Privacy Policy
Effective 2026-10-28 · Version 1.0.0
This Privacy Policy explains how NaruBox™ (“we”) handles personal data on the narubot™ website and Service. We collect only what we need, and we do not store visitors' IP addresses.
1. What we collect, why, and for how long
| Where | Data | Purpose | Retention |
|---|---|---|---|
| Contact / demo request | Organization, name, email, phone (optional), message | Replying and follow-up | 1 year from submission (deleted automatically) |
| Online checkout / orders | Organization, partner company, name, email, phone (optional), notes, order details, amount, payment reference | Fulfilling orders, installation contact, license issuance, refunds | 5 years (commerce and payment records) |
| Chatbot questions | Question text (max 80 characters), language, time — stored without anything that identifies you (no name, IP or cookie ID) | Improving answers, usage statistics | 2 years (deleted automatically) |
| Admin / institution dashboard accounts | Email, name (optional), password (irreversible hash only), last login, login attempts (16-character salted IP hash) | Account management, preventing unauthorized access | Until the account is deleted; login attempts 1 day |
| Admin activity log | Account email, action, time | Change tracking, security | 3 years |
| Visit statistics | Counts per page and day only (human / search engine / AI crawler) | Site statistics | Aggregated, not personal data |
Card and payment details are collected directly by Stripe and never stored on our servers. Where the law requires longer retention, we keep data for that period.
2. Processors and international transfers
The payment and email processors below are located in the United States. Data is transferred over encrypted HTTPS at the time of collection.
| Recipient | Country | Data | Purpose |
|---|---|---|---|
| Stripe, Inc. | USA | Email, organization, order details, payment details | Payment processing, receipts, refunds |
| Google LLC — Gmail (email) and reCAPTCHA (spam protection) | USA | Recipient email and message content; reCAPTCHA browser signals per Google's policy | Sending confirmation emails; spam protection |
3. Sharing
We do not sell personal data or share it beyond the purposes above, except with a partner company when you ask to buy through a partner (organization, contact and inquiry details needed for the deal), or when required by law.
4. Your rights
You can ask to access, correct, delete or restrict the processing of your personal data at any time by emailing narubox.com@gmail.com. We respond within 10 days after verifying your identity. Records we must keep by law (such as payment records) may be retained for the legal period. Depending on where you live (for example, under Texas, other U.S. state laws or the GDPR), you may have additional rights, and you may complain to your local data protection authority. We do not knowingly collect data from children under 14 (under 13 in the U.S.).
5. Cookies and browser storage
- Session cookie — security token for forms; admin sign-in (up to 8 hours).
- nb_lang — your chosen language (1 year).
- nb_seen — recent page list so the same visit isn't counted twice (no identifier).
- Browser storage — light/dark preference and widget open state (this device only).
- No advertising or tracking cookies. reCAPTCHA on the contact page may set Google cookies.
6. Security
HTTPS everywhere, one-way password hashing, no IP storage, role-based admin access, login rate limiting, access logs and regular updates.
7. On-premise installations
When an institution runs narubot™ on its own server, that institution is the controller of its users' data and its own privacy policy applies. We access such systems only within the maintenance scope the institution requests.
8. Contact and changes
Privacy contact: NaruBox™ · narubox.com@gmail.com. We post changes on this site at least 7 days before they take effect (30 days for material changes). This policy is effective as of 2026-10-28.
Operator & contact
NaruBox™ · Round Rock, Texas, USA · narubox.com@gmail.com
narubot™ is a product of NaruBox™. Public-sector deployments may also be contracted through partner companies; in that case the terms of that contract prevail.
Change history
- · 2026-10-28 — v1.0.0 · First published — Terms, Privacy Policy, Payment & Refund Policy