Skip to content
Legal

Privacy Policy

Last updated · 13 June 2026

This Privacy Policy explains how NOXA (“NOXA,” “we,” “us,” or “our”) collects, uses, shares, and protects your personal data when you visit noxaworld.in (the “Site”), sign up for early access, or use our products and services (together, the “Services”). We are committed to handling your data responsibly and in accordance with India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the Information Technology Act, 2000 and the rules made under it.

By using the Services, you agree to the practices described here. If you do not agree, please do not use the Services.

1. Who we are

NOXA is the intelligence layer for modern work — agentic workflows for business, a proactive copilot for everyday life, and one production-grade API for developers. For the purposes of the DPDP Act, NOXAis the “Data Fiduciary” that determines how and why your personal data is processed. You can reach us at noxaworld.support@gmail.com.

2. Information we collect

We collect only the data we need to run the Services. This falls into three buckets.

2.1 Information you give us

  • Account & sign-in. We use Google Sign-In (via Firebase Authentication) for accounts. When you sign in, we receive your name, email address, profile photo, and a Google account identifier. We do not see or store your Google password.
  • Profile. If you edit your profile, we store the display name and profile photo you choose.
  • Early access (“Founding 100”). When you claim a founding spot, we create an account from your sign-in details and count you toward the limited cohort.
  • Contact form. When you contact us, we collect your name, work email, optional company name, and your message.
  • Newsletter. If you subscribe, we store your email address to send product and developer updates. You can unsubscribe at any time.

2.2 Information we collect automatically

  • Session cookies. We set a secure, essential session cookie to keep you signed in. This is required for the Services to work and is not used for advertising.
  • Device & log data. Like most websites, our servers and infrastructure providers automatically record technical data such as IP address, browser type, device information, pages viewed, and timestamps, for security and reliability.

2.3 Information processed in our products

Our products — such as NOXA Tasks and E-BillR — may process the content and data you put into them. That product data is handled under the terms and notices presented within each product. We do not use your private content to train shared models.

3. How we use your data

We use personal data to:

  • create and secure your account and keep you signed in;
  • provide, operate, and improve the Services;
  • manage the early-access programme and tell you when your access is ready;
  • respond to your messages and support requests;
  • send updates you have asked for, such as the newsletter;
  • detect, prevent, and address fraud, abuse, and security issues; and
  • comply with our legal obligations.

4. Our legal basis (consent)

Under the DPDP Act, we process your personal data on the basis of the consent you give when you sign in, submit a form, or otherwise choose to use the Services, and for certain “legitimate uses” permitted by law (such as security and complying with legal requirements). Where we rely on consent, you may withdraw it at any time — see Your rights below.

5. How we share your data

We do not sell your personal data. We share it only with:

  • Service providers (Data Processors). We use Google Firebase and Google Cloud for authentication, hosting, and storage. They process data on our instructions under their own security and privacy commitments.
  • Legal & safety. Where required by law, or to protect the rights, safety, and property of NOXA, our users, or the public.
  • Business transfers. If NOXA is involved in a merger, acquisition, or sale of assets, data may transfer as part of that transaction, subject to this Policy.

6. International transfers

Our infrastructure providers may store and process data on servers located outside India. Where this happens, we take steps to ensure your data continues to be protected consistently with this Policy and applicable law.

7. Data retention

We keep personal data only for as long as needed to provide the Services, to comply with our legal obligations, resolve disputes, and enforce our agreements. When data is no longer required, we delete or anonymise it. You can ask us to delete your account at any time.

8. Security

Data is encrypted in transit and at rest, accounts are isolated, and access is restricted on a need-to-know basis. No method of transmission or storage is perfectly secure, but we work to protect your data using reasonable technical and organisational safeguards.

9. Your rights

Subject to the DPDP Act, you have the right to:

  • access a summary of the personal data we hold about you;
  • request correction or completion of inaccurate data;
  • request erasure of your personal data;
  • withdraw your consent at any time;
  • nominate another individual to exercise your rights in the event of death or incapacity; and
  • raise a grievance with us about how we handle your data.

To exercise any of these rights, email us at noxaworld.support@gmail.com. We will respond within the timelines required by law.

10. Grievance redressal

If you have a complaint about how we process your personal data, you can contact our grievance contact at noxaworld.support@gmail.com. We will acknowledge and work to resolve your grievance in line with the DPDP Act. If you are not satisfied, you may have the right to complain to the Data Protection Board of India.

11. Children

The Services are not directed to children. We do not knowingly collect personal data from anyone under 18 without verifiable consent from a parent or lawful guardian. If you believe a child has provided us data, contact us and we will delete it.

12. Third-party links

The Site may link to third-party websites and products. We are not responsible for their privacy practices. Please review their policies before sharing data with them.

13. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you. Your continued use of the Services after a change means you accept the updated Policy.

14. Contact us

Questions about this Policy or your data? Email noxaworld.support@gmail.com or use our contact page.