Privacy Policy

Last updated June 2026

This is a starting template, not legal advice — have counsel review before launch.

NoxusHub provides an AI-agent platform that helps HubSpot agencies operate their clients' portals. This policy explains what we collect, how we use it, and the choices you have. It applies to our marketing site, the NoxusHub application, and related services (collectively, the “Service”).

Information we collect

• Account information. When you sign up we use Clerk to manage authentication. This includes your name, email address, organization, and credentials metadata (such as login timestamps). We do not store your password — Clerk handles that.
• Billing information. Subscriptions are billed through Stripe. We receive billing contact details, plan and invoice records, and payment status. Full card numbers are handled by Stripe and never touch our servers.
• Connected HubSpot data. When you connect a HubSpot portal, we process the CRM data you authorize — such as contacts, companies, deals, tickets, and engagement records — on behalf of your agency in order to run audits and agent workflows.
• Usage data. We collect product telemetry such as feature usage, agent run logs, token consumption, device and browser information, and IP address for security and analytics.

How we use information

• To provide, operate, and secure the Service.
• To run audits, generate AI output, and execute the agent workflows you request.
• To process payments, manage subscriptions, and prevent fraud.
• To provide support and respond to your requests.
• To improve the Service and develop new features in aggregate, de-identified form.
• To comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use connected HubSpot data to train third-party AI models.

Sub-processors

We rely on a small set of trusted vendors to deliver the Service, including Stripe, Clerk, Anthropic, HubSpot, and our cloud hosting and database provider. See the current list on our Subprocessors page.

Data retention

We retain account, billing, and usage records for as long as your account is active and as needed to meet legal, accounting, and security obligations. Connected HubSpot data is retained only as long as your portal is connected and is deleted within 30 days of disconnection or account termination, unless retention is required by law.

Security

• Read-only by default. Agents operate against HubSpot in a read-only posture unless you explicitly grant write access for a specific workflow.
• Encryption. Data is encrypted in transit (TLS) and at rest.
• Access controls. Access to production systems is restricted, logged, and reviewed.

No method of transmission or storage is completely secure, but we work to protect your information using industry-standard practices.

Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can manage most account data in-product or by contacting us. Where we process connected HubSpot data on behalf of an agency, we act as a processor and will direct data-subject requests to the relevant agency (the controller).

Contact

Questions about this policy or your data? Email us at privacy@noxushub.com.