NOXLIST

1. Data Controller

The data controller for personal data is NOXLIST, contactable at the email address: info@noxlist.tech

2. Data Collected

NOXLIST collects the following types of personal data:

Registration data: first name, last name, email address
Event data: information about created events (name, date, location, description)
Guest data: first and last names of guests entered in lists
Usage data: access logs, check-in statistics
Payment data: securely managed through Stripe (we do not store card data)

3. Purpose of Processing

Personal data is processed for the following purposes:

Providing the guest list management service
User account management
Payment processing and billing
Service-related communications
Service improvement and anonymous statistical analysis
Compliance with legal obligations

4. Legal Basis

Data processing is based on: performance of the service contract, user consent (where required), legitimate interest of the controller, and compliance with legal obligations.

5. Data Retention

Personal data is retained for the time necessary to provide the service and to comply with legal obligations. Event and guest list data is retained until account deletion by the user or until explicit deletion request.

6. Data Sharing

Data may be shared with:

Supabase: for database hosting and authentication
Stripe: for payment processing
Vercel: for application hosting

We do not sell or transfer personal data to third parties for marketing purposes.

7. User Rights

Under GDPR, you have the right to:

Access your personal data
Rectify inaccurate data
Delete your data ("right to be forgotten")
Restrict processing
Data portability
Object to processing
Withdraw consent at any time

To exercise these rights, contact: info@noxlist.tech

8. Cookies

NOXLIST uses technical cookies necessary for service operation (authentication, user preferences). We do not use profiling cookies or third-party cookies for advertising purposes.

9. Security

We adopt appropriate technical and organizational security measures to protect personal data from unauthorized access, loss, or destruction. Data is transmitted via encrypted connections (HTTPS/TLS).

10. Changes to Privacy Policy

We reserve the right to modify this Privacy Policy. Changes will be published on this page with the update date indicated. In case of substantial changes, we will notify registered users.

11. Contact

For any questions regarding this Privacy Policy or the processing of personal data, contact: info@noxlist.tech