Privacy Policy

1. Information We Collect

We collect information you provide directly to us when creating an account, making a purchase, or subscribing to product updates (such as email address). To enforce desktop device license limits, our desktop runtime engine verifies a cryptographic machine identifier (hardware ID).

2. Payment Processing & Invoicing

Payment processing is handled entirely by Stripe. We do not process or store raw payment card numbers on our servers. In accordance with UK VAT and statutory accounting rules, transaction records, tax location data, and invoices are preserved for 6 years.

3. Third-Party Service Providers & Sub-processors

We partner with trusted third-party infrastructure providers:

• Stripe: Payment gateway, checkout handling, and fraud detection.
• Supabase: Managed database infrastructure and identity authentication services.
• PostHog: First-party telemetry and aggregated marketplace analytics to improve catalog performance.
• Resend: Transactional delivery of license tokens, order confirmations, and security links.

4. Storage & Session Management

We use browser local storage and session tokens to maintain your authentication state and seamlessly sync licenses between our storefront webview and the Novaframe desktop engine runtime.

5. Data Retention & Account Deletion

You may delete your account at any time through your account settings. Upon deletion, personal identifiers and authentication records are permanently purged. To satisfy UK legal and tax retention requirements, associated purchase logs are decoupled and retained in pseudonymized form.

6. Your Rights & Contact

Under UK GDPR and applicable privacy legislation, you have the right to request access to your personal data, rectify inaccuracies, or request data portability. For privacy inquiries or assistance with account data, contact us at support@novaframe.co.uk.