Privacy Policy
What Noxael collects, why, and the choices you have.
Draft — not yet in effect
Draft under review. This page describes how Noxael is being built. It will be finalised, with full operator details and legal review, before Noxael opens to the public.
Who we are
Noxael (“Noxael”, “we”) is the controller of the personal data described in this policy.
- Operator
- To be added before launch
- Address
- To be added before launch
- Contact
- To be added before launch
- Company number
- To be added before launch
Data we collect
- Account data: name, email address and sign-in provider identifier.
- Workspace settings: workspace name, timezone, preferences you choose.
- Connected platform data: the account ID, handle, granted permissions and access tokens you authorise through TikTok, Instagram or YouTube, plus the post and analytics data those platforms return. Tokens are encrypted and never sent to your browser.
- Content: ideas, scripts, prompts, captions and media you create or upload, and AI outputs generated for you.
- Usage and technical data: product events (without the content of your prompts or media), device and browser information, IP address and error logs.
- Support messages you send us.
How we use it
- To provide the service you ask for — creating, storing, scheduling and publishing content, and showing analytics (performance of a contract).
- To keep Noxael secure, prevent abuse and fix errors (legitimate interest).
- To improve the product using aggregated, non-content usage data (legitimate interest).
- To send service emails such as security alerts or failed publications. Marketing emails only with your consent.
- To meet legal obligations.
Service providers
We use service providers to host and run Noxael — for example hosting, database, file storage, workflow automation, AI generation (such as OpenAI and Viggle), email and error monitoring. They process data only on our instructions.
The full list of sub-processors, their purpose and location will be published here before launch.
Social platforms
When you connect an account, Noxael accesses only the data needed for the permissions you grant, and uses it only to provide Noxael features to you. You can disconnect at any time in Noxael or revoke access from the platform’s own settings.
Your use of each platform remains subject to its own terms and privacy policy.
How long we keep data
- Account and workspace data: while your account is active.
- Deleted content: kept in Trash for 30 days, then permanently removed.
- Platform tokens: until you disconnect the account or delete your Noxael account.
- Technical logs: for a limited period needed for security and debugging.
Your rights
You can access, correct, export or delete your personal data, restrict or object to certain processing, and withdraw consent at any time. You can also lodge a complaint with your data protection authority — in Belgium, the Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données).
Deleting your account removes your content and revokes platform connections, except data we must keep by law.
Changes
We’ll update the effective date when this policy changes and tell you in advance about material changes.