Privacy Policy

Last updated: 19.09.2026

1. Data controller

This Privacy Policy describes how NOVANTUM SIA (hereinafter referred to as “We,” “the Application”) collects, uses, and protects your information. We value your trust and are committed to ensuring the security and confidentiality of your data.

NOVANTUM SIA
Reg. No.: 40203703421
Email: support@novantum.app

2. What data do we collect?

  • Account information: Email address, name/company name (to ensure access and billing).
  • Subscription plan information (free, Pro or Premium). This data is received from our authorization server (novantum.lv).
  • Payment data: We do not store full credit card details. Payments are processed by our certified partner Stripe. We only receive confirmation of a successful transaction and subscription status.
  • Business data (your files): Uploaded Excel/CSV files are processed and stored only in your browser (IndexedDB) and are not sent to our server. We have no access to this data.
  • Store connection (WooCommerce, Shopify): Orders from your store reach your browser through our proxy server and are processed and stored there. The proxy server stores neither the orders nor your store access keys — the keys are kept in your browser. If an error occurs, the server log records only technical error details, never order content.
  • Technical data: IP address, device and browser type, visit statistics and page load speed measurements. On our website (novantum.lv and analytics.novantum.app) we use Google Analytics (see section 4); in the app dashboard.novantum.app we use Vercel Web Analytics and Vercel Speed Insights, without cookies (see the end of section 4). This does not include the content of your business data.

3. How do we use the data?

We only use your personal data:

  • To ensure the functioning of the Service (authentication).
  • To process payments.
  • To communicate with you about system updates (you can opt out of marketing emails).

4. Website analytics (Google Analytics)

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited (“Google”). It helps us understand how visitors use our website novantum.lv and analytics.novantum.app (for example, which buttons are clicked most often and how long visitors stay on a page), so that we can improve the user experience.

What data do we send to Google Analytics?

  • An anonymised IP address (to determine approximate geographic location, e.g., country/city).
  • Device and browser information.
  • Activity on the website (page views, clicks).

Important: Google Analytics has no access to and does not process the content of your uploaded business data files (financial data or customer names in CSV/Excel files). This data remains only on your device.

Google may use the collected data to contextualise and personalise the ads of its own advertising network. You can opt out of Google Analytics tracking by rejecting analytics cookies in our cookie banner or by installing the Google Analytics Opt-out Browser Add-on.

More information: Google Privacy Policy.

App analytics (Vercel)

Google Analytics is not used in the app dashboard.novantum.app. Visits there are measured by Vercel Web Analytics without cookies: the page address without parameters, the site you came from, approximate location (country, region, city), browser, device and operating system, plus one event, “store connected”, with the platform only (WooCommerce or Shopify) — without the store address, name or data. Vercel recognises a repeat visit by a one-way code that is discarded after 24 hours; we see only aggregated statistics. App performance is measured by Vercel Speed Insights. More details: section 4 of the app’s privacy policy.

5. Artificial Intelligence (AI) and Data Sharing

The app offers features powered by artificial intelligence (Google Gemini API), such as “Data Engine,” “AI Insights,” and “Strategy Planner.”

  • How it works: When you use AI features, only summaries (such as monthly revenue, shares, top lists, combinations of products bought together) are sent to the Google Gemini API. Customer, product, product group and manufacturer names are replaced with codes (e.g., Product_1) in your browser before sending, and are decoded back in the AI response only in your browser. Invoice numbers, customer emails, phone numbers and VAT numbers are not sent to AI.
  • Requests to the Gemini API pass through our server, which does not store their content. Only the number of AI requests is counted, to apply plan limits.
  • In the AI chat, the question you type is sent exactly as you wrote it. Do not enter personal data you do not want to share with AI.
  • Your control: AI requests are sent when you press an AI button, open an AI explanation window or ask a question in the AI chat. They are sent automatically only if you turn on AI monitoring in the notifications panel yourself (off by default).
  • Data usage: We use the paid tier of the Gemini API. Under the Gemini API terms, Google does not use these requests or responses to improve its products, including training its models; they are logged only to detect abuse and to meet legal requirements.

6. Google API Services User Data Policy

The use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Your rights

Under the General Data Protection Regulation (GDPR), you have the right to:

  • Access your personal data (account information).
  • Request the deletion of your data (by deleting your account and clearing your browser data).
  • Object to the processing of your data.

You have the right to request access to your data, correct it, or delete your account (“Right to be forgotten”). To delete your data, please write to support@novantum.app.

8. Contact information

If you have any questions about this policy or your data, don’t hesitate to get in touch with us: Email: support@novantum.app