes non-Personal Data like your operating system and browser, and Personal Data such as your IP address, device ID, browsing history, and usage history of our marketing website. This data is primarily collected through cookies and similar technologies.
You are not legally required to provide us with information, but by using our Services, you consent to this collection.
2. How We Use the Information
We use the collected Personal Data for specific purposes, based on appropriate legal bases where applicable.
2.1 Use of Data in Connection with the NOXS Service (Service Data)
We use End User data exclusively for the following purposes:
- Provide the Service: To authenticate users, grant access to the administrative platform, and ensure the intended functionality of our AI software for productivity and performance management.
- Support and Maintain: To offer technical support, resolve issues, and ensure continuous Service improvement.
- Forming User Responses: To process data from messenger conversations, project documentation, code, and other client-uploaded documents to generate tailored responses for user projects.
- Compliance and Security: To meet legal obligations and safeguard the security and integrity of the data, including preventing fraud and unauthorized access.
- Legal Basis: The processing activities for Service Data are primarily based on performing our contractual obligations with our customers. We also have a legitimate interest in improving our service and maintaining security, provided such interests do not override users’ fundamental rights and freedoms.
AI/ML Training Limitations: Please note that NOXS does not use any collected data to develop, improve, or train generalized AI and/or ML models. Specifically, data from Google Workspace APIs is never used for such purposes.
2.2 Use of Data Collected Through Our Websites (Website Data)
We use Website Data for the following purposes:
- Manage Requests: To process inquiries, demo requests, and information requests from potential customers.
- Optimize and Analyze: To monitor website traffic, perform heat mapping, test new features, and optimize the website to improve user experience and marketing strategies. This data helps us understand user needs and tailor our services.
- Marketing and Engagement: To understand how users interact with our website to inform strategic development and growth decisions and to provide relevant information about our products and services.
- Compliance and Security: To protect our website and ensure compliance with applicable laws.
Legal Basis: Our use of Website Data is primarily based on our legitimate interests in analyzing our software practices to make informed decisions regarding development and growth strategy, as well as promoting our business and offerings. Where we send marketing communications, this is based on your consent, and/or our legitimate interest to market our products and services.
3. How We Share Personal Data
NOXS generally does not share personal data with anyone, except possibly with law enforcement agencies upon official request. We are not in the business of selling information about you.
However, we do use external services (LLM) for the cloud version of our product, which involves transferring data, potentially including Personal Data, to these services. These services include OpenAI and Google. While these are not subcontractors in the traditional sense, they are third-party services processing data on our behalf.
We may also share your Personal Data with third parties:
- If we believe in good faith that disclosure is appropriate to protect our or a third party’s rights, property, or safety.
- When required for compliance with any law, regulation, court order, or other law enforcement-related issues.
4. Cookies and Similar Technologies
NOXS uses cookies and related technologies on its websites (noxs.ai and the administrative platform). Cookies are small data files placed on your device to ensure websites function properly, enhance user experience, support secure access, and for analytics, performance monitoring, and to deliver targeted advertising based on your interests across different websites.
5. Data Security
NOXS implements and maintains appropriate technical and organizational security measures to protect Personal Data against unauthorized access, alteration, loss, or disclosure. These measures include access control and data analysis to monitor for suspicious activity.
6. Data Retention
We retain Personal Data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. When a customer deletes data, we also delete it. For Website Data, information from leads and traffic analysis is kept for a reasonable period to manage commercial activities and analytics unless a deletion request is received.
7. Your Rights
Depending on applicable law, you may have certain rights relating to the Personal Data we collect about you.
- Right of Access: You have a right to know what Personal Data we collect about you.
- Right to Correct Personal Data: You may request that we update, complete, correct, or delete inaccurate, incomplete, or outdated Personal Data.
- Right to Deletion ("Right to Be Forgotten"): You may have the right to request that we delete your Personal Data under certain circumstances, such as when it is no longer needed for the purpose it was collected. For Service Users, requests should generally be directed to your employer (the Data Controller in on-premise deployments).
- Right to Object: Where processing is based on our legitimate interest, you may object to such processing.
- Withdrawal of Consent: If our processing of your Personal Data is based on your consent, you may withdraw your consent at any time.
To exercise your rights:
- For Service Users (End Users): Since our customers act as Data Controllers in the Service context (especially for on-premise deployments), End Users should direct any requests to access, correct, or delete their personal data to their employer. NOXS will assist the customer in responding to such requests as instructed in writing.
- For Website Visitors (Potential Customers): You can submit requests directly using the contact details below.
8. International Data Transfers
As we utilize external LLM services like OpenAI and Google for our cloud version, Personal Data may be transferred to and processed on their servers. We will ensure that appropriate safeguards are in place for such transfers.
9. Children
Our Services are not directed to individuals under 16 years of age. We do not knowingly collect Personal Data from children under 16. If you are under 16, do not use or provide any information on our Services. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information. If you become aware that a child has provided us with personal information, please contact us immediately.
10. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We encourage you to periodically review this page for the latest information. Your continued use of the Websites and Service constitutes your agreement to be bound by such changes. If we make material changes, we will notify you by a notice on our Website homepage and/or other communication channels.
11. Contact Us
If you have questions or concerns regarding this policy, please contact us at:
NOXS AI SOLUTIONS, INC.
1470 Civic Ct, Suite 309
Concord, CA 94520
United States
© 2025