Privacy Policy

This Privacy Policy explains how NovusPraxis ("NovusPraxis", "we", "us", or "our") collects, uses, shares, and protects your personal data when you use our project-management platform and related websites (the "Service"). It also describes the rights you have over your data. By creating an account or using the Service, you agree to the practices described in this policy.

NovusPraxis is the party responsible for the personal data processed through the Service (the "data controller" under applicable law). If you have any questions, you can reach us at any time at support@novuspraxis.app.

1. Information we collect

We collect the following categories of personal data:

Information you give us

• Account data — your name, email address, and the credentials used to authenticate you.
• Profile data — optional details you choose to add, such as a profile picture (avatar), job title, short bio, location, phone number, time zone, and language and display preferences.
• Workspace content — the organizations, workspaces, projects, tasks, comments, chat messages, and files you create or upload while using the Service.
• Billing data — when you subscribe to a paid plan, our payment processor collects your payment details and shares limited information with us (such as a customer identifier, subscription status, and billing cycle). We do not store your full card number.
• Support data — the content of messages you send us through email or our in-app support chat.

Information we collect automatically

• Usage and log data — actions you take in the Service, along with technical details such as your browser, device information, and the date and time of requests.
• IP address — we record the IP address associated with your most recent sign-in to help secure your account.
• Presence data — your online/offline status and last-seen time, so collaborators can see who is active.
• Cookies — see the Cookie Policy for details.

Information from third parties

• Google Sign-In — if you choose to sign in with Google, we receive your name, email address, and profile information from Google, in line with the permissions you grant.

2. How we use your information

We use your personal data to:

• Provide, maintain, and improve the Service.
• Create and secure your account and authenticate you.
• Enable collaboration features such as chat, comments, notifications, and presence.
• Process subscriptions and payments and manage your plan.
• Send you service-related and transactional messages (for example, account, billing, and security notifications), and any notifications you have not opted out of.
• Respond to your support requests.
• Detect, prevent, and address fraud, abuse, security issues, and technical problems.
• Comply with our legal obligations.

3. Legal bases for processing (EEA/UK users)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR:

• Performance of a contract — to provide the Service you have signed up for.
• Legitimate interests — to keep the Service secure, reliable, and improving, where this does not override your rights.
• Consent — where we ask for it, such as certain optional communications. You can withdraw consent at any time.
• Legal obligation — where the law requires us to process or retain data.

4. How we share your information

We do not sell your personal data. We share information only in the following circumstances:

• With service providers (sub-processors) that help us operate the Service, and only to the extent needed to do so. These currently include:
  • Google — sign-in with Google (authentication). Privacy policy.
  • Lemon Squeezy — payment processing and subscription billing, as our merchant of record. Privacy policy.
  • Resend — delivery of transactional and notification emails. Privacy policy.
  • DigitalOcean — cloud hosting and file storage (for example, avatars and uploads). Privacy policy.
  • Crisp — in-app support chat (available on certain plans). Privacy policy.
  • Sentry — error monitoring, configured to exclude personal identifiers such as emails and IP addresses. Privacy policy.
  • Google Analytics — website analytics to understand how the Service is used. Privacy policy.
• Within your organization — content you create is visible to other members of your organization, workspace, or project according to their access level.
• For legal reasons — when required by law, regulation, legal process, or to protect the rights, safety, and property of NovusPraxis, our users, or others.
• Business transfers — if NovusPraxis is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to this policy.

5. International data transfers

We and our service providers may process and store your data in countries other than your own, including the United States. Where we transfer personal data internationally, we rely on appropriate safeguards (such as standard contractual clauses) where required by applicable law.

6. How long we keep your data

We keep your personal data for as long as your account is active and as needed to provide the Service. When you delete content or close your account, records are first soft-deleted (hidden and recoverable by our support team for a limited window) before being permanently removed. We may retain certain information for longer where required to comply with legal obligations, resolve disputes, or enforce our agreements.

7. How we protect your data

We use technical and organizational measures to protect your data, including encryption of data in transit (HTTPS), access controls, signed URLs for private files, and error monitoring configured to exclude personal identifiers. No method of transmission or storage is completely secure, but we work to protect your information and to address vulnerabilities responsibly.

8. Your privacy rights

Depending on where you live, you may have some or all of the following rights over your personal data:

• Access — request a copy of the data we hold about you.
• Correction — ask us to fix inaccurate or incomplete data.
• Deletion — ask us to delete your data.
• Portability — receive your data in a portable format.
• Objection and restriction — object to or restrict certain processing.
• Withdraw consent — where processing is based on consent.

If you are in the European Economic Area or the UK, you also have the right to lodge a complaint with your local data protection authority. If you are a California resident, you have the right to know what personal information we collect, to request its deletion, and not to be discriminated against for exercising your rights; we do not sell your personal information.

9. Exercising your rights

You can update much of your information directly in your account settings. To exercise any of the rights above, email us at support@novuspraxis.app. We will respond within the time required by applicable law. We may need to verify your identity before acting on your request.

10. Children's privacy

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of the Service after an update means you accept the revised policy.

12. Contact us

If you have any questions or concerns about this policy or how we handle your data, email us at support@novuspraxis.app.