Privacy Policy

Last updated: March 20, 2026

NovaHost.ai (“NovaHost,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our managed AI platform hosting service.

1. Information We Collect

Personal Information

When you create an account, we collect:

• Full name and email address
• Payment information (processed securely by Stripe — we never store card details)
• Company name (optional)
• Usage data and analytics

Instance Data

Your AI instance data — including uploaded documents, chatbot conversations, knowledge bases, and workflow configurations — is stored in your isolated, private server environment. We do not access, read, or analyze your instance data.

2. How We Use Your Information

• To provision and manage your AI platform instance
• To process payments and manage your subscription
• To send transactional emails (account verification, payment receipts, service notifications)
• To provide customer support
• To improve our platform and services
• To detect and prevent fraud or abuse

3. Data Isolation & Security

Every NovaHost customer receives a completely isolated AI instance. Your data is:

• Stored in a dedicated, isolated server environment
• Encrypted at rest and in transit (TLS 1.3)
• Backed up daily with 30-day retention
• Never shared with other customers or third parties
• Accessible only by you through your authenticated dashboard

4. Third-Party Services

We use the following third-party services:

• Stripe — Payment processing (PCI DSS Level 1 compliant)
• Google OAuth — Optional social sign-in
• Resend — Transactional email delivery
• Cloud infrastructure providers — Server hosting for your AI instances

5. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. See our Cookie Policy for details.

6. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and data
• Export your data in a portable format
• Restrict or object to data processing
• Withdraw consent at any time

7. Data Retention

We retain your account information for as long as your account is active. Upon cancellation, your instance data is deleted within 30 days. Account information is retained for up to 90 days for legal and accounting purposes, then permanently deleted.

8. Children's Privacy

NovaHost is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the platform. Your continued use of NovaHost after changes constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related questions or data requests, contact us at privacy@novahost.ai