Legal

Privacy Policy

Last updated: July 13, 2026

The short version: we collect what we need to run your service, we use trusted processors to do it, we don't run ad trackers, and we never sell your data.

1. What we collect

• Contact & inquiry data — name, email, phone, and message contents when you submit a form, email us, text us, or call.
• Account & onboarding data — the business information you provide when you subscribe (brand details, services, service areas, content, and anything you add to your Brand Vault).
• Billing data — handled by Stripe. We receive your name, email, plan, and payment status; we never see or store your full card number.
• Service data — requests you submit through the client portal, deliverables, messages with our team, and platform events needed to operate your subscription.
• Assistant conversations — if you use a site assistant (chat) we operate, messages are processed to generate answers and may be reviewed to improve answer quality. Don't put passwords or card numbers in chat.
• Technical logs — our hosting provider records standard server logs (IP address, request time, user agent) for security and reliability.

2. What we don't do

• No advertising trackers or third-party marketing cookies on noahxdigital.com. The client portal stores a session key in your browser's local storage — that's it.
• We do not sell, rent, or trade personal information. Ever.
• We don't use your private business data to serve other clients.

3. How we use information

To deliver and improve the services you asked for: building and operating your website, responding to inquiries, processing payments, sending service communications (confirmations, reports, and updates about your subscription), securing the platform, and meeting legal obligations. AI features use your provided business information to generate content and answers for your own business, subject to our human-approval workflow.

4. Who processes data for us

We use a small set of processors, each bound by their own privacy commitments: Stripe (payments), Netlify (hosting, forms, and functions), Google Workspace (email), and Anthropic (AI processing for assistant and generation features, when enabled). We share only what each needs to perform its function, plus disclosures required by law.

5. Retention

We keep account and service data while your subscription is active and for up to 90 days after cancellation (so you can export or resume), then delete or anonymize it except where the law requires longer (e.g., billing records). Inquiry emails and form submissions are kept as long as needed to handle your request.

6. Your rights

You can request a copy of your data, correction, export, or deletion at any time by emailing hello@noahxdigital.com. We respond within 30 days. If you're in a jurisdiction with specific privacy rights (such as the EU/UK GDPR or a US state privacy law), those rights apply to you and this is the address to exercise them.

7. Security

All traffic is encrypted (HTTPS). Access to client data is limited to what's needed to serve you, credentials are stored as managed secrets (never in code), and our platform carries security headers and monitoring. No system is perfectly secure; if a breach affects your data, we will notify you promptly.

8. Children

Our services are for businesses and are not directed to children under 13. We don't knowingly collect children's personal information.

9. Changes & contact

If this policy changes materially, we'll post the update here with a new date above. Questions: hello@noahxdigital.com · (817) 438-3403 · NoahX Digital, Texas, USA.