Privacy Policy
This policy explains how Oxit collects, uses, shares, and protects personal information across our website, our IT & ERP services, and the Oxi Notify communication platform — and the choices and rights you have over your data.
Who We Are
Oxit (“we”, “us”, “our”) is a technology company registered in the Sharjah Publishing City Free Zone, United Arab Emirates, with operations across the UAE and Lebanon. We provide IT services, Microsoft Dynamics 365 ERP implementation, system integrations, custom software, and the Oxi Notify customer-communication platform.
This policy covers personal data we handle as a controller — for example, visitors to our website and our direct clients. When we process data on behalf of a business using Oxi Notify, we act as a processor under that business's instructions, and their own privacy notice governs how their end-users' data is used.
Information We Collect
We collect only what we need to provide and improve our services:
- Contact details — name, business email, phone number, company, and country.
- Communications — messages, inquiries, and attachments you send us through our forms, email, or messaging channels.
- Account data — credentials and profile information for the Oxi Notify portal.
- Usage & device data — log data, IP address, browser and device information, and pages viewed, used to keep the service secure and reliable.
- Customer content — for Oxi Notify business customers, the messages, documents, and contact lists processed through the platform on their behalf.
- Voice call data — where a business enables AI-answered calls, the caller's phone number, the time and length of the call, and the speech from the call converted to text in real time so the assistant can reply. We do not store recordings of call audio. A written summary is saved to the conversation, and the full transcript only where that business has switched transcript storage on.
How We Use Information
- Provide, operate, and improve our IT, ERP, and communication services.
- Respond to inquiries, quotes, and support requests.
- Send service-related notifications such as invoices, alerts, and updates.
- Authenticate users and secure access to the Oxi Notify portal.
- Detect, prevent, and investigate fraud, abuse, and security incidents.
- Meet our legal, tax, and regulatory obligations.
We do not sell your personal data, and we do not use it for advertising.
Messaging, Calls & Meta Platforms
Oxi Notify sends and receives messages over channels including WhatsApp, Instagram, Facebook Messenger, web chat, email, and SMS, and answers calls to a business's own phone number. When these channels are used, message delivery is also subject to the terms and privacy policies of the relevant providers, including Meta Platforms, Inc. (WhatsApp, Instagram, Messenger).
Business messaging is permission-based: our customers must have a lawful basis and appropriate consent to message their recipients, and recipients can opt out at any time. We use these platforms only to deliver the communications our customers configure — never to sell data or send unsolicited marketing.
Where a business connects its own phone number, incoming calls reach us over a SIP trunk from that business's telecommunications carrier and are answered by the AI assistant. Call audio is processed in real time so the assistant can understand and respond, and is not retained as a recording. The business using Oxi Notify decides whether call transcripts are stored, and is responsible for any notice or consent its callers require.
Sharing & Sub-processors
We share personal data only as needed to run our services, and only with providers bound by confidentiality and data-protection obligations:
- Microsoft — cloud hosting (Microsoft Azure), Dynamics 365, and email delivery (Microsoft Graph).
- Meta Platforms — WhatsApp, Instagram, and Messenger message delivery.
- Communication gateways — SMS and email providers used to deliver notifications.
- AI providers — OpenAI and Google, which process message and call content in order to generate the AI assistant's replies, under those providers' API terms.
- Telecommunications carriers — where a business connects its own phone number, the carrier it selects and contracts carries the call to the platform.
We may also disclose data where required by law, to protect our rights or the safety of others, or in connection with a corporate transaction such as a merger or acquisition.
Data Retention
We keep personal data only for as long as necessary to provide our services, comply with legal and tax obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type and purpose. Customer content within Oxi Notify is retained according to each customer's own configuration and instructions.
Security & International Transfers
We apply technical and organizational measures designed to protect personal data, including encryption of data in transit, strict access controls, complete tenant isolation between business customers, continuous monitoring, and regular backups. No system is ever completely secure, but we work continuously to safeguard your information and to respond promptly to any incident.
We operate in the UAE and Lebanon and use cloud infrastructure that may process data in other regions. Where personal data is transferred across borders, we take steps to ensure it remains protected in line with this policy and applicable law.
Your Rights & Choices
Depending on your location, you may have the right to access, correct, update, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, email us at contact@oxitlb.com.
If you are an end-user of a business that uses Oxi Notify, please direct your request to that business — we will support them in fulfilling it as their processor.
Data Deletion
You can request permanent deletion of the personal data we hold about you by emailing contact@oxitlb.com with the email address or phone number associated with your records. We will verify your request and delete the data within a reasonable timeframe, except where we are required to retain it by law.
Cookies & Human Verification
Our website uses only the cookies and similar technologies necessary for it to function and stay secure. We do not use third-party advertising or cross-site tracking cookies.
The human-verification check on our forms runs entirely in your browser and is privacy-friendly by design — it confirms you are a real person without profiling you or tracking you across websites.
Children's Privacy
Our services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will remove it.
Changes to This Policy
We may update this policy from time to time. When we make material changes, we will revise the “Last updated” date above and, where appropriate, notify you. Your continued use of our services after an update means you accept the revised policy.
Questions about your data?
Contact our team at contact@oxitlb.com and we'll be happy to help. See also our Terms of Service.
This Privacy Policy is provided for transparency about our data practices. It does not form part of any contract unless expressly incorporated into a written agreement between you and Oxit.