Privacy Policy

1. Who We Are & Roles

For our website and any optional account/profile data, NovaLexy acts as a data controller. For user content you input into our AI features, NovaLexy acts as a pass-through facilitator and does not store or retain that content; the request is transmitted to third-party AI providers (e.g., Google Gemini API) who process it to generate an output. Those providers act as independent processors/sub-processors under their own terms and privacy policies.

2. What We Do Not Collect

• No storage of user content: We do not retain the text, translations, or prompts you submit to the AI features beyond the transient processing needed to return a response.
• No model training on your data: We never use your data to train our own or third-party models.
• No sale or sharing for cross-context behavioral advertising: We do not sell or “share” personal information within the meaning of the CCPA/CPRA.

3. Limited Information We May Handle

To operate the site and, if applicable, your account, we may process a minimal set of data:

• Account metadata (optional): Email address and password hash if you register. You can request deletion at any time.
• Transactional data (via payment processor): Subscription status and billing confirmations. Full payment details are handled by the payment provider (e.g., Stripe), not by NovaLexy.
• Basic technical logs: IP address, browser/OS, timestamps, and error logs used strictly for security and troubleshooting. We strive to minimize retention.
• Cookies: As described in Section 8, for essentials (e.g., session), preferences, and optional analytics/marketing (only with consent).

4. How Processing Works (Pass-Through)

When you submit text for translation or evaluation, NovaLexy securely transmits your request to third-party AI providers (e.g., Google Gemini API) and relays the returned output to your browser. NovaLexy does not keep a copy of your content. Any temporary handling is purely for delivery and is promptly discarded after the response is sent.

5. Third-Party Providers

We integrate with external services to provide core functionality. These providers process data under their own terms and privacy policies:

• AI services: e.g., Google Gemini API (model inference).
• Payments: e.g., Stripe (subscription billing).
• Hosting/CDN: Reputable cloud and content delivery providers.
• Optional analytics/marketing: Used only with your consent via the cookie banner.

Where required, we use data processing agreements and appropriate safeguards with these providers.

6. Security

We apply industry-standard security controls (e.g., HTTPS/TLS in transit, hardened infrastructure, access controls). While no system is perfectly secure, we continually work to protect the service. If you believe your account is compromised, please contact us immediately.

7. Your Rights

Depending on where you live (e.g., EU/EEA/UK under GDPR, California under CCPA/CPRA, Brazil under LGPD, Canada under PIPEDA), you may have rights to:

• Access, correct, or delete account metadata we hold about you.
• Object to or restrict certain processing.
• Withdraw consent (for optional cookies/communications).
• Data portability (where applicable).

Because we do not store your AI content, there is no content archive to access or delete on our side.

8. Cookies & Tracking Technologies

We use cookies to run the site, remember preferences, and—only with your consent—measure usage and show relevant marketing. You can manage preferences anytime via the cookie banner or the link below.

8.1 Types of Cookies

• Essential: Security, load balancing, session management. Cannot be disabled.
• Preferences: Language, layout, UI choices.
• Analytics (optional): Privacy-minded usage stats to improve the product.
• Marketing (optional): More relevant ads/messages. Enabled only with explicit consent.

8.2 Duration

Session cookies expire when you close your browser. Persistent cookies typically last from 1 day to 12 months (purpose-dependent).

8.3 Your Controls

• Reopen Cookie Settings (banner preferences).
• Use your browser settings to delete/block cookies.

Disabling non-essential cookies will not block core functionality, but some features may behave differently.

9. International Transfers

Third-party providers may process data in multiple countries. Where required, we rely on lawful transfer mechanisms (e.g., standard contractual clauses) implemented by those providers. We minimize what is transferred by not storing user content ourselves.

10. Children’s Privacy

NovaLexy is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided data to us, please contact us so we can address it promptly.

11. Changes to This Policy

We may update this policy to reflect changes to our practices or legal requirements. We’ll update the “Last updated” date and, where appropriate, provide a notice within the product.

12. Contact

Questions or requests about privacy? Reach us at contact@novalexy.com or via our contact form. You may also have the right to contact your local data protection authority.

13. Region-Specific Disclosures

EU/UK (GDPR)

Legal bases typically include performance of a contract (for account operations), legitimate interests (security, fraud prevention, troubleshooting), and consent (optional cookies/marketing). You can lodge complaints with your supervisory authority.

California (CCPA/CPRA)

• We do not sell or share personal information.
• You may request access, deletion, or correction of personal information we maintain about your account metadata.
• Non-discrimination: We will not discriminate against you for exercising your rights.