Effective and last updated: October 7, 2026
Privacy Policy
This Privacy Policy explains how Nora X Tech handles information through this public website, including demo and integration inquiries, checkout links, and the “Ask Nora” website guide. It does not govern customer calls handled by a deployed Nora phone service; those practices must be documented for each business and jurisdiction before launch.
1. Scope
This policy applies to information processed through noraxtech.com and its website pages, forms, and support guide. It does not apply to independent third-party websites or a customer business’s deployed phone service. If you call a business using Nora, that business may have its own privacy notice and may be responsible for explaining how calls, appointments, recordings, or transcripts are handled.
2. Information we collect
Information you provide
When the inquiry connection is configured, a demo form may collect your full name, restaurant name, work email, phone number, city or state, preferred demo time, and optional message. An integration inquiry may also collect number of locations, current booking platform, and estimated call volume.
If you contact us by email or telephone, we receive the information you provide and the contents of the communication. Do not send guest records, payment-card information, passwords, government identifiers, health information, or other sensitive information through a form, email, or website guide.
Information collected automatically
Website hosting and security systems may process limited technical information needed to deliver and protect the website, such as IP address, request time, page requested, browser or device type, referring page, errors, and security signals. The website uses Vercel Web Analytics for aggregate traffic information, such as page views, referrers, browser/device categories and country-level traffic. It is not an advertising tracker. If enabled on a supported plan, fixed-name conversion events can record demo-link clicks, accepted demo requests, checkout-link clicks and example selections without form contents or chat messages.
Information from service providers
If checkout is enabled, a payment provider may send limited transaction and subscription information, such as customer name and contact details, selected plan, payment status, amount, date, and provider identifiers. We do not need the full card number or card security code to operate this website.
3. How we use information
We may use website information to:
- respond to demo, sales, support, and integration inquiries;
- evaluate whether a requested phone or booking workflow is feasible;
- arrange onboarding and provide requested services;
- process and administer subscriptions when checkout is enabled;
- secure, diagnose, maintain, and improve the website;
- prevent spam, fraud, abuse, and unauthorized access;
- maintain business records and enforce agreements; and
- comply with legal obligations and protect rights, safety, and property.
We do not use a demo inquiry as permission for unrelated marketing. If we later offer marketing messages, we will provide legally required notices and choices.
4. Reasons for processing
Where required, we process information to respond to your request or take steps toward a contract, perform a contract, pursue legitimate interests such as operating and securing the website and communicating with prospective customers, act with consent, and comply with legal obligations. You may withdraw consent for future processing where consent is the basis, without affecting earlier processing.
5. How information is disclosed
We may disclose information only as reasonably necessary to:
- hosting, infrastructure, security, email, workflow, customer-support, telephone, and other vendors that help operate the website or respond to inquiries;
- payment providers when you choose checkout;
- professional advisers such as lawyers, accountants, insurers, and auditors;
- authorities or other parties when required by law or reasonably necessary to protect rights, safety, and security;
- a buyer, investor, lender, or successor in a proposed or completed business transaction, subject to appropriate safeguards; or
- another party when you direct us or provide valid consent.
Nora X Tech does not currently state that it sells personal information or shares it for cross-context behavioral advertising. The current website does not include third-party targeted-advertising trackers. If those practices change, this policy and any required controls must be updated first.
6. Payment processing
When an approved-customer checkout link opens Stripe, payment information is entered on Stripe’s service and handled under Stripe’s privacy notice and terms. Nora X Tech may receive limited information needed to identify the customer, confirm payment, administer the subscription, prevent fraud, and keep financial records. Do not place card information in a Nora X Tech inquiry form, email, or chat.
7. Website forms and lead delivery
The browser sends configured inquiry forms only to the website’s server-side endpoint. It validates the request and, when securely configured, forwards it to the private lead-handling workflow. The website shows success only after a matching confirmation. If unavailable, the form reports that delivery is unavailable.
The form uses a honeypot, signed time-limited session, request-size limits, same-origin checks, validation, an idempotency key, and a temporary rate limit. A hashed network identifier may be held briefly in server memory for abuse prevention. The website does not save unfinished form drafts in browser storage.
8. “Ask Nora” AI support
Ask Nora is a Nora-only automated support assistant that uses curated company answers stored in the website. It is not connected to a third-party generative-AI provider. Messages remain in temporary page memory and reset when the page reloads or you navigate away. The assistant does not send a message to the team, create a lead, take payment, or make a reservation.
If an external AI provider or persisted chat history is introduced, this policy must be updated before launch to identify information sent, the provider, purposes, retention, and choices. Do not enter sensitive information in the assistant.
10. Retention
We retain inquiry and business records only as long as reasonably needed to respond, evaluate a service, administer a customer relationship, meet accounting or legal obligations, resolve disputes, and protect the website. Temporary form-security data expires automatically; the current website-guide conversation is not persisted.
Before public launch, Nora X Tech should document specific periods for leads, customer records, payment records, support communications, and security logs. Call recordings, transcripts, reservations, and guest data for a deployed phone service require a separate restaurant-specific retention policy.
11. Security
We use administrative, technical, and organizational safeguards intended to protect information, including server-side credentials, validation, request limits, access controls, and service-provider review. No internet system is completely secure, so we cannot guarantee absolute security. Contact us promptly if you believe information may have been compromised.
12. Your choices and privacy rights
Depending on where you live and which laws apply, you may have rights to request access, correction, deletion, or a portable copy; object to or restrict processing; withdraw consent; or appeal a decision. You may also have the right not to receive discriminatory treatment for exercising a privacy right.
Email norax.global@gmail.com with “Privacy Request” in the subject and describe your request and relationship with Nora X Tech. We may verify your identity and authority. Authorized agents may need proof of authorization. We will respond as required by applicable law.
Nora X Tech does not currently state that it sells personal information or shares it for cross-context behavioral advertising. If you believe another practice applies, contact us.
13. Children
This business website and its services are not directed to children under 13, and we do not knowingly collect their personal information through the website. Contact us if you believe a child submitted information so we can review and delete it where appropriate.
14. International visitors
Nora X Tech is presented to businesses internationally. Availability of phone numbers, languages, integrations and deployed services varies by country and must be confirmed before activation. Website information may be processed in the United States or other places where providers operate. Where legally required, appropriate transfer safeguards should be used.
15. Third-party links and services
This website may link to payment providers, email services, booking platforms, or other sites. Their practices are governed by their policies. Review those policies before providing information. References to planned integrations do not mean those providers receive inquiry data or that an integration is active.
16. Policy changes and contact
We may update this policy when website practices, providers, or legal requirements change. The effective date identifies the current version. Material changes should be communicated as required by law.
Privacy questions or requests: norax.global@gmail.com.
The public website does not currently list Nora X Tech’s registered legal-entity name, business address, or dedicated privacy representative. Add these details before public launch once confirmed.