Privacy Policy

This policy explains what personal data Noruxa collects, how it is used, and how it is protected.

Data We Collect

We collect the data needed to provide chat, image, and video features:

Clerk user IDs and billing metadata for authentication and subscriptions
Convex-stored chat threads, encrypted message content, media jobs, and usage events
Files you upload or generate (stored in Cloudflare R2 via media jobs)
Diagnostics around usage (timestamps, credits consumed, etc.)

Authentication and billing are provided by Clerk, media files are stored in Cloudflare R2, and Convex stores structured product data such as threads, jobs, and credit usage.

Chat Retention

To reduce unnecessary data storage, chat threads that are not pinned are automatically deleted after 60 days, including associated message attachments stored for those chats.

Pinned chats are excluded from automatic deletion and remain available until they are unpinned or deleted by the account owner.

Legal Basis

Where required by law, we process data under contract necessity (to provide the service), legitimate interests (security and abuse prevention), and consent when requested. We keep data only as long as needed for product operation, account management, and legal compliance.

GDPR & Privacy Rights

If you are in the European Economic Area, you have the right to:

Access the personal data we hold about you
Rectify inaccurate or incomplete information
Request erasure (we perform this through the Clerk user deletion cleanup)
Restrict or object to certain processing
Ask for portability of the data you provided

To exercise any of these rights, email contact@noruxa.com.

California Residents (CCPA/CPRA)

California residents have similar rights: you can request disclosure about data collection, ask us to delete your data, and opt out of any data sharing (we currently do not sell or share data for advertising, so no opt-out link is required).

Security & Retention

We apply access controls and rely on platform protections from Clerk, Convex, and Cloudflare. Chat content and private media are encrypted at rest, and private media access is served through authenticated routes. No online system can promise absolute security, but we are designed to provide strong practical protection. Account deletion removes associated user content and related product records subject to operational and legal requirements.

Contact

Questions or requests? Email contact@noruxa.com. We’ll respond within a few days.