Privacy Policy

Introduction

Novyrix ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

By using our Service, you consent to the data practices described in this policy. If you do not agree with our policies and practices, please do not use our Service.

1. Information We Collect

1.1 Personal Information

We collect personal information that you voluntarily provide when you:

• Register an account: Name, email address, phone number, company name
• Request a quote: Project details, budget information, timeline requirements
• Contact us: Name, email, phone number, message content
• Use calculators: Business information, project specifications, feature selections
• Make payments: Billing address, payment information (processed through secure third-party payment processors)

1.2 Automatically Collected Information

When you access our Service, we automatically collect:

• Usage Data: Pages visited, time spent on pages, links clicked, features used
• Device Information: IP address, browser type, operating system, device type
• Cookies and Tracking: Session identifiers, preferences, authentication tokens
• Performance Data: Page load times, errors encountered, system diagnostics

1.3 Information from Third Parties

We may receive information about you from:

• Authentication providers (if you sign in through third-party services)
• Payment processors
• Business partners or affiliates (with your consent)

2. How We Use Your Information

We use the information we collect to:

2.1 Provide Services

• Create and manage your account
• Process and respond to quote requests
• Deliver software development and automation services
• Provide customer support and respond to inquiries
• Process payments and manage invoices

2.2 Improve Our Service

• Analyze usage patterns and optimize user experience
• Develop new features and functionality
• Conduct research and analytics
• Monitor and troubleshoot technical issues

2.3 Communication

• Send transactional emails (quote confirmations, project updates)
• Provide customer support and respond to requests
• Send service announcements and updates
• Send marketing communications (with your consent, opt-out available)

2.4 Legal and Security

• Comply with legal obligations and enforce our Terms of Service
• Protect against fraud, abuse, and security threats
• Resolve disputes and enforce agreements

3. Data Storage and Security

3.1 Data Storage

Your data is stored securely in our MySQL database hosted by trusted cloud infrastructure providers. We implement industry-standard security measures including:

• Encrypted data transmission (SSL/TLS)
• Encrypted data storage
• Regular security audits and updates
• Access controls and authentication
• Regular backups and disaster recovery procedures

3.2 Data Retention

We retain your information for as long as:

• Your account is active
• Needed to provide services or fulfill contractual obligations
• Required by law or for legitimate business purposes
• Necessary to resolve disputes or enforce agreements

Upon account deletion or termination, we will delete or anonymize your personal data within 30 days, unless retention is required by law.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Essential Cookies: Required for authentication, security, and core functionality
• Analytics Cookies: Help us understand how you use our Service and improve user experience
• Preference Cookies: Remember your settings and preferences

You can control cookie preferences through your browser settings. However, disabling essential cookies may limit your ability to use certain features of the Service.

We use NextAuth.js for authentication which stores session tokens in secure HTTP-only cookies. These cookies are essential for maintaining your logged-in state.

5. Third-Party Services

Our Service integrates with the following third-party services:

These third-party services have their own privacy policies and data practices. We encourage you to review their policies before using our Service.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information:

6.1 With Your Consent

We may share information with third parties when you explicitly consent.

6.2 Service Providers

We share information with trusted service providers who help us operate our business (hosting, email, payment processing). These providers are contractually obligated to protect your data.

6.3 Legal Requirements

We may disclose information if required by law or in response to:

• Legal processes (court orders, subpoenas)
• Government requests or investigations
• Protection of our rights, property, or safety
• Prevention of fraud or illegal activities

6.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change in ownership.

7. Your Rights and Choices

You have the following rights regarding your personal information:

7.1 Access and Portability

You can access and download your personal information through your account settings or by contacting us.

7.2 Correction and Update

You can update your profile information at any time through your account settings.

7.3 Deletion

You can request deletion of your account and personal data. Some information may be retained as required by law or for legitimate business purposes (e.g., transaction records).

7.4 Marketing Communications

You can opt out of marketing emails by clicking the unsubscribe link in any marketing email or by updating your email preferences in account settings.

7.5 Data Protection Rights (GDPR Compliance)

If you are in the European Economic Area, you have additional rights:

• Right to object to data processing
• Right to restrict processing
• Right to lodge a complaint with a supervisory authority
• Right to withdraw consent at any time

8. International Data Transfers

Our primary operations are based in Kenya. However, some of our service providers may be located in other countries. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

9. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy on our website
• Sending an email notification to registered users
• Displaying a prominent notice on the Service

The "Last Updated" date at the top indicates when the policy was last revised. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your privacy-related inquiries within 30 days of receipt.

12. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to access your personal information
• Right to request deletion of personal information
• Right to equal service and price (non-discrimination)

Note: We do not sell personal information to third parties.

13. Data Security Measures

We implement comprehensive security measures including:

• Encryption in transit (HTTPS/TLS) and at rest
• Secure authentication with bcrypt password hashing
• Regular security audits and vulnerability assessments
• Access controls and role-based permissions
• Monitoring and logging of security events
• Incident response procedures
• Employee training on data protection

While we implement robust security measures, no system is completely secure. We cannot guarantee absolute security, but we are committed to protecting your information using industry best practices.