Privacy Policy

We collect the following categories of information:

• Account information. When you sign up, our authentication provider (Clerk) collects your name, email address, and profile image so we can create and secure your account.
• Documents you upload. The PDF files you upload — or import from Google Drive — are stored so you can chat with them. We extract their text to generate the responses you request.
• Chat content. The questions you ask and the answers generated are stored so your conversation history is available to you.
• Google Drive data (optional). If you choose to connect Google Drive, we access the list of PDF files in your Drive and the contents of the specific files you select to import.
• Usage and technical data. Standard log and device information needed to operate, secure, and improve the Service.

• To provide, maintain, and secure the Service.
• To process your documents — extracting text, generating embeddings, and producing answers to your questions.
• To manage your account, subscription, and billing.
• To respond to your requests and provide support.

We do not sell your personal information, and we do not use the contents of your documents or Google Drive data for advertising.

NovaxEducation's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only access your Google Drive files to let you browse and import PDFs into the Service, at your direction.
• We do not transfer Google user data to third parties except as necessary to provide the Service, comply with law, or with your consent.
• We do not use Google user data for advertising, and we do not allow humans to read your Google data unless we have your consent for specific files, it is necessary for security or to comply with law, or the data has been aggregated and anonymized.

You can revoke NovaxEducation's access to your Google account at any time at myaccount.google.com/permissions.

We rely on the following providers to operate the Service. Each processes data only as needed to provide their function:

• Clerk — authentication and account management.
• Neon — database hosting (accounts, files, messages).
• UploadThing — secure file storage for your PDFs.
• Google (Gemini API) — generating embeddings and answers from your document content.
• Pinecone — storing document embeddings to power search.
• Monime — mobile money payment processing for paid plans.

We retain your documents, embeddings, and chat history for as long as your account is active. You can delete any file at any time from your dashboard, which removes the file and its associated embeddings. To delete your entire account and all associated data, contact us at support@novaxailab.com.

We use industry-standard measures to protect your information, including encrypted connections (HTTPS) and reputable infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on your location, you may have the right to access, correct, export, or delete your personal data. To exercise these rights, contact us at support@novaxailab.com.

The Service is not directed to children under 13, and we do not knowingly collect personal information from them.

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above when we do, and material changes will be communicated through the Service.

If you have questions about this Privacy Policy, contact us at support@novaxailab.com.