Privacy Policy

1. Introduction

Noxitel Technologies LLC ("Noxitel", "we", "us", or "our") is committed to protecting the privacy of individuals who interact with our services. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you visit our website, use our CPaaS platform, or communicate with us.

This policy complies with the EU General Data Protection Regulation (GDPR), the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL), India's Digital Personal Data Protection Act 2023 (DPDPA), and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

Noxitel Technologies LLC
DIFC, Gate Avenue, Dubai, UAE
Email: hello@noxitel.com
Data Protection Officer: hello@noxitel.com

For EU/EEA residents, Noxitel's EU representative is available at the same email address.

3. Data We Collect

3.1 Account & Registration Data

When you create an account or contact us, we collect: name, email address, phone number, company name, job title, country, and billing information.

3.2 Usage & Technical Data

We automatically collect: IP address, browser type, device information, pages visited, time spent on pages, API call logs, and message delivery metadata.

3.3 Customer Message Data

When you use our messaging platform, we process message content and recipient data solely to deliver your messages. We do not read, analyse, or retain message content beyond the period required for delivery confirmation.

3.4 Communications

If you contact our support team, we retain records of that communication to provide assistance and improve our services.

4. How We Use Your Data

We use personal data for the following purposes:

• Providing, operating, and improving our CPaaS platform and services
• Processing transactions and managing your account
• Sending service notifications, security alerts, and support messages
• Complying with legal obligations and regulatory requirements
• Detecting and preventing fraud, abuse, and security incidents
• Analysing usage patterns to improve platform performance
• Sending marketing communications where you have given consent

5. Lawful Basis for Processing (GDPR)

For users in the EU/EEA, we rely on the following lawful bases:

• Contract (Art. 6(1)(b)): Processing necessary to provide our services under contract
• Legitimate Interest (Art. 6(1)(f)): Security monitoring, fraud prevention, and service improvement
• Legal Obligation (Art. 6(1)(c)): Compliance with applicable laws and regulations
• Consent (Art. 6(1)(a)): Marketing communications and non-essential cookies

6. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: Cloud infrastructure, payment processors, and analytics tools operating under data processing agreements
• Carrier partners: Telecommunications operators to deliver your messages (message metadata only)
• Legal authorities: Where required by law, court order, or to protect rights and safety
• Business transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to you

7. International Data Transfers

Noxitel operates globally and may transfer personal data to countries outside your jurisdiction. For transfers from the EU/EEA, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Binding Corporate Rules for intra-group transfers

You may request a copy of the transfer mechanisms we use by contacting hello@noxitel.com.

8. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

• Account data: Duration of your account plus 2 years after closure
• Message logs: 90 days for delivery confirmation; immediately purged thereafter
• Billing records: 7 years as required by UAE commercial law
• Support communications: 2 years from last interaction

9. Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal data:

• Right of access: Obtain a copy of the personal data we hold about you
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request deletion of your data ("right to be forgotten")
• Right to restriction: Limit how we process your data in certain circumstances
• Right to portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests or direct marketing
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, email hello@noxitel.com. We will respond within 30 days. You also have the right to lodge a complaint with your supervisory authority.

10. Cookies & Tracking

We use cookies and similar technologies for:

• Essential cookies: Required for the website and platform to function. Cannot be disabled.
• Analytics cookies: Help us understand how visitors use our site (e.g., page views, traffic sources). Disabled unless you consent.
• Marketing cookies: Used to show relevant advertising. Only placed with your consent.

You can manage cookie preferences at any time via our cookie banner or by contacting us. Most browsers also allow you to control cookies through settings.

11. Security

We implement industry-standard technical and organisational measures to protect personal data, including TLS 1.3 encryption in transit, AES-256 encryption at rest, role-based access controls, multi-factor authentication, regular penetration testing, and ISO 27001 certified processes.

Despite these measures, no system is 100% secure. In the event of a data breach, we will notify affected individuals and relevant supervisory authorities within the legally required timeframes.

12. Children's Data

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected such data, we will delete it promptly. Contact us at hello@noxitel.com if you believe a child has provided us personal data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email (if you have an account) or by posting a prominent notice on our website. The "Last updated" date at the top of this page indicates when the policy was last revised. Continued use of our services after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact:

Data Protection Officer
Noxitel Technologies LLC
DIFC, Gate Avenue, Dubai, UAE
Email: hello@noxitel.com
General enquiries: hello@noxitel.com