Privacy policy

NOVAXIS SARL U, Abidjan, Abobo, rue Roméo Nahounou, Abobo Dokui, Côte d’Ivoire. Contact: ceo@novaxisgroup.tech — +225 05 54 57 84 62. For the data of people who write to your agents, the roles are reversed: you are the controller and Convosia acts as processor. That point is detailed in the DPA.

Account data: name, email, phone number, company, hashed password. Service data: the content of conversations handled by your agents, your contacts’ numbers, files and documents uploaded into the knowledge base. Technical data: sign-in logs, IP address, timestamps, session identifiers, correlation id. Billing data: subscription and usage history.

Providing the service and performing the contract: contractual performance. Billing and accounting: legal obligation. Security, fraud prevention and reliability: legitimate interest. Marketing communications: consent, revocable at any time.

OpenAI, to generate your agents’ answers. Resend, to deliver our transactional email. Meta Platforms Ireland Limited, to deliver messages on your WhatsApp Business number. Hostinger International Ltd, for hosting. Our payment providers, to collect subscriptions. And, only if you connect the matching integration: Slack, for escalation alerts; Google Drive and Airtable, read-only, for the knowledge sources you designate. The up-to-date list, with each provider’s region, is published on our Security page. No data is sold, rented or transferred to a third party for advertising purposes.

Conversations: three years from the last exchange, unless deleted earlier on request. Account data: for the duration of the contract, then three years. Technical logs: twelve months. Webhook deliveries: thirty days. Export archives: deleted automatically when their retention runs out. Accounting records: ten years, as required by applicable law.

Data is hosted with Hostinger International Ltd, in a datacenter located in the United Kingdom. That country is covered by a European Commission adequacy decision, so a transfer of personal data to the United Kingdom requires no additional safeguard. Transfers to other third countries also occur, to the processors named in section 04, several of which are established in the United States; those are covered by the European Commission’s standard contractual clauses.

Your conversations, your documents and those of your contacts are never used to train an AI model, neither by us nor by our providers. This exclusion is contractual and applies to every plan.

You have rights of access, rectification, erasure, restriction, objection and portability. Export and deletion are exercised directly from your account settings, with no email to write: deletion is confirmed by typing your organisation’s name, then carried out seven days later, during which you can reverse it. Other requests go to ceo@novaxisgroup.tech and are handled within thirty days. If you live in the European Union, you may lodge a complaint with your country’s data protection authority.

The site sets only the cookies strictly necessary for the session and for security. No audience-measurement, advertising or third-party tracking cookie is used: that is why no consent banner is shown to you today. The day we added one, it would require your prior consent and would load only after you accepted. The cookie policy details every item stored, why it is there and how long it lasts.