Privacy Policy

Noxbyte Labs LLC (“we”, “us”) hand-crafts and hosts websites for restaurants, and provides a client portal where you can manage your site’s menu, hours, specials, domain, and billing. This policy explains what information we collect when you use the Noxbyte portal (the “Service”), how we use it, and the choices you have. If you have questions, contact us at [email protected].

We collect only what we need to run your account and your site:

• Account information. Your name, email address, and password when you create an account. Passwords are stored only as a salted hash by our authentication provider - we never see or store your password in plain text.
• Organization & site content. The business name, and the content you add to your site such as menu items and prices, opening hours, specials, location and contact details, and your logo.
• Billing information. When you subscribe or renew a domain, payments are processed by Stripe. Your full payment card details are entered with and handled by Stripe - we do not collect or store card numbers. We retain only billing records such as invoices and subscription status.
• Support messages. The contents of any support tickets or emails you send us.
• Team invitations. If you invite a teammate, the email address you provide so we can send the invitation.

Restaurants using Noxbyte may collect customer information through online ordering and related features, including customer names, phone numbers, email addresses, delivery addresses, and order details.

This information is processed and stored solely to facilitate restaurant operations, order fulfillment, customer communication, and related business functions. Noxbyte does not use customer order information for advertising purposes and does not sell customer information.

We use the information above to:

• create and secure your account and authenticate you when you sign in;
• publish and maintain your restaurant’s website;
• process subscriptions, domain renewals, and send invoices;
• respond to your support requests; and
• send you essential service communications (for example, billing or security notices).

We do not sell your personal information. We do not share personal information with third parties for their own advertising or marketing purposes.

To operate the Service, we use trusted service providers described below who process information on our behalf. We do not use third-party advertising networks or cross-site tracking technologies within the Noxbyte portal.

We rely on a small number of trusted providers to operate the Service. They process data only on our behalf and only as needed to provide their service:

• Supabase - account authentication and database hosting (stores your account and site content).
• Stripe - payment processing and billing.
• Cloudflare - website hosting, content delivery, and aggregate traffic analytics.

The Analytics screen in the portal displays aggregate website traffic statistics for your restaurant's public website, such as page views and visit counts, using services provided by Cloudflare.

While underlying infrastructure providers may process technical information such as IP addresses and browser data as part of delivering and securing websites, Noxbyte uses analytics only in aggregate form and does not use analytics data to identify individual website visitors.

If an account is suspended or terminated for violation of our Terms of Service, we may retain information as reasonably necessary to:

• Investigate abuse or security incidents
• Enforce our agreements
• Resolve disputes
• Comply with legal obligations or
• Protect Noxbyte, our customers, and third parties.

Any retained information will be kept only for as long as necessary for those purposes.

If Noxbyte is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, customer information may be transferred as part of that transaction, subject to applicable law and appropriate confidentiality protections.

Noxbyte is operated from the United States. Information collected through the Service is processed and stored in the United States and through service providers that assist us in operating the Service.

We keep account information and restaurant content for as long as your account is active. Order records, invoices, billing information, and other business records may be retained for longer periods where necessary for operational, accounting, tax, legal, or dispute-resolution purposes.

We protect your data with encryption in transit (HTTPS), hashed passwords, and access controls that limit who can reach your information. No method of transmission or storage is ever completely secure, but we work to protect your data and to keep our providers held to the same standard.

You can access and update most of your account and site information directly in the portal. You may also request a copy of your personal data, ask us to correct it, or ask us to delete it by emailing [email protected].

You can request deletion of your account and associated personal data at any time by emailing [email protected] from the email address on your account. We will delete your account data within 30 days, subject to the legal retention noted above.

The Service is intended for business owners and is not directed to children under 13. We do not knowingly collect personal information from children.

We may update this policy from time to time. When we do, we will revise the “Last updated” date above, and for significant changes we will provide a more prominent notice.

Questions about this policy or your data? Email [email protected].