Privacy Policy

Last updated: May 2026

This Privacy Policy explains what personal data Noviera collects, how we use it, and your rights in relation to it. We are committed to handling your data with care and in accordance with applicable privacy law, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the California Consumer Privacy Act (CCPA).

1. Who we are

Noviera is the data controller responsible for the personal data collected through this platform. If you have any questions about how we handle your data, you can contact us through the platform.

2. What data we collect

We collect the following categories of personal data:

• Account data: Your email address and password (stored in hashed form) when you register for an account.
• Usage data: Information about how you use the platform, including which reports you view, search queries you make, and features you interact with. This is used to improve the platform and personalise your experience.
• Watchlist and preference data: Tickers, companies, and settings you save within the platform.
• Payment data: When you subscribe to a paid plan, payment is processed by our third-party payment processor. We do not store your full card details. We retain billing records including transaction amounts, dates, and subscription status.
• Communications data: If you contact us directly, we retain the content of that correspondence.

3. How we use your data

We use your personal data for the following purposes:

• To provide you with access to the platform and its features
• To manage your account and subscription
• To process payments and maintain billing records
• To send you account-related communications, including receipts, renewal notices, and security alerts
• To improve the platform based on how it is used
• To comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

4. Legal basis for processing (UK/EU users)

Where the UK GDPR or EU GDPR applies, we process your personal data on the following legal bases:

• Contract: Processing necessary to provide the service you have signed up for, including account management and billing.
• Legitimate interests: Processing necessary for us to operate and improve the platform, where those interests are not overridden by your rights.
• Legal obligation: Where we are required to retain or disclose data by law.
• Consent: Where we have explicitly asked for and received your consent, which you may withdraw at any time.

5. Data sharing

We share your data only with the following categories of third party, and only to the extent necessary:

• Infrastructure and hosting: Our platform is hosted on third-party cloud infrastructure. Your data is stored securely within those systems.
• Authentication: Account authentication is handled via Supabase, which processes your email and password credentials.
• Payment processing: Subscription payments are handled by a third-party payment processor. Their processing of your payment data is governed by their own privacy policy.

We do not share your data with any other third parties except where required by law or court order.

6. Data retention

We retain your account data for as long as your account remains active. If you delete your account, we will delete or anonymise your personal data within a reasonable period, except where we are required to retain it for legal or compliance purposes (such as billing records, which we may be required to retain for a number of years under applicable law).

7. Your rights

Depending on your location, you may have the following rights in relation to your personal data:

• Access: The right to request a copy of the personal data we hold about you.
• Correction: The right to request that we correct inaccurate or incomplete data.
• Deletion: The right to request that we delete your personal data, subject to our legal obligations.
• Portability: The right to receive your data in a structured, machine-readable format.
• Objection: The right to object to certain types of processing, including processing based on legitimate interests.
• Restriction: The right to request that we restrict processing of your data in certain circumstances.

California residents have additional rights under the CCPA, including the right to know what personal data is collected and the right to opt out of the sale of personal data. We do not sell personal data.

To exercise any of these rights, please contact us through the platform. We will respond within the timeframe required by applicable law.

8. Cookies and tracking

We use session cookies and local storage to keep you logged in and to remember your preferences. We do not use third-party advertising cookies or tracking pixels. You can clear cookies through your browser settings at any time, though doing so may affect your ability to remain logged in.

9. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Passwords are stored in hashed form and are never accessible in plain text. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. International transfers

Your data may be processed and stored on servers located outside your country of residence. Where data is transferred outside the UK or EEA, we ensure that appropriate safeguards are in place in accordance with applicable data protection law.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. Where changes are material, we will notify you by email or through the platform. Your continued use of the platform following any update constitutes acceptance of the revised policy.

12. Contact

If you have any questions, concerns, or requests in relation to this Privacy Policy, please contact us through the platform. If you are located in the UK or EU and believe we have not addressed your concern adequately, you have the right to lodge a complaint with your relevant supervisory authority.