Privacy Policy
This policy explains which personal data we process on novasoft.ge, why and on what legal basis, who we share it with, how long we keep it and what rights you have. It follows the Law of Georgia on Personal Data Protection and, for visitors in the European Union and the European Economic Area, the EU General Data Protection Regulation (GDPR).
01Who is responsible
The controller of your personal data is NovaSoft (novasoft.ge).
- Email: info@novasoft.ge
02What we collect and why
Giving us your data is voluntary and not required by law or contract. Without contact details we cannot answer your request or prepare an offer. The chat works without personal details; please do not enter any.
a) Contact, consultation and call-back forms
This also covers the brand project, AI connection and voucher forms.
- Data
- Name, phone, email, company name (voucher form), the contact channel you choose (phone, WhatsApp, Viber or video call), your message, the service or time you picked, and the page the form was sent from. We do not store your IP address or browser details with the form.
- Purpose
- Answering your request, scheduling a consultation, preparing an offer. The request is stored in our database and a notification goes to our business mailbox.
- Legal basis
- Steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)) and our legitimate interest in answering enquiries (Art. 6(1)(f)).
- Retention
- 24 months after the last contact; if a contract follows, for the contract term plus the retention period required by law.
b) Q&A form (/faq)
- Data
- The name you enter and your question.
- Purpose
- Answering your question. Selected questions are published on the page with their answer and the name you entered, so use a nickname if you prefer.
- Legal basis
- Our legitimate interest in running a public Q&A (Art. 6(1)(f)). You can ask us to remove a published entry at any time.
- Retention
- While the entry is published, or until you ask us to delete it.
c) Nova, the AI assistant (chat panel)
- Data
- Your messages and Nova's replies, a conversation ID, time, language, IP address and browser details (user agent). In our admin log we derive your approximate country and city from the IP address.
- Purpose
- Generating replies, checking service quality, security and abuse prevention (for example message limits). Messages in other languages are machine-translated into Georgian for our staff.
- Legal basis
- Our legitimate interest in answering enquiries and protecting the service (Art. 6(1)(f)); where the chat is about an order, steps before a contract (Art. 6(1)(b)).
- Retention
- 12 months
Please do not send sensitive data in the chat: health information, national ID numbers, bank card details or passwords.
d) Analytics (only with your consent)
- Data
- Pages viewed, time and length of the visit, device and browser type, approximate location (country/city), pseudonymous identifiers (the _ga cookies).
- Purpose
- Usage statistics to improve the site. Tool: Google Analytics 4, loaded through Google Tag Manager.
- Legal basis
- Your consent (Art. 6(1)(a)), given in the cookie banner and withdrawable at any time.
- Retention
- In Google Analytics 14 months; cookie lifetimes are listed in the Cookie Policy.
e) Technical logs
- Data
- IP address, time of the request, the address requested, browser type, error codes.
- Purpose
- Running the site, security and troubleshooting. The hosting server creates these logs automatically.
- Legal basis
- Legitimate interest (Art. 6(1)(f)).
- Retention
- 30 days
f) Record of your cookie choice
- Data
- A random identifier, the time, the policy version and your choice. We do not store your IP address or browser details with it.
- Purpose
- Being able to show that consent was given (GDPR Art. 7(1)).
- Legal basis
- Legal obligation and legitimate interest (Art. 6(1)(c) and (f)).
- Retention
- 3 years
g) Price calculator (upcoming)
When we launch the price calculator, sending an enquiry may collect your project parameters and contact details. Those enquiries follow the same rules as the contact forms (point a). We will update this policy before the calculator goes live.
h) Meeting and call bookings (Projects pages)
- Data
- Name, email and/or phone number, website or company (optional), the project and package you chose, whether you want a meeting or a free 30-minute call, your preferred times and time zone, and your message. We do not store your IP address or browser details with the booking. No payment is taken on the site.
- Purpose
- Arranging the meeting or call and preparing an offer. The booking is stored in our database and a notification goes to our business mailbox.
- Legal basis
- Steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)).
- Retention
- 24 months after the last contact; if a contract follows, for the contract term plus the retention period required by law.
i) Email
If you write to info@novasoft.ge, we process your email address and the content of your message to reply (Art. 6(1)(b) or (f)). Retention: 24 months.
03About the AI chatbot
Nova is an artificial-intelligence assistant, not a person. Its replies are generated automatically and may contain mistakes. They are not legal, financial or other professional advice. Final terms such as price, deadlines and contracts are always confirmed by our team.
To prepare a reply, the text of your messages is sent to our AI service provider: Google LLC (Google AI model API). The provider processes the text on our behalf under its API terms. The chat makes no decisions that have legal or similarly significant effects on you.
So that a conversation can continue across pages, your browser keeps the conversation ID and messages in local storage (localStorage). You can remove them with the chat's "Clear history" button or by clearing your browser data. To have the server-side log deleted, send us a request (see "Your rights").
04Cookies
We use strictly necessary cookies to run the site. Functional and analytics cookies are used only with your consent. We do not use advertising cookies. The full list is in the Cookie Policy.
05Who we share data with
We do not sell personal data. We share it only with providers who work on our behalf (processors), and only as far as their task requires:
- Hosting: ProService (proservice.ge), Georgia: web server, database, technical logs.
- Google: Google Workspace (our email), Google Analytics 4 and Google Tag Manager (only with consent), Google Maps (only with consent).
- AI service: Google LLC (Google AI model API): Nova's replies and translation of chat messages.
- IP geolocation service: ipwho.is (fallback: ipapi.co), to show the country in our chat log. Only the IP address is sent.
- Content delivery networks: cdn.tailwindcss.com and cdnjs.cloudflare.com deliver page styles and scripts, cdn.jsdelivr.net delivers the image slider on blog and news articles, and images.unsplash.com serves a few illustrations. When your browser downloads these files, it sends them your IP address. Fonts are hosted on novasoft.ge itself.
- Public authorities: only where the law requires it.
06International transfers
Our server is in Georgia. Some providers, including Google, process data in the United States and other countries. In those cases we rely on the safeguards the provider offers: the European Commission's Standard Contractual Clauses (SCCs) and, where the provider is certified, the EU–U.S. Data Privacy Framework. Data from the EU/EEA reaches us directly from you when you use the site.
07Your rights
- to be informed and to access your data, including a copy;
- to have inaccurate data corrected (rectification);
- to have your data erased ("right to be forgotten");
- to restrict processing;
- to object to processing, including processing based on legitimate interest;
- to data portability, in a structured, machine-readable format;
- to withdraw consent at any time (for cookies, via "Cookie settings"). Withdrawal does not affect processing that took place before it;
- to lodge a complaint with a supervisory authority (see below).
Send your request to info@novasoft.ge with the subject "Privacy request". We may ask you to confirm your identity. We answer free of charge within the time limits set by law; under the GDPR, within one month at the latest.
08Supervisory authority and applicable law
We process personal data in line with the Law of Georgia on Personal Data Protection. The supervisory authority in Georgia is the Personal Data Protection Service of Georgia.
If you are in the European Union or the European Economic Area, the GDPR applies to the processing of your data where applicable, and you can complain to the data protection authority of your country.
09Security
Connections to the site are encrypted (HTTPS). The database is reachable only from our own server, and the admin panel requires a login. No system can guarantee complete security over the internet, but we take reasonable technical and organisational measures.
10Children
The site and Nova are not intended for people under 16. We do not knowingly collect children's data; if you notice any, tell us and we will delete it.
11Changes to this policy
We update this policy when our services or the law change. The current version and date are shown at the top of this page. If the cookie rules change, the cookie banner appears again and asks for your choice.
12Contact
For any privacy question, write to info@novasoft.ge.