Privacy Policy

Data We Collect

We collect the data needed to provide chat, image, and video features:

• Clerk user IDs and billing metadata for authentication and subscriptions
• Convex-stored chat threads, message content, media jobs, and usage events
• Files you upload or generate (stored in Cloudflare R2 via media jobs)
• Diagnostics around usage (timestamps, credits consumed, etc.)

Authentication and billing are provided by Clerk. Media files (uploads and generations) are stored in Cloudflare R2 object storage. Structured data (chats, jobs, usage, settings) lives in Convex. Model inference is routed through providers like OpenRouter and others via API keys. We do not train on your private data or sell it.

To process your request, we may send prompts, relevant conversation context, and uploaded files to the model and hosting providers used by the selected feature. This includes OpenRouter and its downstream inference providers for requests routed through OpenRouter. Providers' handling of this data depends on the applicable service terms, privacy policies, and account settings. Noruxa's statement that it does not train on private data describes Noruxa's own practices; it is not a blanket guarantee about every provider.

Chat Retention

To reduce unnecessary data storage, chat threads that are not pinned are automatically deleted after 60 days, including associated message attachments stored for those chats.

Pinned chats are excluded from automatic deletion and remain available until they are unpinned or deleted by the account owner.

Legal Basis

Where required by law, we process data under contract necessity (to provide the service), legitimate interests (security and abuse prevention), and consent when requested. We keep data only as long as needed for product operation, account management, and legal compliance.

GDPR & Privacy Rights

If you are in the European Economic Area, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete information
• Request erasure (we perform this through the Clerk user deletion cleanup)
• Restrict or object to certain processing
• Ask for portability of the data you provided

To exercise any of these rights, email support@noruxa.com.

California Residents (CCPA/CPRA)

California residents have similar rights: you can request disclosure about data collection, ask us to delete your data, and opt out of any data sharing (we currently do not sell or share data for advertising, so no opt-out link is required).

Security & Retention

We apply access controls and rely on platform protections from Clerk, Convex, and Cloudflare, including their standard storage security measures. Private media access is served through authenticated routes. We do not currently add a separate custom encryption layer beyond the protections provided by those platforms. No online system can promise absolute security, but we are designed to provide strong practical protection. Account deletion removes associated user content and related product records subject to operational and legal requirements.

Contact

Questions or requests? Email support@noruxa.com. We’ll respond within a few days.