Privacy Policy

Noxbyte (“we”, “us”) hand-crafts and hosts websites for restaurants, and provides a client portal where you can manage your site’s menu, hours, specials, domain, and billing. This policy explains what information we collect when you use the Noxbyte portal (the “Service”), how we use it, and the choices you have. If you have questions, contact us at [email protected].

We collect only what we need to run your account and your site:

• Account information. Your name, email address, and password when you create an account. Passwords are stored only as a salted hash by our authentication provider — we never see or store your password in plain text.
• Organization & site content. The business name, and the content you add to your site such as menu items and prices, opening hours, specials, location and contact details, and your logo.
• Billing information. When you subscribe or renew a domain, payments are processed by Stripe. Your full payment card details are entered with and handled by Stripe — we do not collect or store card numbers. We retain only billing records such as invoices and subscription status.
• Support messages. The contents of any support tickets or emails you send us.
• Team invitations. If you invite a teammate, the email address you provide so we can send the invitation.

We use the information above to:

• create and secure your account and authenticate you when you sign in;
• publish and maintain your restaurant’s website;
• process subscriptions, domain renewals, and send invoices;
• respond to your support requests; and
• send you essential service communications (for example, billing or security notices).

We do not sell your personal information, and we do not share it with third parties for their own advertising or marketing. We do not use third-party advertising or cross-site tracking in the portal.

We rely on a small number of trusted providers to operate the Service. They process data only on our behalf and only as needed to provide their service:

• Supabase — account authentication and database hosting (stores your account and site content).
• Stripe — payment processing and billing.
• Cloudflare — website hosting, content delivery, and aggregate traffic analytics.

The Analytics screen in the portal shows aggregate, anonymized traffic statistics for your restaurant’s public website (such as page views and visit counts), provided by Cloudflare. These figures are not tied to identified individuals.

We keep your information for as long as your account is active. If you close your account or ask us to delete it, we delete your account data within 30 days, except where we are required to retain certain records (such as billing and tax records) for longer by law.

We protect your data with encryption in transit (HTTPS), hashed passwords, and access controls that limit who can reach your information. No method of transmission or storage is ever completely secure, but we work to protect your data and to keep our providers held to the same standard.

You can access and update most of your account and site information directly in the portal. You may also request a copy of your personal data, ask us to correct it, or ask us to delete it by emailing [email protected].

You can request deletion of your account and associated personal data at any time by emailing [email protected] from the email address on your account. We will delete your account data within 30 days, subject to the legal retention noted above.

The Service is intended for business owners and is not directed to children under 13. We do not knowingly collect personal information from children.

We may update this policy from time to time. When we do, we will revise the “Last updated” date above, and for significant changes we will provide a more prominent notice.

Questions about this policy or your data? Email [email protected].