Privacy Policy | Sanctuary by Nov Pax

1. Introduction

Welcome to Nov Pax ("Company", "we", "our", "us"). We are committed to protecting your personal information and your privacy. This Privacy Policy applies to all information collected through our website and our digital wellness application, Paxai (collectively, the "Services").

By accessing or using our Services (including joining our early-access flow or participating in our Beta program), you agree to this Privacy Policy.

2. Information We Collect

We collect information that falls into three categories:

A. Personal Information You Disclose to Us

We collect personal information that you voluntarily provide when you express interest in our products or services, when you participate in activities on the Services (such as the Beta Program), or otherwise when you contact us.

Identity Data: Name, email address.
Authentication Data: Securely hashed and salted passwords, and similar security information.
Beta Feedback: Text responses, bug reports, and survey answers provided during the testing phase.

B. Information Automatically Collected

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact details) but may include device and usage details.

Log and Usage Data: Service-related, diagnostic, usage, and performance information (e.g., time of access, pages viewed, clicks).
Device Data: IP address, browser type, device settings, operating system, and language preferences.
Location Data: General location data (such as city/state) derived from IP addresses.

C. Wellness & Usage Data (App Specific)

As a digital wellness platform, Paxai may process information about your usage habits (e.g., session times, focus duration) to provide analytics. We do not sell this information. It is used strictly to visualize your progress within the app.

3. How We Use Your Information

We process this information for purposes based on legitimate business interests, the fulfillment of our contract with you, compliance with our legal obligations, and/or your consent.

To facilitate account creation and logon process.
To manage early-access signup: To send updates or invite access when a spot opens.
To improve the Paxai Algorithm: We use aggregated, anonymized usage insights to refine our wellness algorithms.
To send administrative updates: We may send product, service, and new feature updates and details about changes to our terms, conditions, and policies.
To protect our Services: For fraud monitoring and prevention (e.g., blocking disposable emails or bot traffic).

4. How We Share Your Information

We only share information with the following third parties who help us operate the Services:

Cloud Infrastructure: Vercel (Hosting) and Supabase (Database & Auth).
Analytics Providers: Vercel Analytics (for website performance).
Legal Obligations: We may disclose this information where we are legally required to do so in order to comply with applicable law, governmental requests, or a judicial proceeding.

We do not sell, rent, or trade personal data to third parties for marketing purposes.

5. Data Retention & Beta Specifics

Beta Data: Please note that data generated during the v0.1 / Beta Phase may be temporary. We reserve the right to wipe database entries during major version updates.
General Retention: We will only keep personal data for as long as it is necessary for the purposes set out in this privacy policy.

6. Security of Your Information

We use administrative, technical, and physical security measures to protect personal data. These measures include SSL encryption, secure database storage via Supabase (PostgreSQL), and limited access protocols. However, please also remember that we cannot guarantee that the internet itself is 100% secure.

7. Your Privacy Rights

Depending on your location (including users in the EEA, UK, California, or Florida), you may have certain rights regarding personal data:

Right to Access: Request a copy of the data we hold about you.
Right to Deletion: Request that we delete personal data (e.g., remove your early-access signup information).
Right to Opt-Out: You can unsubscribe from our marketing emails at any time by clicking the "unsubscribe" link in the emails we send.

To exercise these rights, please contact us at privacy@novpax.org.

8. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals.