Privacy Policy

Last updated: 18 October 2026

This Privacy Policy explains how TODO: legal entity name, trading as NovaKite Studio ("we", "us"), handles personal information when you use novakitestudio.com and the products listed on it (the "Services").

1. What we collect

Account details: your email address and, if you sign in with a third-party provider, your name and profile picture.
Payment details: handled by Stripe. We receive your name, email, billing country and the last four digits of your card, never the full card number.
Content you submit: text, files or images you give a product so it can do its job.
Usage data: pages visited, features used, device and browser type, approximate location from your IP address, and error logs.
Messages: anything you send us by email.

2. How we use it

to provide the Services and process payments;
to send receipts, renewal reminders and important service notices;
to answer support requests;
to prevent fraud and abuse, and keep the Services secure;
to understand usage and improve our products.

We do not sell your personal information, and we do not use the content you submit to train AI models.

3. Who we share it with

We share information only with providers who help us run the Services, under contracts that protect it:

Stripe, for payment processing and fraud prevention;
hosting and database providers, to run our websites;
AI model providers, only the content needed to generate your requested output;
email and analytics providers, to send messages and measure usage.

We may also disclose information where required by law or to protect our rights and users.

4. International transfers

Our providers may store or process data outside your country, including in the United States. Where required, we rely on appropriate safeguards such as standard contractual clauses.

5. Cookies

We use essential cookies to keep you signed in and remember your settings, and privacy-friendly analytics to count visits. Where the law requires consent for non-essential cookies, we ask first.

6. How long we keep it

We keep account data while your account is active and delete it within 90 days after you ask us to close it. Payment records are kept as long as tax and accounting laws require. Content you submit is kept only as long as needed to deliver the result, unless you save it to your account.

7. Your rights

Depending on where you live (for example under the GDPR, UK GDPR, California law or the Australian Privacy Act), you may have the right to access, correct, delete or export your personal information, and to object to certain uses. Email [email protected] and we will respond within 30 days. You can also complain to your local data protection regulator.

8. Security

We use encryption in transit, access controls and reputable infrastructure providers. No system is perfectly secure, but we will notify you and the relevant regulators of a serious breach as the law requires.

9. Children

The Services are not directed at children under 16, and we do not knowingly collect their personal information.

10. Changes

We may update this policy. The date at the top shows the latest version; significant changes will be announced.

11. Contact

TODO: legal entity name, TODO: registered business address. Privacy questions:[email protected].