Privacy Policy

Welcome to Nox AI ("Nox AI", "we", "our" or "us"), operated at https://noxaiapp.com. We are committed to protecting your privacy and being transparent about how we handle your personal information.

This Privacy Policy explains what data we collect, how we use it, who we share it with, and the choices you have. By using Nox AI you agree to the practices described in this policy. If you do not agree, please stop using the service.

Account information: When you register, we collect your email address and a securely hashed version of your password. We never store your password in plain text.

Usage data: We record the AI generations you create (prompts, output URLs, model used, credits spent), brand kits, campaigns, story projects, and actions taken within the app.

Billing information: Payments are processed by Stripe. We store only a Stripe customer ID and subscription status — your card details are never stored on our servers.

Communications: If you contact us via the contact form or email, we retain that correspondence.

Technical data: Our servers automatically log your IP address, browser type, operating system, referring URLs and pages visited. This data is used for security, debugging and aggregate analytics.

Cookies: We use cookies and similar technologies as described in Section 5 below.

• To provide and operate the Nox AI service (authentication, generation, storage, billing).
• To communicate with you about your account, transactions and support requests.
• To send transactional emails (password resets, payment receipts) — never marketing without consent.
• To improve, personalise and develop the product using aggregate and anonymised analytics.
• To detect, investigate and prevent fraud, abuse and security incidents.
• To comply with legal obligations and enforce our Terms of Service.
• To display relevant advertising through Google AdSense (see Section 6).

If you are in the European Economic Area (EEA) or United Kingdom, we process your data under the following legal bases:

• Contract: processing necessary to deliver the services you have signed up for.
• Legitimate interests: security, fraud prevention, and product improvement (where not overridden by your rights).
• Consent: advertising cookies and personalised ads — you may withdraw consent at any time via the cookie settings.
• Legal obligation: where required by applicable law.

We use the following categories of cookies:

You can manage your cookie preferences at any time using the cookie banner at the bottom of this page, or by clearing cookies in your browser settings. Note that declining advertising cookies will disable personalised ads but the site will continue to function fully.

Nox AI displays advertisements served by Google AdSense (operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Our AdSense publisher ID is ca-pub-4799888136807977.

Google AdSense uses cookies — including the DoubleClick cookie — to serve ads based on your prior visits to our site and other sites across the web. These cookies allow Google and its partners to serve ads based on your visit to Nox AI and/or other sites on the Internet.

How to opt out of personalised advertising:

• Visit Google Ads Settings to manage or opt out of personalised ads from Google.
• Visit aboutads.info to opt out from other participating advertising companies.
• Decline advertising cookies using our cookie consent banner when you first visit the site, or reset your preference via our cookie settings (available in the footer).

For more information on how Google uses data from sites that use its services, visit policies.google.com/technologies/partner-sites.

We do not sell your personal data. We share data only with the following categories of service providers, strictly as needed to operate Nox AI:

• AI generation providers (FAL.ai, ElevenLabs, Anthropic): prompts and generation parameters are sent to these services to produce your content.
• Payments (Stripe): handles all billing. Stripe's privacy policy applies to payment data.
• Email (Resend): sends transactional emails on our behalf.
• Advertising (Google AdSense): serves ads on public pages of Nox AI (see Section 6).
• Infrastructure: cloud hosting providers that store data under appropriate data processing agreements.

We may also disclose information when required by law, court order, or to protect the rights, property or safety of Nox AI, our users, or others.

We retain account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where retention is required by law (e.g. billing records kept for 7 years for tax purposes). AI-generated content stored on our servers is associated with your account and is deleted when your account is deleted.

Nox AI operates from servers in the United States. If you access the service from outside the US, your information may be transferred to and processed in the US. Where required (e.g. for EEA users), we rely on Standard Contractual Clauses or other approved transfer mechanisms.

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request that inaccurate data be corrected.
• Deletion: request deletion of your account and associated data ("right to be forgotten").
• Restriction: request that we limit processing of your data in certain circumstances.
• Portability: receive your data in a portable, machine-readable format.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: withdraw consent for advertising cookies at any time without affecting the lawfulness of previous processing.

To exercise any of these rights, email us at support@noxaiapp.com. We will respond within 30 days.

Nox AI is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected data from a child, please contact us immediately at support@noxaiapp.com and we will delete it promptly.

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure or destruction. These include encryption at rest and in transit (TLS), httpOnly session cookies, rate limiting, brute-force protection, and access controls. However, no method of transmission over the internet is 100% secure.

We may update this Privacy Policy from time to time. If we make material changes we will notify you by email (if you have an account) or by posting a prominent notice on the site. Your continued use of Nox AI after the effective date constitutes acceptance of the updated policy. We recommend reviewing this page periodically.

If you have questions, concerns or requests relating to this Privacy Policy, please contact us: