Privacy Policy

Last updated:

1. Introduction

Novlier ("we," "our," or "us") operates the Novlier AI assistant platform. This Privacy Policy explains how we collect, use, share, and protect information about you when you use our services, including our website at novlier.com and the Novlier dashboard and API.

By using our services, you agree to the practices described in this policy. If you do not agree, please do not use our services.

2. Information We Collect

Account information: When you register, we collect your email address, name, and password (stored as a bcrypt hash — we never store plain-text passwords).

Business information: For Business Owner accounts, we collect your company name, website URL, VAT/CIF number, and billing address (used for invoice generation).

Usage data: We collect data about how you use the platform — conversations handled, credits consumed, assistant configuration, knowledge base content, and integration settings.

Visitor conversation data: When visitors interact with your AI assistant widget, their messages, session data, and any contact information they provide (name, email, phone) are collected and processed on your behalf as a data processor.

Payment information: Billing is handled by Stripe. We do not store full card numbers. We store Stripe customer IDs and subscription references.

Technical data: IP addresses, browser type, device type, and request logs for security monitoring and debugging. These are retained for 14 days.

3. How We Use Your Information

We use collected data to:

Provide, operate, and improve the Novlier platform
Process payments and generate invoices
Send transactional emails (account verification, password reset, billing notifications)
Provide customer support and respond to inquiries
Monitor for abuse, fraud, and security incidents
Run scheduled AI analysis jobs on conversation history (if opted in)
Comply with legal obligations

We do not sell your personal data to third parties. We do not use your conversation data to train our AI models.

4. Data Processors & Third Parties

We work with the following third-party service providers:

Stripe — payment processing
OpenAI / Anthropic / Google — AI model inference
SmartBill — invoice generation
SMTP providers — email delivery

5. Data Retention

We retain your account data for as long as your account is active. Conversation data is retained according to your configured data retention policy (default: 90 days). After account deletion, data is soft-deleted and permanently purged within 30 days.

6. Your Rights (GDPR)

If you are in the EEA, you have the right to access, rectify, erase, port, restrict, or object to processing of your personal data. Email privacy@novlier.com — we respond within 30 days.

7. Cookies

We use strictly necessary cookies for authentication and user preferences. We do not use advertising or tracking cookies.

8. Security

All sensitive values stored in our database are encrypted using AES-256-GCM. All data in transit is encrypted via TLS. Report vulnerabilities to security@novlier.com.

9. Contact

Novlier
Email: privacy@novlier.com