This Privacy Policy explains how NOXDEAL LLC ("NOXDEAL", "we", "us") collects, uses, stores and discloses information when you use the NOXDEAL platform at noxdeal.com and its connected applications (the "Service").
NOXDEAL is a business-to-business platform. For information about our own customers and website visitors we act as a controller. For the sales, contact and conversation data our customers process inside the platform about their own prospects, we act as a processor on their instructions. Where we act as a processor, the customer's own privacy notice governs, and requests from individuals should be directed to that customer. We will forward any such request we receive.
01Information we collect
Account and billing information
Name, business email address, company name, role, telephone number and subscription details. Payment card data is handled by our payment providers and never reaches our servers.
Data you bring into the platform
Contact records, deal and pipeline data, notes, appointments and any files you upload. This is your data and you control it.
Connected account data
When you connect a calendar, meeting or messaging account, we receive data from that provider as described in the sections below.
Conversation data
Audio recordings and written transcripts of sales calls, together with the analysis we generate from them. See section 4.
Technical data
IP address, browser type, device information, pages viewed and timestamps. We use this for security, fraud prevention and to keep the Service running. Our website loads typefaces from Google Fonts, which means your IP address is transmitted to Google when the page loads.
02Google user data
This section describes specifically what we do with data obtained through Google APIs. It applies in addition to the rest of this policy.
Scopes we request
| Scope | Why we need it |
|---|---|
calendar.events |
To read your existing appointments so the platform can show real availability, to create and update sales appointments you or your prospects book, to attach video conferencing links to those appointments, and to cancel or reassign them when a team member becomes unavailable. |
We request the narrowest scope that allows the Service to function. We do not request access to Gmail, Google Drive or Google Contacts.
What we store
We store event identifiers, start and end times, attendee email addresses, titles, descriptions and conferencing links for appointments relevant to your sales activity. We store OAuth access and refresh tokens in encrypted form so the connection continues to work.
NOXDEAL's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Limited use commitments
Data obtained through Google APIs is used only to provide and improve the user-facing features described above. Specifically, we do not:
- sell, rent or licence Google user data to anyone;
- use Google user data for advertising of any kind, including retargeting, personalised advertising or interest-based advertising;
- use Google user data to train, retrain or fine-tune generalised artificial intelligence or machine learning models;
- transfer Google user data to third parties except as strictly necessary to provide the Service, to comply with applicable law, or as part of a merger or acquisition in which the acquirer honours this policy.
Human access to Google user data occurs only where you have given specific consent to view particular records, where it is necessary for security purposes or to investigate abuse, where it is required by law, or where the data has been aggregated and anonymised so that it can no longer be linked to an individual.
Revoking access and deletion
You can disconnect your Google account at any time from within NOXDEAL under Settings, or from your Google account permissions page. When you revoke access we delete the stored OAuth tokens immediately and delete cached calendar data within 30 days. To request deletion of all Google-derived data held about you, email privacy@noxdeal.com. We complete such requests within 30 days.
03Other integrations
| Integration | Data involved |
|---|---|
| Microsoft 365 / Outlook Calendar | Calendar events and availability, used exactly as described for Google above and subject to the same limited-use commitments. |
| Zoom | Meeting creation, meeting metadata, and where you enable it, recordings and transcripts of sales calls. |
| WhatsApp Business Platform | Phone numbers and message content for appointment reminders and follow-ups sent to recipients who have opted in. |
| Payment platforms | Transaction status and amounts, so that deal records can show whether payment was received. We do not process payments ourselves and do not receive card data. |
04Call recordings and transcripts
Where enabled, the Service records sales calls, produces written transcripts and generates analysis from them. We store both the audio recording and the transcript.
Recording laws vary. Several US states, including California, Florida, Illinois, Pennsylvania and Washington, require the consent of every participant. Many other jurisdictions impose comparable or stricter requirements. The NOXDEAL customer who initiates a recording is solely responsible for obtaining and documenting the consent of all participants before recording begins. The platform provides a consent step for this purpose; disabling or circumventing it does not shift responsibility to us. See section 6 of our Terms of Service.
Participants may request access to or deletion of a recording of their own conversation. Because we act as a processor for this data, please direct such requests to the company that recorded the call. If you contact us instead, we will forward the request and tell you who to contact.
05AI processing
Transcripts are analysed by large language models to produce call summaries, quality scoring, objection detection and coaching recommendations. Every statement the analysis makes is linked back to the passage of the transcript it is drawn from.
For this processing we transmit transcript content to Anthropic PBC in the United States as a subprocessor. Under our agreement with Anthropic, this content is not used to train their models. We do not use customer conversation data to train our own models, and we do not use it to build features for other customers.
06How we use information
- To provide, operate and maintain the Service.
- To schedule, modify and manage appointments across connected calendars.
- To generate call analysis, coaching insights and performance metrics.
- To send service messages, security alerts and appointment reminders.
- To process subscriptions and billing.
- To detect, investigate and prevent fraud, abuse and security incidents.
- To comply with legal obligations and enforce our terms.
- To improve the Service using aggregated data that cannot be traced back to an individual or a customer.
We do not sell personal information, and we do not use it for advertising.
07How we share information
We disclose information only in these situations:
- Subprocessors that host, transmit or process data on our behalf under written agreement (section 8).
- Within your organisation, according to the roles and permissions your administrator configures.
- Legal requirements, where disclosure is required by applicable law, regulation, legal process or enforceable governmental request.
- Protection of rights, where necessary to investigate fraud, enforce our terms or protect the safety of any person.
- Business transfer, in connection with a merger, acquisition or sale of assets, where the recipient is bound by commitments no less protective than these.
08Subprocessors
| Provider | Purpose | Location |
|---|---|---|
| Contabo GmbH | Application hosting | Germany |
| Hetzner Online GmbH | Backup storage | Germany |
| Anthropic PBC | Transcript analysis | United States |
| Fathom Video Inc. | Call recording and transcription | United States |
| Twilio Inc. | Messaging delivery | United States |
| Brevo SAS | Transactional email | European Union |
| Google LLC | Calendar and meeting integration | United States |
| Microsoft Corporation | Calendar integration | United States |
| Zoom Communications Inc. | Meetings and recordings | United States |
We keep this list current. Customers may request advance notice of changes by writing to privacy@noxdeal.com.
09Data retention
| Category | Retention |
|---|---|
| Audio recordings and transcripts | 12 months from the date of the call, then permanently deleted |
| Call analysis and derived metrics | 12 months, then reduced to aggregated figures that identify no individual |
| Google and Microsoft calendar data | For as long as the integration is connected; deleted within 30 days of disconnection |
| OAuth tokens | Deleted immediately on revocation or disconnection |
| CRM and pipeline data | For the duration of the subscription, then deleted within 90 days of termination |
| Account and billing records | As required by applicable tax and accounting law |
| Security and access logs | 12 months |
Customers may configure shorter retention periods for recordings and transcripts in their account settings. Backups are rotated and fully expire within 35 days.
10Security
- Encryption in transit using TLS 1.2 or higher.
- Encryption at rest for recordings, transcripts and OAuth tokens.
- Role-based access control, with access to production data limited to named personnel who require it.
- Logical separation of customer data at the server level, so that one customer's data is never accessible from another customer's account.
- Segregated production environment with logged administrative access.
- Encrypted, geographically separated backups with point-in-time recovery.
- Written agreements with every subprocessor.
No system is perfectly secure. If a breach affects your data, we will notify affected customers without undue delay and in any case within the period required by applicable law.
11International transfers
NOXDEAL LLC is established in the United States. Our application servers and backups are located in Germany. Some subprocessors process data in the United States. Where personal data of individuals in the European Economic Area or the United Kingdom is transferred, we rely on Standard Contractual Clauses or another lawful transfer mechanism, and where available on the EU-US Data Privacy Framework.
12Your rights
Depending on where you are located, you may have the right to:
- request access to the personal information we hold about you;
- request correction of inaccurate information;
- request deletion of your information;
- request a portable copy of information you provided;
- object to or restrict certain processing;
- withdraw consent where processing is based on consent.
To exercise these rights, email privacy@noxdeal.com. We respond within 30 days and will not discriminate against you for exercising them. Where we act as a processor rather than controller, we will refer you to the responsible customer.
13California privacy rights
If you are a California resident, the California Consumer Privacy Act as amended by the CPRA gives you the rights described in section 12, together with the right to know what categories of personal information we collect, the sources, the purposes and the categories of recipients.
We do not sell personal information and we do not share it for cross-context behavioural advertising, as those terms are defined under the CCPA. We have not done so in the preceding twelve months. You may nonetheless submit a request confirming this by writing to privacy@noxdeal.com.
You may designate an authorised agent to make a request on your behalf. We will ask for proof of authorisation.
14Children
The Service is a business tool and is not directed at anyone under 18. We do not knowingly collect information from children. If you believe a child has provided us with information, contact privacy@noxdeal.com and we will delete it.
15Changes
We may update this policy from time to time. The effective date at the top of the page shows when it last changed. If a change materially affects how we handle your information, we will notify account administrators by email at least 30 days in advance.
16Contact
NOXDEAL LLC
75 E 3rd St, Sheridan, WY 82801, United States
Privacy: privacy@noxdeal.com
Support: support@noxdeal.com
Telephone: +971 54 246 7184