Privacy Policy

NovallyAI (“we,” “us,” or “our”) is operated as a sole proprietorship by Amjad Arab (“the Operator”). This Privacy Policy explains how we handle information when you visit www.novallyai.com(the “Site”) or engage us for services.

We are committed to protecting your privacy and being transparent about our limited data practices.

1. Information We Collect

1.1 On the Website

The Site does not collect, store, or process personal data from visitors directly. We do not operate contact forms, newsletter signups, or analytics tracking on the Site at this time. We do not use cookies for tracking purposes.

Standard server logs may be retained by our hosting provider (Vercel Inc.) and DNS provider (Cloudflare Inc.) for security and operational purposes. These logs are governed by their respective privacy policies and are not accessed or used by us for marketing.

1.2 When You Contact Us via WhatsApp

The Site’s call-to-action buttons redirect you to start a conversation with us on WhatsApp. When you choose to message us:

  • WhatsApp (operated by Meta Platforms Ireland Ltd.) processes your phone number, name as it appears on your WhatsApp profile, and the content of your messages.
  • We receive and may retain this information to respond to your inquiry and continue our business communication.
  • Your use of WhatsApp is governed by WhatsApp’s Privacy Policy.

1.3 When You Become a Client

If we begin a working engagement, we may collect:

  • Your full name and contact details
  • Your business name, website, and business email
  • Information necessary to deliver our services (e.g., access credentials you voluntarily provide, content you share with us)
  • Payment and invoicing details (bank account information for wire transfers, Western Union details, or other agreed payment methods)

We collect this information directly from you. We do not purchase or acquire personal data from third parties.

2. How We Use Your Information

We use the information described above only to:

  • Respond to your inquiries and provide quotes
  • Deliver the services you have engaged us for
  • Send invoices and process payments
  • Communicate about ongoing projects and retainers
  • Comply with legal, tax, and regulatory obligations

We do not sell, rent, or trade your personal information. We do not use your information for automated decision-making or profiling.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area, United Kingdom, or another jurisdiction with similar laws, we rely on the following legal bases:

  • Consent — when you voluntarily contact us via WhatsApp or otherwise reach out.
  • Performance of a contract — when we provide services you have engaged us for.
  • Legitimate interests — for operating our business, communicating with prospects, and protecting our legal rights, where these interests are not overridden by your rights.
  • Legal obligation — when required by applicable law (e.g., tax records).

4. Data Sharing and Third Parties

We share information only with the following categories of third parties, and only as necessary:

  • Hosting and infrastructure providers: Vercel Inc. (hosting), Cloudflare Inc. (DNS and CDN).
  • Communication platforms: WhatsApp / Meta Platforms (messaging), email providers used for client communication.
  • Payment intermediaries: banks, Western Union, and similar wire transfer services used to receive payment.
  • Professional advisors: accountants or legal counsel, where strictly necessary.
  • Authorities: when required by valid legal process or to protect our rights.

We do not transfer your personal data to any party for marketing purposes.

5. International Data Transfers

We serve clients in the GCC region and globally. Information you share with us may be processed in the country where we operate and stored on servers operated by our hosting providers, which may be located outside your country of residence (including the United States and the European Union). Where required by law, we rely on standard contractual clauses or equivalent safeguards offered by these providers.

6. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy:

  • Inquiry messages that do not lead to engagement: up to 12 months, then deleted.
  • Active client records: for the duration of our working relationship plus 5 years for tax and legal compliance.
  • Financial records: as required by applicable tax law in our jurisdiction.

7. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Deleteyour personal data (“right to be forgotten”)
  • Restrict or object to certain processing
  • Withdraw consent at any time, where processing is based on consent
  • Data portability — receive your data in a portable format
  • Lodge a complaint with a data protection authority in your jurisdiction

To exercise any of these rights, contact us using the details in Section 10. We will respond within 30 days.

8. Data Security

We take reasonable technical and organizational measures to protect personal data, including:

  • Encrypted communications (HTTPS across the Site, end-to-end encryption on WhatsApp)
  • Access controls on devices used to store client information
  • Limited access to client data on a need-to-know basis

No method of transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Children’s Privacy

The Site and our services are intended for businesses and professional contacts. We do not knowingly collect personal data from individuals under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.

10. Contact Us

For any privacy-related questions or to exercise your rights:

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent version. Material changes will be communicated through the Site. Continued use of the Site after changes constitutes acceptance of the updated policy.

Get started

Ready to become
the AI's top pick?

Start with a free 30-minute AI visibility audit. We'll show you exactly where you stand today — and what it takes to become the recommended answer in your industry.

Free consultationNo commitmentResults-first