Privacy Policy

1. Introduction

Welcome to Novicite ("we", "our", or "us"). We are committed to safeguarding the privacy of our users, enterprise clients, and website visitors. This Privacy Policy explains our data collection, processing, storage, and retention practices in compliance with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and applicable global privacy laws.

2. Information We Collect

We collect information in the following categories:

• Account & Authentication Data: Email address, name, and user ID provided via Google OAuth or Firebase Authentication.
• Audit & Workspace Inputs: Domain URLs, brand names, target keywords, and competitor domains submitted for Generative Engine Optimization audits.
• Telemetry & Agent Analytics Data: When clients install the novicite-tag.js snippet or forward server logs, our ingestion pipeline processes incoming HTTP request metadata (User-Agent string, referring host, requested path, and IP address) solely to identify AI web crawlers (e.g. GPTBot, ClaudeBot, PerplexityBot) versus human traffic.
• Billing Data: Transaction tokens, subscription tiers, and payment IDs processed securely via our payment gateway (Razorpay). We do not store raw credit card or banking numbers on our servers.

3. How We Use and Process Data

We process collected data exclusively for the following lawful purposes:

• To deliver, maintain, and optimize the Novicite dashboard and GEO auditing services.
• To analyze AI search bot traffic trends and generate aggregated, anonymized crawler intelligence.
• To comply with statutory financial, taxation, and billing obligations.

Sub-Processors & AI Infrastructure: To generate real-time perceptions and vector embeddings, user audit queries are processed via enterprise API sub-processors (including Groq, SerpAPI, Firecrawl, Exa AI, and Google Cloud). Sub-processors do not use customer audit queries to train public foundation models.

4. Your Rights Under GDPR & CCPA

Depending on your jurisdiction, you possess the following data privacy rights:

• Right to Access & Portability: Request an export of your stored audit history and account metadata.
• Right to Rectification: Correct any inaccurate or incomplete personal records.
• Right to Erasure (Right to be Forgotten): Permanently delete your account and all associated workspace data at any time via Settings or by submitting a request.
• Right to Restrict or Object to Processing: Opt out of optional analytics tracking.

5. Security & Contact Information

We employ TLS 1.3 encryption in transit, strict Firestore security rules, and encrypted database storage. For data privacy requests or to exercise your GDPR/CCPA rights, please contact our Data Protection Officer at privacy@novicite.com.