Privacy Policy

This policy explains how Novarra LLC ("Novarra," "we") handles personal information when you use novarra.studio and our related services. It applies together with our Terms of Service.

1. What we collect

Information you give us

• Account details: your name, email address and profile photo from Google sign-in, or the email address you sign up with.
• Your content: prompts, uploaded images, video and audio, character profiles, series and episode scripts, and the results we generate for you.
• Support messages: what you send us when you email for help.

Information from payments

• Stripe processes your payments. We receive your Stripe customer ID, plan, billing status, renewal and cancellation dates, and the amounts and dates of payments. We don't receive or store your full card number.

Information collected automatically

• Technical data such as your IP address, browser and device type, and the pages and features you use, in our server logs.
• Records of the generations you run, their credit cost and status, and your credit balance and history.

2. How we use it

• To provide the Service: create your account, run generations, store your library, and keep your characters consistent.
• To take payment, manage subscriptions and credits, and send receipts and billing notices.
• To keep the Service safe: screen prompts and uploads, prevent fraud and abuse, enforce our Content policy, and respond to reports.
• To support you and send important messages about your account. We don't send marketing email unless you opt in.
• To understand and improve the Service using aggregated usage information.
• To comply with the law and protect our rights.

Where privacy laws require a legal basis, we rely on performing our contract with you, our legitimate interests in running and securing the Service, your consent (which you can withdraw), and legal obligations.

3. AI processing

When you generate something, we send the prompt and any media it needs (such as character reference images or a start frame) to the AI provider that runs the model you chose, and we store the result in your library. Providers process this data to return your result under their API terms and may run their own safety filters. We may also use Azure OpenAI to improve your prompt, write episode shot lists, and check that characters match their references. We don't use your private content to train AI models, and we don't let others use it for that purpose.

4. Who we share it with

We don't sell or rent your personal information, and we don't share it for targeted advertising. We share it only with:

• Legal and safety: when required by law or to protect the rights, safety or property of our users, the public or Novarra, including reporting child sexual abuse material to the authorities.
• Business changes: if Novarra is involved in a merger, acquisition or sale of assets, personal information may transfer as part of it, under this policy.
• With your permission: for example when you choose to share something publicly.

5. Public content

Your library is private. If you choose Share to Explore, that item, its prompt, the model used and your first name become visible to anyone, and others can start their own creations from the prompt. We may show shared items in Novarra's website and marketing. You can take an item off Explore at any time from your library.

6. Cookies and local storage

• We use one essential cookie (__session) to keep you signed in. It's required for the Service to work.
• Firebase sign-in may store authentication data in your browser.
• We store small interface preferences, such as whether the sidebar is collapsed, in your browser's local storage.
• Stripe sets its own cookies on its checkout pages to process payments and prevent fraud.
• We don't use advertising or cross-site tracking cookies.

7. How long we keep it

• Account information and your library: for as long as your account is open.
• Files you delete: removed from storage right away (backups expire within 30 days). Files a character still uses as a reference are kept until you delete that character.
• Billing and tax records: as long as the law requires, usually up to 7 years.
• Server logs: up to 90 days, unless needed longer to investigate abuse.
• After you delete your account, we delete your personal information and content within 30 days, except what we must keep by law.

8. Deleting your data

1. Delete individual items: open your Library or Assets and delete any video, image or upload. Delete characters from the Characters page.
2. Cancel your plan from Plans & credits if you have one, so you aren't billed again.
3. Delete your whole account: email support@novarra.cloud from the address on your account with the subject "Delete my account." We'll confirm and delete your account, library and personal information within 30 days.
4. Connected apps: if you connected a social account (such as TikTok, Instagram or Facebook), disconnecting it in Novarra deletes the access tokens we store. You can also remove Novarra's access from that platform's own settings.

9. Your rights

Depending on where you live (including under the Texas Data Privacy and Security Act, the California Consumer Privacy Act, and the GDPR or UK GDPR), you may have the right to:

• Know what personal information we have about you and get a copy of it;
• Correct inaccurate information;
• Delete your personal information;
• Get your content in a portable format (you can also download your files directly);
• Opt out of the sale of personal information or targeted advertising (we don't do either);
• Object to or restrict certain processing, and withdraw consent;
• Appeal our decision on a request, and complain to your local data protection authority.

To use these rights, email support@novarra.cloud. We'll verify the request comes from the account owner and respond within the time the law requires (usually 30 to 45 days). You can use an authorized agent where the law allows. We won't treat you differently for using your rights.

10. Security

We use encryption in transit (HTTPS) and at rest, keep secrets in a managed key vault, limit staff access, and give each file a short-lived private link. No system is perfectly secure, so please use a strong sign-in and tell us right away at support@novarra.cloud if you think your account has been compromised.

11. Children

Novarra is for adults 18 and older. We don't knowingly collect personal information from children under 13 (or under 16 where that age applies). If you believe a child has given us personal information, contact us and we'll delete it.

12. Where data is stored

We store your account data and library in the United States (Microsoft Azure). Some AI providers may process data in other countries to generate results. Where the law requires, we use appropriate safeguards for international transfers.

13. Changes and contact

We'll update this policy as the Service changes. If we make material changes, we'll tell you by email or in the app before they take effect. For any privacy question or request, contact Novarra LLC at support@novarra.cloud.

Questions? Email support@novarra.cloud. See also our Terms of Service, Privacy Policy and Content policy.