App Privacy Policy

1. Data the App Collects

• Account details: name, email address, password (only a hash is stored) and account ID
• Brand details: business description, website and social media address, colors, the business's contact details, and the logo and images you upload
• Photos: only when you select or take them, to add to a post or your brand profile
• Posts: post texts and images, your edits, your approve and reject decisions, and content you report
• Support messages: the subject and message you send from the "Contact us" screen
• Team invitations: the email address of the person you invite (only when you send an invitation)
• Device details: a device identifier to recognize sign-ins from unfamiliar devices, a notification token to send you notifications, your device's time zone; and, for session security, the IP address and device type of each session

2. Data We Do Not Collect

The app does not collect your location, contacts, calendar, messages, health data, browsing history or financial information. It does not use the advertising identifier and contains no third-party advertising, analytics or tracking libraries. Your data is not used to track you across apps and websites.

3. How We Use Data

• To prepare posts that fit your brand, send them for your approval and publish them to your connected accounts at the time you choose
• To notify you when a post is ready
• To protect your account (verification code when signing in from a new device, session list)
• To answer your support requests
• To meet our legal obligations

4. AI Services and Your Permission

To prepare posts, some of your data is sent to external AI service providers: OpenAI and Anthropic. The data sent:

• Your brand details: business description, website, social media address, colors and contact details
• Post texts and the images used in posts

Your password, email address, device identifier and support messages are not sent. The app asks for your explicit permission before anything is sent. You can withdraw it at any time in Settings → Legal → AI permission; if you don't give permission, you can keep using the app, only post preparation is off.

5. Who We Share Data With

We do not sell your data or share it for advertising. We share it only as needed to provide the service, with service providers that act on our behalf and on our instructions:

• AI service providers (section 4)
• The publishing infrastructure that posts to your connected accounts
• A notification service
• Email delivery infrastructure (verification codes)
• Our server hosting provider

Data may be shared with competent authorities where the law requires it.

6. Retention and Account Deletion

We keep your data while your account is open. You can delete your account at any time from within the app: Settings → Delete My Account. Your account, brand profiles, images, post records, device and session records are permanently deleted. Limited records that the law requires us to keep are kept for the period set by the applicable law.

7. Your Rights

Depending on where you are (GDPR, KVKK and similar laws), you have the right to access your data, ask for it to be corrected or deleted, object to processing, data portability and to withdraw your permission. For these rights: support@novarexi.com

8. Security

All traffic between the app and our servers is encrypted (HTTPS). Session keys are kept in your device's secure storage.

9. Children's Privacy

The app is not intended for people under 18, and we do not knowingly collect data from anyone under 18.

10. Changes and Contact

We may update this policy from time to time; the current version is always on this page. For questions: support@novarexi.com