Privacy Policy

Last updated: August 17, 2026

Nova Pixel Analytics ("we", "us", "our") operates the Nova Pixel Analytics marketing and conversion platform (the "Service"). This Privacy Policy describes how we collect, use, process, and safeguard your personal data when you use our website, application, and connected integrations.

1. Data Controller

The data controller responsible for your personal data is Nova Pixel Analytics. If you have any questions about this Privacy Policy or wish to exercise your data privacy rights, please contact our privacy team at support@novapixeldev.com.

2. Personal Data We Collect

• Account and Profile Data: When you register, we collect your name, email address, and a securely hashed password. If you sign in via Google OAuth, we receive your verified Google profile information (name, email address, profile photo URL, and Google user ID).
• Payment and Billing Information: Payment processing is handled entirely by our PCI-compliant payment partner, Stripe, Inc. We never collect, transmit, or store sensitive credit card numbers, CVVs, or full payment details on our servers. We store only customer IDs, subscription IDs, billing status, and quota entitlements returned by Stripe.
• Connected Platform Credentials & Data: When you connect third-party accounts (such as Google Analytics 4, Google Search Console, Meta Ads, WooCommerce, Keap, Mailchimp, ActiveCampaign, Zoom, Wistia, or AddEvent), we securely store encrypted OAuth tokens or API credentials. We query these services on your behalf to retrieve aggregated analytics data (e.g., website traffic, ad performance and spend, orders, revenue, email engagement, and webinar attendance).
• Usage & Technical Data: When accessing the Service, our servers automatically log technical information such as your IP address, browser type, device identifiers, referring URLs, access timestamps, and error logs to ensure security, uptime, and fraud prevention.
• Cookies: We use only strictly necessary first-party cookies for session management, authentication, and cross-site request forgery (CSRF) protection. We do not use third-party advertising or cross-site tracking cookies.

3. How We Use Your Data

• To operate, maintain, and provide the core analytics features of the Service.
• To process your subscriptions, calculate account quotas, and manage billing via Stripe.
• To generate automated AI insights, audits, and performance digests using our AI models (powered by Google Gemini). Your connected data is processed securely and is never used to train generalized third-party machine learning models.
• To send essential transactional notifications, password resets, team invitations, and scheduled email reports you configure.
• To protect against security threats, detect unauthorized access, and comply with legal obligations.

4. Legal Bases for Processing (GDPR / UK GDPR)

We process your personal data under the following legal bases:

• Performance of Contract: Processing is necessary to provide the Service, maintain your account, and deliver reports under our Terms of Service.
• Legitimate Interests: To protect the security and reliability of our platform, prevent abuse, and improve application performance.
• Legal Compliance: Where required by applicable law, tax, or regulatory standards.

5. Security and Encryption

We implement rigorous technical and organizational security measures to protect your data:

• All sensitive third-party OAuth access tokens and API keys are encrypted at rest using industry-standard authenticated encryption (AES-256-GCM).
• All data in transit is protected using Transport Layer Security (TLS 1.2 / TLS 1.3).
• Account passwords are encrypted using strong, salted one-way hashing algorithms (Bcrypt/Argon2).
• We never sell, rent, or trade your personal or marketing data to third parties or data brokers.

6. Sub-processors and Third-Party Services

We work with trusted third-party service providers who process data strictly under our instructions and in compliance with applicable data protection laws:

• Stripe, Inc.: Payment processing, customer portal, and recurring billing.
• Google Cloud Platform & Google Gemini: Cloud hosting infrastructure and AI-assisted report generation.
• SMTP / Email Delivery Services: Transactional system emails and user-configured automated report delivery.

7. Data Retention & Account Deletion

We retain your account data and connected integrations for as long as your account is active. You can disconnect any integration at any time from your account Settings, which immediately deletes the stored encrypted credentials for that integration. If you request account closure, we will delete or irreversibly anonymize your personal data within 30 days, except where retention is required by applicable accounting or tax regulations.

8. Your Rights

Depending on your location (including the European Economic Area, United Kingdom, and various US states), you have the right to: (a) access and receive a copy of your personal data; (b) request correction of inaccurate data; (c) request deletion of your personal data; (d) restrict or object to certain processing; and (e) request data portability. To exercise any of these rights, please contact support@novapixeldev.com.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect improvements to our platform or legal requirements. Any changes will be posted on this page with an updated effective date. Material updates will be communicated through the application or via email.

10. Contact Information

If you have questions or concerns about this policy, please reach out to us at: support@novapixeldev.com.