Privacy Policy

Last updated: July 27, 2026

This Privacy Policy describes how Novarexi (“we”, “us”, “the Company”) collects, processes, and stores personal data when you use the novarexi.com website and the Novarexi mobile app (the “Service”).

1.1 Information You Provide Directly

Account information: name, email address, password (stored hashed)
Brand profile information: website link, social media account link, business description, brand images you upload
Payment information: processed by our payment providers — we never store your card number
Contact information: information you share when you contact us

1.2 Information Collected Automatically

Device information, IP address, browser type
Usage data (which features you use, session durations)
Data from your connected social media accounts, to the extent those platforms allow (follower counts, post engagement, etc.)

1.3 Information Received From Third Parties

We receive limited data from the public/business profiles of your connected social media accounts (Google Business Profile, Instagram, Facebook, X, LinkedIn, TikTok, Pinterest, YouTube, Threads), via our social media publishing infrastructure, for the purpose of publishing content and displaying performance data.

2. How We Use Your Information

To provide and maintain the Service (content generation, scheduling, publishing)
To generate AI-powered content (text, image, video) tailored to your brand profile
To process payments and manage your subscription
To provide customer support
To improve the Service, debug issues, and maintain security
To comply with our legal obligations

3. Who We Share Your Information With

We do not sell your data. We share it, only to the extent necessary to provide the Service, with the following categories of service providers:

Our content generation partner — Content generation (text, image): brand profile information, prompts
Our social media publishing infrastructure — Social media publishing and analytics: connected account tokens, post content
Our payment providers — Payment processing: name, email, payment amount (card details go directly to these providers)
Our email delivery infrastructure — Email delivery (verification codes): email address
Our server hosting provider — Server hosting: all application data (infrastructure provider)

Your information may also be shared where required by law, to protect our rights, or in connection with a merger or acquisition.

3.1 AI Services and Your Permission

To produce content, some of your information is sent to AI service providers outside our company. These providers are OpenAI and Anthropic, and they are subject to their own privacy terms.

Information that is sent:

Your brand details: business description, website, social media address, colours and contact details
Post texts and the images used in posts
Comments on your posts, when a reply draft is being prepared

Information about people who comment: when a reply draft is prepared, the display name of the person who wrote the comment and the comment text are also sent to these providers. So the information sent is not only your own.

This information is used only to produce post text and images for you, to prepare reply drafts for comments and to derive your brand's visual style; it is not used for any other purpose.

It is not sent without your permission. When you first use the app, your explicit permission is requested. If you do not give permission you can keep using the app; only post and reply production will not run. You can withdraw your permission at any time in the app's Settings.

4. Data Retention

We retain your data for as long as your account is active and as necessary to comply with our legal obligations. When you delete your account, your personal data is removed from our systems within a reasonable period (see Account Deletion).

5. Your Rights

Depending on your region (under GDPR, KVKK, and similar regulations), you may have the following rights:

Request access to your data
Request correction of inaccurate data
Request deletion of your data (“right to be forgotten”)
Object to data processing
Request data portability
Withdraw your consent at any time

To exercise these rights, contact us at support@novarexi.com.

6. Account Deletion

You can permanently delete your account from the Settings section. This includes cancelling your active subscription, disconnecting your linked social accounts, and removing your personal data from our systems. Some data may be retained for a limited period due to legal retention obligations (e.g. billing records).

7. Children's Privacy

Our Service is not directed at individuals under 18, and we do not knowingly collect data from anyone under 18.

8. International Data Transfers

Your data may be processed on servers outside your country (e.g. in our cloud infrastructure providers' data centers). In such cases, we ensure your data is protected with appropriate safeguards.

9. Cookies

Our website uses essential cookies for session management and remembering preferences (e.g. language selection). We also collect usage statistics via Google Analytics, which is only activated with your consent. See our Cookie Policy for details.

10. Changes

We may update this policy from time to time. For material changes, we will notify you by email or through the Service.

11. Contact

For questions: support@novarexi.com