Privacy Policy

Policy date: March 4, 2026

Novita AI (together with our affiliates, "we", "our" or "us") respect your privacy and are strongly committed to keeping secure any information we obtain from you or about you.

This Privacy Policy describes our practices with respect to Personal Information we collect from or about you when you use our website and services (collectively, "Services"). This Privacy Policy does not apply to content that we process on behalf of customers while providing services. Our use of that data is governed by our customer agreements covering access to and use of those offerings.

Personal Information We Collect

We collect information that alone or in combination with other information in our possession could be used to identify you ("Personal Information") as follows:

Personal Information You Provide

We may collect Personal Information if you create an account to use our Services or communicate with us as follows:

  • Account Information: When you create an account with us, we will collect information associated with your account, including your name, contact information, account credentials, payment card information, and transaction history (collectively, "Account Information").
  • User Content: When you use our Services, we may collect Personal Information that is included in the content you provide to our Services, such as file uploads, documents, images, product interaction data, or feedback (collectively referred to as "Content"). This collection is necessary for you to use our products as intended.
  • Communication Information: If you communicate with us, we may collect your name, contact information, and the contents of any messages you send ("Communication Information").

Personal Information We Receive Automatically From Your Use of the Services

When you visit, use, and interact with the Services, we may receive the following information about your visit, use, or interactions ("Technical Information"):

  • Log Data: Information that your browser automatically sends whenever you use our website ("log data"). Log data includes your Internet Protocol address, browser type and settings, the date and time of your request, and how you interacted with our website.
  • Usage Data: We may automatically collect information about your use of the Services, such as the types of content that you view or engage with, the features you use and the actions you take, as well as your time zone, country, the dates and times of access, user agent and version, type of computer or mobile device, computer connection, IP address, and the like.
  • Device Information: Includes the name of the device, operating system, and browser you are using. Information collected may depend on the type of device you use and its settings.
  • Cookies: We use cookies to operate and administer our Services, and improve your experience on it. A "cookie" is a piece of information sent to your browser by a website you visit. You can set your browser to accept all cookies, to reject all cookies, or to notify you whenever a cookie is offered so that you can decide each time whether to accept it. However, refusing a cookie may in some cases preclude you from using, or negatively affect the display or function of, a website or certain areas or features of a website.
  • Analytics: We may use a variety of online analytics products that use cookies to help us analyze how users use our Services and enhance your experience when you use the Services.

Categories of Personal Information Collected (CCPA Disclosure)

In accordance with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), we have collected the following categories of personal information from consumers within the last twelve (12) months:

CategoryExamplesCollected
IdentifiersReal name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiersYES
Personal information categories listed in the California Customer Records statuteName, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance informationYES
Protected classification characteristics under California or federal lawAge (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information)NO
Commercial informationRecords of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendenciesYES
Biometric informationGenetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise dataNO
Internet or other similar network activityBrowsing history, search history, information on a consumer's interaction with a website, application, or advertisementYES
Geolocation dataPhysical location or movementsNO
Sensory dataAudio, electronic, visual, thermal, olfactory, or similar informationNO
Professional or employment-related informationCurrent or past job history or performance evaluationsNO
Non-public education informationEducation records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary recordsNO
Inferences drawn from other personal informationProfile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudesYES

How We Use Personal Information

The Personal Information will not be used for model training. Its primary purposes are as follows:

  • To provide, administer, maintain and/or analyze the Services;
  • To improve our Services and conduct research;
  • To communicate with you;
  • To prevent fraud, criminal activity, or misuses of our Services, and to ensure the security of our IT systems, architecture and networks;
  • To comply with legal obligations and legal process and to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or other third parties.

Business or Commercial Purposes for Collecting Personal Information

We collect and use your personal information for the following business or commercial purposes:

  • Providing Services: To provide, maintain, and improve our Services, including to process transactions and authenticate users.
  • Communication: To communicate with you about your account, our Services, and promotional offers.
  • Security: To detect, investigate, and prevent fraudulent transactions and other illegal activities and protect the rights and property of Novita AI and others.
  • Compliance: To comply with legal obligations and respond to lawful requests from government authorities.
  • Personalization: To personalize your experience and deliver content and product offerings relevant to your interests.
  • Research and Development: To conduct research and analysis to improve our Services and develop new products and features.

Aggregated or De-Identified Information

We may aggregate or de-identify Personal Information and use the aggregated information to analyze the effectiveness of our Services, to improve and add features to our Services, to conduct research and for other similar purposes. In addition, from time to time, we may analyze the general behavior and characteristics of users of our Services and share aggregated information like general user statistics with third parties, publish such aggregated information or make such aggregated information generally available. We may collect aggregated information through the Services, through cookies, and through other means described in this Privacy Policy. We will maintain and use de-identified information in anonymous or de-identified form and we will not attempt to reidentify the information.

Disclosure of Personal Information

In certain circumstances, we may provide your Personal Information to third parties without further notice to you, unless required by the law:

Categories of Third Parties with Whom We Share Personal Information

We share your personal information with the following categories of third parties:

Category of Third PartyPurpose of SharingCategories of Personal Information Shared
Service ProvidersTo assist us in meeting business operations needsAll categories listed above as needed for specific services
Analytics ProvidersTo analyze usage and improve our ServicesIdentifiers, Internet activity, Usage data
Payment ProcessorsTo process paymentsAccount Information, Payment information
Cloud Storage ProvidersTo store data securelyAll categories as needed
Legal and Regulatory AuthoritiesTo comply with legal obligationsAs required by law

Specific Disclosures

  • Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may provide Personal Information to vendors and service providers, including providers of hosting services, cloud services, and other information technology services providers, event management services, email communication software and email newsletter services, and web analytics services. Pursuant to our instructions, these parties will access, process, or store personal information only in the course of performing their duties to us.
  • Business Transfers: If we are involved in strategic transactions, reorganization, bankruptcy, receivership, or transition of service to another provider (collectively a "Transaction"), your Personal Information and other information may be disclosed in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or affiliate as part of that Transaction along with other assets.
  • Legal Requirements: If required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, including to meet national security or law enforcement requirements, (ii) protect and defend our rights or property, (iii) prevent fraud, (iv) act in urgent circumstances to protect the personal safety of users of the Services, or the public, or (v) protect against legal liability.
  • Affiliates: We may disclose Personal Information to our affiliates, meaning an entity that controls, is controlled by, or is under common control with us. Our affiliates may use the Personal Information we share in a manner consistent with this Privacy Policy.

Sale or Sharing of Personal Information

We do not sell your personal information for monetary consideration. However, under the CCPA, "sale" is broadly defined to include making personal information available to third parties for monetary or other valuable consideration. We may share personal information with third parties for purposes such as analytics and advertising, which may be considered a "sale" under CCPA.

In the preceding 12 months, we have shared the following categories of personal information with third parties for business purposes:

  • Identifiers
  • Internet or other electronic network activity information
  • Geolocation data

Your Rights and Choices

California Consumer Privacy Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months.
  • Right to Delete: You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions.
  • Right to Correct: You have the right to request correction of inaccurate personal information that we maintain about you.
  • Right to Opt-Out of Sale/Sharing: You have the right to direct us to not sell or share your personal information to third parties.
  • Right to Limit Use of Sensitive Personal Information: You have the right to limit the use and disclosure of your sensitive personal information.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

How to Exercise Your Rights

To exercise your rights under CCPA, please submit a verifiable consumer request to us by either:

  • Emailing us at: privacy@novita.ai
  • Calling our toll-free number: 1-800-NOVITA-AI (1-800-668-4822)

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may only make a verifiable consumer request for access or data portability twice within a 12-month period.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

Response Timing and Format

We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing.

Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

Other Jurisdictional Rights

Depending on your location, individuals in the EEA, the UK, and across the globe may have certain statutory rights in relation to their Personal Information. For example, you may have the right to:

  • Access your Personal Information.
  • Delete your Personal Information.
  • Correct or update your Personal Information.
  • Transfer your Personal Information elsewhere.
  • Withdraw your consent to the processing of your Personal Information where we rely on consent as the legal basis for processing.
  • Object to or restrict the processing of your Personal Information where we rely on legitimate interests as the legal basis for processing.

You can exercise some of these rights through your Account. If you are unable to exercise your rights through your account, please send your request to: support@novita.ai.

Do Not Sell or Share My Personal Information

If you are a California resident, you have the right to opt-out of the "sale" or "sharing" of your personal information. To exercise this right, you may:

  • Click the "Do Not Sell or Share My Personal Information" link on our website footer
  • Submit a request through our Privacy Rights Portal
  • Email us at privacy@novita.ai

We will process your opt-out request within 15 business days. Once you opt-out, we will wait at least 12 months before asking you to opt-in to the sale of your personal information.

Children's Privacy

Our Service is not directed to children who are under the age of 18. We do not knowingly collect Personal Information from children under the age of 18. If you have reason to believe that a child under the age of 18 has provided Personal Information to us through the Service please email us at: support@novita.ai. We will investigate any notification and, if appropriate, delete the Personal Information from our systems.

Special Notice for California Minors: If you are under 16 years of age, reside in California, and have a registered account with our Services, you have the right to request removal of unwanted content that you publicly post on the Services. To request removal of such content, please contact us using the contact information provided below and include a detailed description of the content. Please be aware that such a request does not ensure complete or comprehensive removal of the content posted, and the law may not require removal in certain circumstances.

Links to Other Websites

The Service may contain links to other websites not operated or controlled by us, including social media services ("Third Party Sites"). The information that you share with Third Party Sites will be governed by the specific privacy policies and terms of service of the Third Party Sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the Third Party Sites directly for information on their privacy practices and policies.

Security and Retention

Security Measures

We implement commercially reasonable technical, administrative, and organizational measures to protect Personal Information both online and offline from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or email transmission is ever fully secure or error free. In particular, email sent to or from us may not be secure. Therefore, you should take special care in deciding what information you send to us via the Service or email. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Service, or third party websites.

Data Retention

We retain your Personal Information for only as long as we need in order to provide our Service to you, or for other legitimate business purposes such as resolving disputes, safety and security reasons, or complying with our legal obligations. How long we retain Personal Information will depend on a number of factors, such as the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, our purpose for processing the information, and any legal requirements.

Specific Retention Periods:

  • Account Information: Retained for as long as your account is active plus 7 years for legal and tax purposes
  • Transaction History: Retained for 7 years for accounting and tax compliance
  • Communication Information: Retained for 3 years from last communication
  • Technical Information: Retained for 2 years for security and analytics purposes

We may also anonymize or de-identify your Personal Information (so that it can no longer be associated with you) for research or statistical purposes, as described above, in which case we may use this information indefinitely without further notice to you.

Changes to the Privacy Policy

We may change this Privacy Policy at any time. When we do, we will post an updated version on this page, unless another type of notice is required by applicable law. By continuing to use our Service or providing us with Personal Information after we have posted an updated Privacy Policy, or notified you by other means, you consent to the revised Privacy Policy.

Annual Review: We review this privacy policy at least once every 12 months and update it as necessary to reflect changes in our data practices or legal requirements.

How to Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: support@novita.ai

If you have any questions or concerns not already addressed in this Privacy Policy, please contact us using the information above.