Privacy Policy

NovaAI only accesses Google data after you sign in with Google and grant permission on Google's consent screen. With that permission we access:

• Google account information: your name, email address and profile picture, used to identify your NovaAI account.
• Business Profile information: the Business Profile accounts and locations you manage, including each location's name and address.
• Reviews: the reviews left on those locations, including the reviewer's display name, star rating, review text and date, and any replies already posted.

Separately from Google, we store the information you give us directly: your account email, your business name, your tone of voice setting, your Autopilot setting and your alert email address.

We use Google user data for one purpose: generating replies to your reviews and publishing them on your Business Profile. Specifically, we use it to:

• show your reviews in your NovaAI dashboard;
• write a suggested reply to each review in the tone you chose;
• publish a reply to Google when you approve it, or automatically when you have turned on Autopilot;
• tell you when a reply is waiting for your approval.

We do not use Google user data for anything else. In particular:

• We do not sell Google user data, or any other user data, to anyone.
• We do not use Google user data for advertising, including personalized or interest-based advertising.
• We do not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models.
• We do not allow people to read your Google user data, unless you ask us to look at specific content to help you, it is needed for security purposes such as investigating abuse, or it is required by law.

NovaAI's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

We share data only with the service providers needed to run the features described above, and only for that purpose:

• Supabase hosts our database and sign-in system. Your account, settings, reviews and replies are stored there.
• OpenAI generates reply text. To write a reply we send the review text, its star rating, the reviewer's display name, your business name and your tone of voice setting to the OpenAI API.
• Google receives the replies you approve, or that Autopilot publishes, so they appear on your Business Profile.

We do not transfer Google user data to any other third party, except where required by law.

Data is sent over encrypted connections (HTTPS). Database access rules restrict each NovaAI account to its own data, so one customer cannot read another customer's reviews or settings. NovaAI uses a cookie to keep you signed in; we do not use advertising or tracking cookies.

We keep your data for as long as your NovaAI account exists.

To have your account and all associated data deleted, including reviews and replies stored by NovaAI, email getnovaaai@gmail.com from the email address of your NovaAI account. We will delete your data within 30 days and confirm by email.

You can also stop NovaAI's access to your Google account at any time from your Google Account permissions page. Replies already published on your Business Profile stay on Google until you delete them there.

If we change how NovaAI uses your data, we will update this page and the date at the top. If a change affects how we use Google user data, we will ask for your consent before using your data in the new way.

Questions about this policy or about your data: getnovaaai@gmail.com