Privacy Policy

NOXA is an early-stage automotive social platform operated by S. Karaketidis in Greece. For the purposes of the General Data Protection Regulation, NOXA is the data controller for the personal data described in this policy.

Privacy requests can be sent to support@noxastreetapp.com.

When you join the early-access waitlist, we collect:

• your email address;
• your city, when you choose to provide it;
• your consent and the date and time it was given;
• your selected language;
• campaign parameters, referrer information and the page source, when available.

For security and abuse prevention, the website also temporarily processes technical information such as IP address, user-agent, request timing and form-submission signals. This information is used for rate limiting and fraud prevention and is not written into the NOXA waitlist table.

We use waitlist data to:

• register and manage your early-access request;
• notify the NOXA team when a new early-access request is received;
• send relevant launch, testing and product updates;
• understand general geographic and campaign interest;
• prevent spam, automated submissions and misuse;
• maintain the security and reliability of the website.

We do not sell your personal data and do not use the waitlist for third-party advertising profiles.

We process your email, optional city and early-access communications on the basis of your consent. You can withdraw that consent at any time.

We process limited technical information where necessary for our legitimate interests in protecting the website, preventing abuse and maintaining reliable operation. We may also process information when required to comply with a legal obligation.

The website is hosted by Vercel, waitlist records are stored using Supabase, and transactional email delivery may be handled by Resend. These providers process only the information needed on our behalf to deliver hosting, database, security, infrastructure and email-notification services.

When an early-access request is submitted, relevant waitlist details such as email address, optional city, selected language and campaign/referrer context may be included in a private NOXA team notification email. This does not change the purpose for which the information was submitted and is not used by NOXA for third-party advertising.

Provider infrastructure may involve processing outside Greece or the European Economic Area. Where required, transfers are made using contractual or other safeguards recognised by applicable data-protection law.

We may disclose information when required by law, court order or a competent public authority, or when necessary to protect users, the project or the security of the service.

Waitlist data is kept until you withdraw your consent, the NOXA early-access purpose ends, or the project is discontinued. We will review and remove inactive waitlist records no later than 24 months after the public launch of the relevant NOXA service, unless a longer period is required by law or needed to establish, exercise or defend legal claims.

Short-lived rate-limit information is automatically discarded as server instances expire and is not retained as a permanent NOXA customer record.

Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your data, object to certain processing, and withdraw consent at any time. Withdrawal does not affect processing that was lawful before the withdrawal.

Send requests to support@noxastreetapp.com. We may need to verify your identity before completing a request.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority at dpa.gr.

NOXA does not currently use advertising cookies or a third-party behavioural analytics service on this launch website. Essential technical storage or security mechanisms may be used by the site or its infrastructure when required to deliver and protect the service. This policy will be updated before non-essential cookies or tracking technologies are introduced.

We use reasonable technical and organisational safeguards, including encrypted HTTPS connections, restricted database rules, server-side validation, request limits and access controls. No internet service can guarantee absolute security, so users should avoid submitting information that is not requested by the form.

The launch website is not intended to knowingly collect personal data from children who cannot validly provide consent under the law applicable to them. A parent or guardian who believes that a child has submitted data may contact us to request its deletion.

We may update this policy when the website, mobile application or legal requirements change. The date at the top of this page identifies the latest version. Material changes will be communicated through the website or another appropriate channel.

Questions about this policy can be sent to support@noxastreetapp.com.