1. Scope
This notice applies to the Novrane website and the payment-recovery service we are developing for subscription businesses. During early access, product availability may be limited and features may change as the service is tested.
2. Information we process
Depending on how you interact with Novrane, we may process:
- Account information, including name, business email, and authentication data.
- Business settings, recovery preferences, and connected Stripe account references.
- Failed-payment workflow data such as invoice, customer, subscription, and payment-intent identifiers.
- Customer contact details supplied through Stripe, including name and email address.
- Recovery events, email-delivery activity, timestamps, status changes, and audit records.
- Technical information needed to secure and operate the service, including logs and device or network data.
On the public website, Novrane uses Vercel Web Analytics to understand anonymized page views and broad visitor trends, such as pages viewed, referrers, country, device, operating system, and browser. Vercel Web Analytics is designed not to use cookies.
Novrane does not ask customers to enter complete card numbers into Novrane. Payment method updates are intended to take place through Stripe-hosted experiences.
3. How we use information
We process information to:
- Provide, secure, troubleshoot, and improve the service.
- Detect failed payments and coordinate recovery messages requested by the account owner.
- Stop recovery activity when payment succeeds or an account owner pauses a sequence.
- Respond to support, security, privacy, and legal enquiries.
- Prevent abuse and comply with applicable legal obligations.
4. Service providers
Novrane is designed to use specialist providers to operate the service, including Stripe for payment data and hosted customer experiences, Supabase for authentication and database services, Resend for transactional email, and a cloud-hosting provider for the web application and Vercel Web Analytics. Each provider processes information under its own terms and privacy commitments.
5. Data ownership and business customers
A subscription business using Novrane determines which customer recovery activity it initiates and is responsible for the lawful use of its customer data. Novrane acts as a service provider for that business where applicable. Requests relating to a specific subscription should normally be directed to the business that provides it.
6. Retention and deletion
Information is retained only for as long as reasonably needed to provide the service, maintain security and audit records, resolve disputes, and meet legal obligations. Account owners may request deletion, subject to records we must retain for security or legal reasons.
7. Security and international processing
We use administrative and technical safeguards intended to protect information, including access controls and tenant-level data separation. No online system can be guaranteed completely secure. Our providers may process information in countries other than the country where it was collected, subject to their legal safeguards.
8. Your choices and rights
Subject to applicable law, you may ask to access, correct, export, restrict, or delete personal information associated with you. You may also object to certain processing or withdraw consent where consent is the basis for processing.
9. Contact
Privacy questions and requests can be sent to hello@novranehq.com.