Privacy Policy

1. Our Roles

For information about our own visitors and account holders (for example, your account and billing details), Naxora is the data controller. For the customer content and end-customer data you process through the Service to run your business (for example, your callers’ and contacts’ messages), you are the controller and Naxora acts as your data processor, handling that data on your instructions. Where required, a Data Processing Addendum (DPA) is available on request at privacy@naxora.ai.

2. Information We Collect

• Account data: name, email, business details, and authentication information you provide when you register.
• Billing data: subscription plan and payment information, processed by our payment provider (we do not store full card numbers).
• Customer content: the knowledge bases, configurations, agent settings, and conversations you and your end-customers create through the Service.
• Usage & device data: log data, feature usage, message and call metadata, IP address, and diagnostics used to operate and secure the Service.

3. How We Use Information

We use information to provide, maintain, secure, and improve the Service; to process transactions and manage your account; to provide support; to send service-related and, where permitted, product communications; to monitor for abuse, fraud, and security incidents; and to comply with legal obligations. Under the GDPR, we rely on the lawful bases of contract performance, legitimate interests (such as securing and improving the Service), consent (where required, such as for certain cookies or marketing), and legal obligation.

4. AI Processing

To generate agent responses and actions, relevant content is sent to AI model providers (see subprocessors below). We do not sell your data, and we do not use the content of your customer conversations to train third-party foundation models. When you bring your own model API key (BYOK), requests are sent to the provider you configure under that provider’s terms. AI output may be imprecise; see our Terms of Service for the AI-output disclaimer.

5. Subprocessors

We use vetted third-party providers to run the Service. Each processes data only as needed to perform its function:

This list may change as the Service evolves. We will update this page and, where required, provide advance notice of new subprocessors.

6. How We Share Information

We share information with the subprocessors above, with your connected integrations at your direction, and when required by law or to protect rights, safety, and the integrity of the Service. If we are involved in a merger, acquisition, or asset sale, information may be transferred subject to this Policy. We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising.

7. Cookies & Analytics

We use strictly necessary cookies to run the Service and may use limited analytics to understand usage and improve performance. Where required by law, we request consent for non-essential cookies. You can control cookies through your browser settings.

8. Data Retention & Deletion

We retain information for as long as your account is active and as needed to provide the Service, then for a limited period to meet legal, accounting, security, and dispute-resolution needs. You can delete content within the Service and may request deletion of your account and associated data by contacting privacy@naxora.ai; we will delete or de-identify it within a reasonable period, subject to legal retention requirements and backups that expire on a rolling basis.

9. Security

We use industry-standard measures to protect information, including encryption in transit (TLS), encryption at rest, per-tenant isolation of customer environments, access controls, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will notify you as required by law.

10. International Transfers

We and our subprocessors may process information in the United States and other countries. Where we transfer personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the Standard Contractual Clauses.

11. Your Rights

Depending on where you live, you may have rights to access, correct, delete, port, or restrict processing of your personal information, to object to certain processing, and to withdraw consent. California residents (CCPA/CPRA): you have rights to know, delete, correct, and to limit certain uses, and the right not to be discriminated against for exercising them — and we do not sell or share your personal information as those terms are defined. To exercise any right, email privacy@naxora.ai; we will verify and respond as required by law. If Naxora processes data as your processor, we will direct end-customer requests to you as the controller.

12. Children

The Service is for businesses and is not directed to children under 16. We do not knowingly collect personal information from children.

13. Changes to This Policy

We may update this Policy from time to time. Material changes will be notified (for example, by email or in-product) before they take effect, and the “Last updated” date above will change.

14. Contact

Privacy questions or requests? Email privacy@naxora.ai (or support@naxora.ai). This Policy is provided by Naxora LLC.