Privacy policy

1. Who we are

Nouvify (“we”, “us”) runs nouvify.com and is responsible for the personal data described here. You can reach us at hello@nouvify.com.

2. What we collect and why

• Your email address, to create your account and sign you in. If you sign in with Google, we receive only your email address from Google.
• Your room photos and the makeovers made from them, to create the makeovers and show them to you. They’re private to your account.
• Your plan and usage: your plan, how many makeovers you’ve used, and where you first came from (for example TikTok or Google), to run your plan and understand which channels work.
• Payment details are handled by Lemon Squeezy. We receive your subscription status, plan and payment amounts, never your card details.
• Usage statistics: pages visited, buttons clicked, the site that sent you, and actions like signing up or making a makeover. We count visitors without cookies, using a code that changes every day, so you can’t be followed from one day to the next. When you’re signed in, these statistics are linked to your account.
• Security data: to stop bots and abuse, we use Cloudflare’s bot check on email sign-in and keep short-lived counters of sign-in requests and free makeovers, linked to a scrambled (hashed) form of your email and network address, never the address itself.

We use your data to provide the service you asked for (our contract with you), to keep it secure and improve it (our legitimate interests), and to meet legal obligations. We don’t sell your data, show ads, or use advertising trackers.

3. Your photos and AI

Your photos are sent to our AI provider (Cloudflare Workers AI) only to create your makeover. We don’t use your photos to train AI models, and we don’t share or publish them. Only you can see them while signed in.

4. Who helps us

We use a few trusted providers, each only for its part of the service:

• Cloudflare: hosting, database, photo storage, AI processing, the bot check and cookie-free visitor statistics.
• Resend: sending sign-in code emails.
• Google: sign-in, only if you choose “Continue with Google”.
• Lemon Squeezy: payments, tax and receipts, as the merchant of record. Lemon Squeezy is responsible for the payment data it collects under its own privacy policy.

These providers may process data in the United States and other countries. They protect it under data protection agreements, including the European Commission’s standard contractual clauses where needed.

5. How long we keep it

• Photos and makeovers: deleted automatically after 90 days.
• Sign-in codes: valid for 15 minutes and deleted once used or replaced.
• Security counters: cleared within about a day.
• Usage statistics: kept for up to 13 months. When you delete your account, they’re no longer linked to you.
• Your account (email, plan, usage): until you delete your account.
• Payment records: kept by Lemon Squeezy as tax law requires.

6. Cookies

We use one cookie to keep you signed in, and a short-lived one (10 minutes) while you sign in with Google, to protect that step. Both are strictly necessary, so there’s no cookie banner. Our visitor statistics don’t use cookies. Cloudflare’s bot check reads technical signals from your browser to tell people from bots; it isn’t used for advertising.

7. Your rights

Depending on where you live, you can ask to see, correct, export or delete your personal data, or object to how we use it.

• Delete everything yourself at any time from your account page. It cancels any paid plan first, then deletes your photos, makeovers and account.
• For anything else, email hello@nouvify.com from your account’s email address. We reply within 30 days.
• If you’re in the EU or UK, you can also complain to your local data protection authority.

8. Security

Everything is sent over encrypted connections (HTTPS). Sign-in codes and sessions are stored only in scrambled (hashed) form, photos are only visible to their owner, and there are no passwords to steal.

9. Children

Nouvify isn’t meant for anyone under 16, and we don’t knowingly collect their data.

10. Changes

If we change this policy in a significant way, we’ll tell you by email or on the site before the change takes effect.