1. Overview
NovalisHub LLC ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, and protect your information when you use NovalisHub (the "Service") at our website.
2. Information We Collect
- Account Information: Name, email address, company name, and authentication credentials securely managed through our backend infrastructure powered by Supabase.
- Third-Party API Data (Google Ads): Account IDs, campaign configurations, performance metrics (impressions, clicks, spend, conversions), ad groups, and keyword data accessed via official Google APIs.
- Workflow Logs: Internal logs generated during workflow execution on our automation engine (n8n), such as execution status, timestamps, and API response metadata.
- Billing Information: Payment details processed through a secure third-party payment gateway (we do not store raw cardholder data).
3. How We Use Your Information
We use collected data solely to deliver, automate, and improve the Service:
- To authenticate user accounts and manage user sessions.
- To execute requested automation routines (e.g., bid optimization, campaign audits, ad copy generation).
- To generate automated PPC suggestions using AI tools (e.g., ChatGPT / OpenAI APIs) based on your inputs.
- To communicate system updates, security alerts, and support responses.
4. Google API Limited Use Disclosure
NovalisHub's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We request access only to the minimal OAuth scopes required to perform campaign reporting and ad modifications authorized by you.
- We do not use Google user data to serve advertisements, build consumer profiling databases, or train generalized machine learning/AI models.
- We do not permit human review of your private Google account data unless you have given explicit consent (e.g., for troubleshooting), it is required for security purposes, or it is required to comply with applicable law.
5. Data Architecture, Processing, and Non-Disclosure
We prioritize data isolation and internal privacy:
- Database Storage: User accounts, authorization tokens, and metadata are securely stored and encrypted in our Supabase infrastructure (using industry-standard encryption at rest and in transit via TLS/SSL).
- Automation Processing (n8n): Workflows are processed strictly through our configured n8n orchestration pipelines to connect relevant endpoints.
- No Third-Party Sharing: Your proprietary business data, customer profiles, and ad performance figures are not shared, sold, or rented to external marketing entities or third-party data brokers. Data exchanged with authorized endpoints (such as OpenAI for copy generation) includes only prompt inputs and is not retained or used by those providers to train general public models.
6. Data Retention and Deletion
- We retain your information for as long as your account is active or as required to provide you the Service.
- You may revoke Google OAuth access at any time through your Google Security Settings.
- You may request full deletion of your account, stored credentials, and campaign logs by emailing info@novalismedia.com. Upon request, all data stored in Supabase and workflow logs will be permanently deleted within 30 days.
7. Security Measures
We implement robust administrative, technical, and physical safeguards:
- Token encryption (AES-256) for third-party access and refresh tokens.
- Role-Based Access Control (RBAC) and least-privilege principles.
- Encrypted communications (HTTPS / TLS 1.3).
8. Your Rights
Depending on your jurisdiction (such as GDPR in the EU or CCPA/CPRA in California), you may have the right to access, rectify, port, or erase your personal data, or object to certain processing activities. To exercise these rights, contact us at info@novalismedia.com.
9. Changes to This Policy
We may update this Privacy Policy periodically. Significant changes will be communicated via your registered email or through an in-app notice prior to taking effect.
10. Contact Us
If you have questions regarding this Privacy Policy or your data:
- Data Controller: NovalisHub LLC
- Email: info@novalismedia.com
- Address: 10410 SW 128 Pl, Miami, FL 33186, USA