Privacy Policy

1. Who We Are and Roles

NovaStores is a multi-tenant e-commerce platform that enables Store Owners to create and manage online stores, products, orders, and staff accounts using web technologies including single-page applications and AI-assisted tools.

Depending on how you interact with NovaStores, different parties are responsible for your personal data:

• Visitors to the NovaStores website and platform: NovaStores is the data controller for information collected directly by us.
• Customers of a Store Owner (shoppers): The Store Owner is primarily responsible (data controller) for your personal data. NovaStores processes your data on behalf of the Store Owner as a service provider / data processor.
• Store Owners and their staff or managers: NovaStores is the data controller for information related to your NovaStores platform account, and a data processor for information you upload about your customers.

If you have questions about how your data is handled by a specific store, please contact the Store Owner directly.

2. Information We Collect

We may collect the following categories of information, depending on how you use NovaStores:

3. How We Use Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the NovaStores platform and related services.
• To enable Store Owners to create, configure, and manage their online stores and staff accounts.
• To process and fulfill orders, payments, and customer requests on behalf of Store Owners.
• To provide AI-powered features, such as product content generation, search, and recommendations.
• To personalize and improve our services, user experience, and platform performance.
• To communicate with you about your account, security alerts, updates, and support.
• To protect the security and integrity of our systems, prevent fraud, and enforce our terms.
• To comply with legal obligations and respond to lawful requests from authorities.

4. Legal Bases (Where Applicable)

Where required by applicable law (for example, under the EU/UK General Data Protection Regulation), we rely on one or more of the following legal bases:

• Your consent (e.g., for certain cookies or marketing communications).
• Performance of a contract (e.g., to provide the NovaStores service to Store Owners).
• Compliance with legal obligations.
• Legitimate interests, such as improving our services, securing our platform, and supporting Store Owners, provided these interests are not overridden by your rights and interests.

5. Cookies and Similar Technologies

NovaStores and our partners may use cookies, web beacons, local storage, and similar technologies to:

• Keep you signed in and maintain session security.
• Remember your preferences and store settings.
• Measure traffic, usage, and performance.
• Deliver and measure the effectiveness of marketing campaigns (where permitted).

You can control cookies through your browser settings and, where required, through our cookie banner or preference center. Blocking certain cookies may affect the functionality of the platform or stores.

6. How We Share Information

We may share information in the following circumstances:

• With Store Owners: Customer and order data is shared with the relevant Store Owner operating the store you interact with.
• With staff and managers within a store: Account, order, and operational data may be visible to authorized staff according to the permissions configured by the Store Owner.
• With service providers: We engage third-party providers for hosting, payment processing, email delivery, analytics, AI services, fraud detection, and other business functions. These providers may access personal data only to perform services on our behalf and are bound by contractual obligations to protect it.
• For legal reasons: We may disclose information if required by law or in good faith belief that such action is necessary to comply with legal obligations, protect our rights or property, or prevent harm.
• Business transfers: In connection with a merger, acquisition, restructuring, or sale of assets, your information may be transferred as part of that transaction, subject to appropriate protections.

7. Data Isolation and Security

NovaStores operates multiple independent online stores on a shared platform infrastructure. Each store's data (including customer information, orders, products, and business settings) is strictly isolated and protected through comprehensive security measures.

We implement technical and organizational safeguards to ensure that:

• Each store can only access its own data and customers.
• Store owners and their authorized staff cannot view or access data from other stores.
• Robust access controls prevent unauthorized cross-store data access.
• All data queries and operations are automatically scoped to the appropriate store context.

8. AI Features and Data Use

NovaStores offers AI-powered features, such as automated product descriptions, content suggestions, search, and recommendations. When you use these features, your inputs and generated outputs may be processed by NovaStores and certain third-party AI providers.

• We do not intend to use AI inputs and outputs to train models in a way that identifies you personally, unless we have your consent or are permitted by law after appropriate anonymization or aggregation.
• Store Owners are responsible for how they use AI-generated content in their stores and for ensuring it complies with applicable laws.

9. Data Retention and Account Deletion

We retain personal data for as long as necessary to provide the services, fulfill the purposes described in this policy, and comply with legal and accounting obligations.

Account Deletion Request:

You have the right to request the deletion of your account and associated personal data at any time. Mobile App Users: You can initiate an account deletion request directly within the NovaStores mobile app by navigating to Settings > Delete Account. Alternatively, any user can request account and data deletion by contacting us at [email protected].

Please note: Because NovaStores provides enterprise and point-of-sale services, if your account is designated as a "Store Owner" or is tied to active financial transactions and business records, immediate automated deletion may be restricted to prevent data loss for your business. In such cases, deletion will require administrative assistance or the prior closure of your associated store. We will securely erase your data except for information we are legally required to retain (such as transaction records for tax and compliance purposes).

10. Your Rights and Choices

Depending on your location and applicable law, you may have certain rights regarding your personal data, such as:

• Accessing and obtaining a copy of your personal data.
• Requesting correction or deletion of your personal data.
• Objecting to or restricting certain processing activities.
• Withdrawing consent where processing is based on consent.
• Porting your data to another service provider (data portability).

To exercise these rights in relation to a store you purchased from, please contact the relevant Store Owner directly. To exercise rights related to your NovaStores account or data we control, contact us using the details below.

11. Security

We use appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

12. International Transfers

NovaStores may process and store information in countries other than the country where you are located. When we transfer personal data internationally, we take steps to ensure an appropriate level of protection, such as using standard contractual clauses or other lawful transfer mechanisms where required.

13. Children's Privacy

NovaStores is not intended for children under the age of 16 (or a higher age where required by local law), and we do not knowingly collect personal data from children without appropriate parental consent. If you believe a child has provided us with personal data, please contact us so that we can take appropriate action.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top and, where appropriate, provide additional notice (such as on our website or by email).

Your continued use of NovaStores or any store powered by NovaStores after changes become effective means you accept the updated policy.

15. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, you can contact us at: