Novu ("we", "us", or "our") operates the Novu platform at novuai.co. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read this policy carefully. If you disagree with its terms, please discontinue use of the platform.

1. Information We Collect

Account information: When you sign in, we receive your name, email address, and a unique identifier. We do not receive your password.

Business profile data: Information you voluntarily provide about your company, industry, target customers, and goals. This data is used exclusively to personalise your AI agents.

Usage data: We log interactions with the platform — pages visited, agent executions, goals created — to improve product quality and generate your analytics dashboards.

Payment information: Payments are processed by Stripe. We store only a Stripe customer ID and subscription status; we never store card numbers or CVV codes.

Cookies and local storage: We use a session cookie to keep you logged in and local storage for UI preferences (sidebar state, theme). We do not use third-party advertising cookies.

2. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Novu platform
Personalise AI agent behaviour based on your business context
Process payments and manage your subscription
Send transactional emails (receipts, trial expiry reminders, execution summaries)
Monitor platform health, detect abuse, and enforce our Terms of Service
Improve our product through aggregated, anonymised analytics

We do not sell your personal data to third parties.

3. Data Sharing

We share data only with trusted sub-processors necessary to deliver the service:

Stripe — payment processing
AI inference services — powering agent reasoning and execution
Amazon Web Services — cloud infrastructure and file storage
SendGrid (optional) — transactional email delivery

Each sub-processor is contractually bound to process data only as instructed and to maintain appropriate security standards.

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law (e.g., financial records for tax purposes, which are retained for 7 years).

5. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

If you are located in the European Economic Area (EEA) or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority.

6. Security

We implement industry-standard security measures including TLS encryption in transit, encrypted storage at rest, and access controls limiting who can view your data. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

Novu is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the platform after changes constitutes acceptance of the revised policy.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at [email protected].