Data Processing Agreement
Contractual commitments and data processing terms governing customer data in NOX.
Last updated: July 17, 2026
Data Processing Agreement
1. Definitions
This Data Processing Agreement (DPA) forms part of the Terms of Service. "Controller" means the customer who determines the purposes of processing. "Processor" means Falcone Intelligence Pvt. Ltd. (parent company of NOX Intelligence). "Data Subject" means the individual whose personal data is processed. "Personal Data" means any information relating to an identified or identifiable natural person.
2. Processing Details
The subject matter of processing is the provision of NOX's autonomous virtual brain and cognitive extension services. Processing includes collection, storage, analysis, and transmission of data. The duration corresponds to the subscription term. Personal data types include account information, usage data, and user-generated content. Data categories include customers, employees, and end users.
3. Processor Obligations
We process personal data only on documented instructions from the Controller. We ensure all personnel with access are bound by confidentiality agreements. We implement appropriate technical and organizational measures as described in our Security Exhibit. We assist the Controller in fulfilling data subject rights obligations.
4. Sub-processors
We maintain a list of authorized sub-processors, including cloud infrastructure providers, CDN services, and monitoring tools. We will notify you of any changes at least 30 days in advance. You may object to new sub-processors. We remain fully liable for all sub-processor actions.
5. Data Subject Rights
We will notify you promptly of any data subject requests. We will assist in responding to requests within required timeframes. We provide tools for you to manage data subject rights directly. Requests related to your data subjects will be forwarded to you within 48 hours.
6. Data Breach Notification
We maintain a security incident response plan. We will notify you within 48 hours of confirming a personal data breach. Notification includes the nature of the breach, categories of data affected, likely consequences, and remedial measures. We cooperate fully with regulatory investigations.
7. Data Deletion
Upon termination, we provide 30 days for data export. After this period, we delete all personal data unless legal retention requirements apply. Deletion is performed using secure methods ensuring irretrievable destruction. Certification of deletion is available upon request.
8. Governing Law
This DPA is governed by the laws of the Republic of India. It survives termination of the main agreement. In case of conflict, this DPA prevails over the Terms of Service regarding data processing matters. Both parties submit to the jurisdiction of courts in Mumbai, India.
Questions about our policies? Contact our legal team at legal@noxassistant.com or write to us at Falcone Intelligence Pvt. Ltd. (parent company of NOX Intelligence), 7th Floor, Technopolis Knowledge Park, MIDC, Andheri East, Mumbai — 400093, India.