Privacy Policy

Last updated: January 1, 2025

1. Introduction

NOVAN METRIX ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and protect your information when you use our Decluttr-AI service ("Service"). This policy complies with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

By using our Service, you acknowledge that you have read and understood this Privacy Policy and agree to our collection, use, and disclosure of your information as described herein.

2. Data Controller Information

3. Information We Collect

3.1 Personal Information You Provide

When you use our Service, we may collect the following personal information:

• Account Information: Name, email address, password (encrypted)
• Payment Information: Billing address, payment method details (processed securely by third-party payment processors)
• Contact Information: Information you provide when contacting our support team
• User Content: Photos and images you upload for enhancement

3.2 Information We Collect Automatically

When you access our Service, we automatically collect certain information:

• Technical Information: IP address, browser type, operating system, device information
• Usage Information: Pages visited, features used, time spent on the Service
• Cookies and Tracking: See our Cookie Policy section below
• Log Information: Server logs, error logs, access logs

3.3 Information from Third Parties

We may receive information about you from third-party services such as payment processors (Stripe, PayPal, LemonSqueezy) and authentication providers. This information is limited to what is necessary to provide our Service.

4. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Contract Performance: To provide the Service you requested and fulfill our contractual obligations
• Legitimate Interest: For service improvement, fraud prevention, and security purposes
• Consent: For marketing communications and non-essential cookies (where applicable)
• Legal Obligation: To comply with applicable laws and regulations

5. How We Use Your Information

We use your personal information for the following purposes:

5.1 Service Provision

• Processing and enhancing your uploaded images
• Managing your account and user dashboard
• Processing payments and managing credits
• Providing customer support

5.2 Service Improvement

• Analyzing usage patterns to improve our Service
• Troubleshooting technical issues
• Developing new features and functionality

5.3 Security and Fraud Prevention

• Detecting and preventing fraudulent activities
• Maintaining the security of our Service
• Monitoring for abuse and violations of our Terms of Service

5.4 Legal Compliance

• Complying with applicable laws and regulations
• Responding to legal requests and court orders
• Enforcing our Terms of Service

6. Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

6.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our Service:

• Payment Processors: Stripe, PayPal, LemonSqueezy for payment processing
• Cloud Services: For data storage and processing infrastructure
• Analytics Services: For usage analysis and service improvement
• Customer Support: For providing technical support services

6.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal obligations, court orders, or government requests
• Protect our rights, property, or safety
• Prevent fraud or security breaches
• Enforce our Terms of Service

6.3 Business Transfers

In the event of a merger, acquisition, or sale of our business, your information may be transferred to the new entity. We will provide notice of such transfer and any changes to this Privacy Policy.

7. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Account Information: Retained until account deletion, then securely deleted within 30 days
• Uploaded Images: Automatically deleted within 24 hours after processing unless saved to your dashboard
• Saved Projects: Retained in your dashboard until manually deleted by you
• Payment Records: Retained for 7 years for tax and legal compliance purposes
• Support Communications: Retained for 2 years for quality assurance
• Log Files: Retained for 90 days for security and operational purposes

8. Your Rights (GDPR)

Under GDPR and other applicable privacy laws, you have the following rights regarding your personal data:

8.1 Right of Access

You can request information about what personal data we hold about you and how we use it.

8.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data.

8.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data in certain circumstances.

8.4 Right to Restrict Processing

You can request that we limit the processing of your personal data in certain circumstances.

8.5 Right to Data Portability

You can request a copy of your personal data in a structured, machine-readable format.

8.6 Right to Object

You can object to the processing of your personal data for certain purposes, including direct marketing.

8.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw your consent at any time.

To exercise any of these rights, please contact us at support@decluttr-ai.app. We will respond within 30 days of your request. You also have the right to lodge a complaint with a supervisory authority if you believe we have violated your privacy rights.

9. Data Security

We implement robust technical and organizational measures to protect your personal data:

9.1 Technical Safeguards

• SSL/TLS encryption for data transmission
• AES-256 encryption for data storage
• Secure cloud infrastructure with redundancy
• Regular security audits and vulnerability assessments
• Intrusion detection and monitoring systems

9.2 Organizational Safeguards

• Access controls and employee training
• Data breach response procedures
• Regular review of security policies
• Background checks for personnel with data access

10. International Data Transfers

Your data may be processed in countries outside the European Economic Area (EEA). We ensure adequate protection through:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules (BCRs)
• Certification schemes and codes of conduct

11. Cookies and Tracking Technologies

11.1 Types of Cookies We Use

• Essential Cookies: Necessary for the Service to function properly
• Performance Cookies: Help us understand how visitors interact with our Service
• Functionality Cookies: Remember your preferences and settings
• Analytics Cookies: Provide insights into Service usage and performance

11.2 Cookie Management

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of our Service. We do not use tracking cookies for advertising purposes.

12. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

13. Data Breach Notification

In the event of a personal data breach that poses a high risk to your rights and freedoms, we will notify you within 72 hours of becoming aware of the breach, as required by GDPR. We will also notify the relevant supervisory authority within the same timeframe.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and, where required by law, by email. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

16. Supervisory Authority

You have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction if you believe we have not complied with applicable data protection laws. For users in the EU, you can find your local supervisory authority at https://edpb.europa.eu/about-edpb/about-edpb/members_en.

Important: This Privacy Policy is designed to be transparent and comprehensive. We are committed to protecting your privacy and handling your data responsibly. If you have any questions or concerns about how we handle your personal information, please don't hesitate to contact us at support@decluttr-ai.app.