Privacy Policy

Who we are

Novell ("we," "us," or "our") designs and builds websites, provides SEO and digital operations services, and manages ongoing site care for small and growing businesses. This policy explains how we handle information collected through our website and services.

Information we collect

Information you provide

• Contact form submissions — name, email address, business name, message, and service interests when you reach out through our website.
• Project communications — information shared during discovery calls, emails, and project collaboration.
• Client portal data — annotations, feedback, and review comments submitted through our project review system.

Information collected automatically

• Usage data — pages visited, time on site, referral source, and general interaction patterns.
• Device information — browser type, operating system, and screen resolution for ensuring our sites display correctly.

Information we do not collect

• We do not collect passwords, payment card numbers, or financial account details through our website.
• We do not use tracking cookies for advertising or sell your data to third parties.
• We do not collect sensitive personal data (health information, government IDs, etc.).

How we use your information

• To respond to your inquiries and communicate about projects.
• To deliver and improve our services.
• To send project updates, milestone notifications, and review requests.
• To maintain site security and prevent abuse.

We do not send marketing emails unless you have an active project or have explicitly opted in.

How we protect your information

• All data is transmitted over HTTPS (TLS encryption).
• Client project data is stored with row-level security policies — each client can only access their own project data.
• We do not store credentials. Technical access to client systems is managed through password managers (1Password) or direct admin invitations.
• Our hosting infrastructure (Vercel) provides DDoS protection, automatic SSL, and SOC 2 Type II compliance.

Third-party services

We use the following services to operate:

• Vercel — website hosting and deployment.
• Supabase — database and authentication for our client portal.
• Resend — transactional email delivery (project notifications, form confirmations).
• Google Fonts — typography (no tracking cookies).

Each service has its own privacy policy. We select services that meet reasonable security and privacy standards.

Data retention

• Contact form submissions — retained for the duration of a potential or active client relationship, then deleted.
• Project data — retained for the life of the project plus 12 months after completion for reference, then deleted upon request.
• Prospect data — publicly available business information (from Google Business Profiles) used for outreach. Deleted upon request.

Your rights

You can request to:

• Access the personal data we hold about you.
• Correct inaccurate information.
• Delete your data (subject to legal obligations).
• Opt out of any marketing communications.

To exercise these rights, contact us at the email address below.

Children's privacy

Our services are not directed at individuals under 18. We do not knowingly collect information from children.

Changes to this policy

We may update this policy as our practices evolve. Material changes will be posted on this page with an updated date. We will not reduce your rights under this policy without your consent.

Contact

Questions about this policy? Reach us at:

Email: hello@novell.site