Self-service privacy request and choice center, including opt-outs where legally applicable.
Offer authenticated access, correction, deletion, portability, restriction, objection, consent withdrawal and relevant sale/share/targeted-ad opt-outs to eligible data subjects. Collect no more identity proof than required and log request, verification, role, legal basis, applicable exemption, deadline, outcome and appeal.
Noxtill processes many customer-supplied records on a business Customer’s instructions. When a data subject requests rights relating to workspace content, route the request to that Customer, provide reasonable assistance and do not unilaterally export customer records without authority.
Where legally required, provide sensitive-data use restrictions, access to meaningful explanation of in-scope significant automated decisions and appeal/human review mechanisms. Do not treat internal generic AI recommendations as automatically excluded from all privacy laws.
Store timestamped purpose-by-purpose consent records, withdrawal method, policy version, first/third-party cookie categories, required Global Privacy Control action and any objection suppression; expose correct preference state on reload where technically possible.
Rights intake
Offer authenticated access, correction, deletion, portability, restriction, objection, consent withdrawal and relevant sale/share/targeted-ad opt-outs to eligible data subjects. Collect no more identity proof than required and log request, verification, role, legal basis, applicable exemption, deadline, outcome and appeal.
Controller vs customer workspace
Noxtill processes many customer-supplied records on a business Customer’s instructions. When a data subject requests rights relating to workspace content, route the request to that Customer, provide reasonable assistance and do not unilaterally export customer records without authority.
Do Not Sell or Share
Present a conspicuous opt-out where California law applies and covered regulated sale/share occurs. A website link must connect to functioning preferences; if Noxtill does not engage in qualifying regulated activities, clearly state that accurately and still provide required rights and request channels.
Sensitive data and automated decisions
Where legally required, provide sensitive-data use restrictions, access to meaningful explanation of in-scope significant automated decisions and appeal/human review mechanisms. Do not treat internal generic AI recommendations as automatically excluded from all privacy laws.
Consent choice center
Store timestamped purpose-by-purpose consent records, withdrawal method, policy version, first/third-party cookie categories, required Global Privacy Control action and any objection suppression; expose correct preference state on reload where technically possible.