1. INTRODUCTION
At NOX Agency, a US Limited Liability Company registered in Wyoming, United States ("NOX Agency," "Company," "we," "us," or "our"), your privacy is important to us, and we are committed to being transparent about how we collect, use, and disclose information about you.
This Privacy Policy describes what personal information and sensitive personal information we collect, how we use it, how we disclose it, and how long we retain it when you use the following services (collectively, the "Services"):
Our website at https://nox-agency.com/ and any related sites (the "Website");
Our mobile application;
Our AI-enabled personal assistant and concierge services;
Our email communications and newsletters; and
Anywhere we gather information from or about you and refer you to this Privacy Policy.
By using our Services, you agree to the practices described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use the Services.
NOX Agency is a United States company subject to the laws of the United States. If you choose to use the Services, your personal information will be transferred to and processed in the United States and other jurisdictions where our service providers operate.
2. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by:
Posting the updated Privacy Policy on our Website with a new "Last Updated" date;
Sending notice to the email address associated with your account; or
Providing notice through the Services.
Your continued use of the Services after notice constitutes your acceptance of the updated Privacy Policy.
3. CHILDREN'S PRIVACY
Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18 without verification of parental consent, we will delete that information promptly. If you believe we have collected information from someone under 18, please contact us at [email protected].
4. INFORMATION WE COLLECT ABOUT YOU
We collect information in three ways:
Directly from you: Name, email, phone, billing address, payment details (processed via Stripe), membership tier, preferences, and identity verification data (ID/Passport copies) when required for bookings.
Automatically: IP address, device identifiers, browser type, usage patterns, and general geographic location.
Generated Data: Inferences about your preferences and travel patterns to improve recommendations.
5. COOKIES AND TRACKING
We use cookies, web beacons, and similar technologies to:
Authenticate users and prevent fraud.
Remember your preferences.
Analyze service performance via tools like Google Analytics, Mixpanel, and Hotjar.
Manage email delivery via platforms like Resend or Flodesk.
You can control cookies through your browser settings, though disabling them may affect service functionality.
6. HOW WE USE YOUR INFORMATION
We use your information for:
Service Delivery: Facilitating reservations and providing concierge assistance.
Account Management: Authenticating users and maintaining profiles.
Payment Processing: Handling transactions and preventing fraud.
Communications: Sending transactional updates and (if opted-in) marketing materials.
Legal Compliance: Meeting regulatory requirements and responding to legal processes.
AI Improvement: Training our assistant features (processed according to AI usage policies).
7. DISCLOSURE OF YOUR INFORMATION
We disclose your information to:
Venues and Partners: Restaurants, hotels, and clubs to facilitate your bookings.
Service Providers: Third parties handling payment (Stripe), hosting (AWS, Hetzner), analytics (Google Analytics), and AI processing (Google Gemini).
Legal Authorities: When required by law or to protect our rights and safety.
Business Transfers: In the event of a merger, sale, or acquisition.
Note: We do NOT sell your personal information to third parties.
8. INTERNATIONAL DATA TRANSFERS
NOX Agency is headquartered in Wyoming, USA. Your data may be processed in the US, Germany, Finland, or other jurisdictions where our providers operate. For EEA/UK users, we utilize Standard Contractual Clauses (SCCs) to ensure an adequate level of data protection.
9. DATA RETENTION
Active Accounts: Retained for the duration of your relationship with us.
Inactive Accounts: Data is typically deleted after 2 years of inactivity.
Financial Data: Retained for 7 years for tax and accounting compliance.
Identity Documents: Deleted immediately after verification/booking confirmation (typically 24–48 hours).
Marketing Data: Retained until you opt-out.
10. DATA SECURITY
We implement industry-standard security measures, including:
Encryption: SSL/TLS for data in transit; encryption for data at rest.
Payment Security: We do not store complete payment card details; all transactions are handled by Stripe (PCI-DSS compliant).
Access Controls: Restricted access to sensitive data for employees and contractors.
11. YOUR PRIVACY RIGHTS
Regardless of location, you may:
Access & Portability: Request a copy of your data.
Correction: Update inaccurate information.
Deletion: Request the "right to be forgotten."
Opt-Out: Unsubscribe from marketing at any time.
To exercise these rights, email [email protected].
12. EEA AND UK RESIDENTS
NOX Agency is the data controller. If you are in the EEA or UK, you have the right to object to processing, restrict processing, and lodge a complaint with your local Data Protection Authority (e.g., the ICO in the UK).
13. CALIFORNIA RESIDENTS
Under the CCPA/CPRA, California residents have the right to know what information is collected, the right to delete, and the right to opt-out of the "sharing" of information for behavioral advertising (though we do not currently engage in such sharing). To make a request, email [email protected] with the subject line "California Privacy Request."
14. CONTACT US
If you have questions or requests regarding this Privacy Policy, please contact us:
NOX Agency
30 N Gould St, STE R
Sheridan, WY 82801
United States
Email: [email protected]
BY USING OUR SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND AGREE TO ITS TERMS.