Privacy Policy

Welcome to Nofbox.

This Privacy Policy explains how Nofbox collects, uses, stores, and protects information when developers and end users use our services.

By using Nofbox, you agree to the practices described in this policy.

1. Overview

Nofbox is a verification and notification infrastructure platform that helps applications:

• verify users,
• link accounts securely,
• deliver important notifications,
• and reduce dependence on traditional OTP systems.

We are committed to minimizing data collection and protecting user privacy.

2. Information We Collect

A. Developer Information

When developers register or use Nofbox services, we may collect:

• Full name
• Company name
• Email address
• Phone number
• Billing or business address

Why We Collect This

We collect this information to:

• prevent abuse and fraudulent activity,
• maintain platform security,
• comply with legal obligations,
• communicate important service updates,
• provide support and enterprise onboarding.

We do not sell developer data to advertisers or third parties.

B. End User Information

For end users interacting through applications integrated with Nofbox, we intentionally minimize data collection.

We only collect:

• Phone number (hashed)
• Email address (hashed)

Important Note

Phone numbers and email addresses are stored in hashed form whenever possible, meaning the original values are not directly readable from our systems.

Nofbox is designed to avoid unnecessary collection of personally identifiable information.

3. How Information Is Used

We use collected information to:

• provide verification services,
• detect spam, fraud, and abuse,
• improve system reliability and delivery performance,
• maintain account linking functionality,
• send important service-related notifications,
• provide technical support.

We do not use personal data for advertising purposes.

4. Data Security

We implement reasonable technical and organizational measures to protect information, including:

• encrypted communications (HTTPS/TLS),
• access restrictions,
• infrastructure monitoring,
• abuse detection systems,
• hashed storage for sensitive identifiers.

However, no system can guarantee absolute security.

5. Data Sharing

Nofbox does not sell personal information.

We may share limited information only when necessary:

• with infrastructure or hosting providers required to operate the service,
• to comply with legal obligations,
• to investigate abuse, fraud, or security incidents.

6. Data Retention

We retain information only for as long as necessary to:

• provide services,
• maintain security,
• comply with legal obligations,
• resolve disputes,
• enforce platform policies.

Hashed identifiers may be retained longer for abuse prevention and account linking integrity.

7. Third-Party Services

Applications using Nofbox may also use third-party services outside our control.

Developers integrating Nofbox are responsible for informing their own users about their privacy practices.

8. Children’s Privacy

Nofbox is not intended for children under the age required by applicable laws in their jurisdiction.

9. Policy Updates

We may update this Privacy Policy from time to time.

Significant changes may be communicated through our website, dashboard, or email notifications.

10. Contact Us

For privacy-related questions or requests:

Email: contact@nofbox.com

Developer First Commitment

We believe verification infrastructure should respect user privacy by default.

Nofbox is built with a minimal-data approach to help developers create secure and user-friendly experiences without collecting unnecessary personal information.