Privacy policy

Draft document: to be reviewed by a legal professional before commercial launch. Passages marked to be completed must be filled in.

Data controller

Mathieu PENNEGAT, entrepreneur individuel (EI), SIREN 752 782 573, 2 Quily, 35550 Saint-Just, France. Contact: [email protected].

Data processed

Account: last name, first name, email, company (optional), main platform, display language and region, date of acceptance of the terms. Shop: products, purchases, stock, lives, sales, buyers' usernames imported from your files, amounts. Billing: handled by Stripe; Novalive does not store any card number. Technical log: sensitive actions (changes, invitations, support access) for security purposes.

Purposes and legal bases

Providing the service (performance of the contract), billing the subscription (legal obligation), ensuring security and preventing abuse (legitimate interest).

Retention periods

For the lifetime of the account, then period after it is closed, unless deletion is requested. Billing records are kept for 10 years.

Novalive AI assistant

Recommendations (restocking, dormant stock, margins, suppliers, prices) are computed by rules within Novalive, with no third-party service. Natural-language questions are optional and off by default: only the shop owner can turn them on. In that case, the question and aggregated shop figures, limited to the data the user is allowed to see (sales, stock, margins, with no buyer name or address), are sent to the model provider to produce the answer. The assistant changes no data: every action is approved by the user. Specify the retention period applied by the model provider and the safeguards for transfers outside the EU.

Processors

Supabase (database and authentication, hosted in the European Union, Paris), Stripe (payments), Anthropic (Novalive AI assistant questions, only if the owner turns them on), Cloudflare (website and application hosting). Add Cloudflare (anti-bot protection) if Turnstile verification is enabled.

Your rights

Access, rectification, erasure, portability, restriction and objection. From your workspace: data export and deletion request (My account). Otherwise: [email protected]. You may lodge a complaint with your data protection authority (in France, the CNIL).

Your buyers' data

You remain responsible for the customer data you import. Novalive only keeps the information needed to manage orders and never uses it for any other purpose.